Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          qTHfX5vJ0ayyKVz+U50exHcAHpY3eOf8wvXKwTrW7dA=
Subject key identifier:   31:ED:1F:10:22:D3:50:23:62:86:43:DA:30:ED:43:75:C8:B4:55:05
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       01962E2AD93356FC34E08B04B26DEC4F7B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          0BB6
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
                          2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: TuwqNkjeMyaNDhvWOIoBcyIrqposcWRa74MtmKo8gJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d9:33:56:fc:34:e0:8b:04:b2:6d:ec:4f:7b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=31ed1f1022d35023628643da30ed4375c8b45505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:ee:9a:23:98:dd:c8:c0:1a:91:66:e1:ed:
                    52:c9:af:a3:2c:fe:aa:ba:cd:55:57:16:b6:98:a0:
                    1d:8f:98:ab:06:3d:fe:2c:4b:5a:13:68:e9:5a:88:
                    95:8d:73:72:2c:99:cc:13:8d:c2:e3:db:47:81:17:
                    32:91:fc:71:e6:9f:ce:52:86:0d:08:5e:1e:e2:8b:
                    3f:1a:65:f4:f2:64:5b:7c:8a:23:8a:c7:95:e1:da:
                    6b:db:e3:46:9d:15:16:4d:ee:ff:c4:a6:0d:53:e7:
                    da:f0:4d:c3:09:82:65:58:32:ac:97:d7:49:b4:40:
                    05:d8:5f:9f:48:d7:58:44:1d:30:06:db:7e:1f:75:
                    19:a5:7a:e1:e5:4d:07:01:b3:7f:b6:65:82:54:07:
                    e5:54:15:f0:41:02:e0:86:c6:31:cb:c6:78:1b:51:
                    f4:94:8a:03:a8:85:fd:cc:58:c1:60:74:45:c1:6a:
                    18:75:f8:bd:49:ec:63:ef:5f:84:2c:c8:b7:b2:38:
                    d0:28:45:39:c8:f4:30:e2:2f:18:05:77:47:5f:46:
                    2f:2d:48:8c:17:c6:56:c8:8c:2b:3d:08:2c:70:e0:
                    b7:50:40:4e:ec:95:0d:5a:d6:b5:f7:5b:b2:f5:53:
                    33:28:49:a6:6f:ca:e5:be:33:82:64:ca:70:a8:3a:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:ED:1F:10:22:D3:50:23:62:86:43:DA:30:ED:43:75:C8:B4:55:05
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:40:a0:0a:49:1b:5b:52:78:f4:3c:66:df:1f:00:9f:d0:
         77:2c:a5:67:2b:ae:ca:51:8e:a6:3a:2a:d9:5c:a1:60:4a:fa:
         ff:f5:5a:e0:88:ec:0e:b8:56:5d:52:4e:dc:f9:4f:15:12:2a:
         6a:73:7f:89:c2:f9:8c:fd:79:bf:ec:c1:02:49:05:95:ef:00:
         ce:17:61:a8:b9:a4:9e:40:6b:20:6b:fc:6d:d8:52:e5:b5:b4:
         23:0c:20:ad:b4:c9:4e:2d:88:49:3a:82:87:b4:00:02:7a:8a:
         08:1c:dc:2c:6d:e7:08:6a:92:57:e3:c4:d5:0b:c8:9d:7b:b7:
         9a:a0:91:62:a5:12:fc:ab:24:dc:64:d2:a9:28:b6:51:21:7c:
         d6:30:9d:c6:ef:8c:d5:7f:9f:8a:66:56:e1:63:38:1b:86:17:
         06:3a:c3:64:fe:9d:58:5e:94:59:60:80:1c:ef:33:39:cf:cd:
         bf:19:7b:78:1d:a8:5c:6a:c3:2a:00:51:57:d3:8c:85:b2:e6:
         51:f9:53:3a:77:62:c7:a3:d7:71:38:b6:bc:00:7f:da:7c:e5:
         24:3f:54:01:3b:5e:cf:2a:01:7b:70:5a:4a:59:fb:bd:96:8a:
         40:d9:85:45:6a:73:e3:aa:bd:2d:62:81:2c:da:e8:8c:f2:24:
         99:24:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----