Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File:                     7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier:          Sfd9aYKPay6E9ptuxOfaLbmvBLpvkZGgI/UNfhnG0S8=
Subject key identifier:   EC:F2:54:D5:3A:89:77:34:BC:00:29:BD:3F:14:F9:1C:44:EF:76:D9
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer:       /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial:       01962F7453125542C7AC3F161793AAC3FBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: qks63mLs03LXRTyH4rsIeeTD3P2OrRe4hl/181/2XIY=)
                          2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:12:55:42:c7:ac:3f:16:17:93:aa:c3:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=ecf254d53a897734bc0029bd3f14f91c44ef76d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:d0:78:0e:a6:71:c7:f9:48:6a:2b:91:dd:
                    be:90:05:aa:34:66:2a:b0:1d:2b:09:01:21:8d:bd:
                    78:80:85:58:08:6a:95:72:16:11:25:37:fd:f3:ca:
                    63:ab:35:96:29:75:5c:e1:01:dc:b8:cc:84:4b:74:
                    85:a7:2f:a0:0d:f9:a5:42:35:f1:c4:15:7c:ee:cc:
                    ae:b9:4c:09:1e:27:ae:68:9d:5e:1d:68:78:61:cb:
                    28:e1:fa:d1:a9:a0:01:48:7f:f6:b2:85:05:7e:82:
                    9d:55:23:48:54:da:87:32:33:7d:74:b1:4f:d5:73:
                    b5:2c:ba:3d:0e:6d:c5:89:17:f2:8b:c4:4a:cf:c6:
                    22:f5:d2:ff:c8:09:c2:60:95:40:c9:dc:db:95:45:
                    8f:69:14:f1:94:29:34:93:c1:ad:8d:70:48:1f:dc:
                    d5:b7:bc:b8:da:f9:17:9c:4e:8c:00:b2:29:94:cb:
                    62:92:5d:11:33:a6:ee:fd:ba:99:a2:25:db:0c:52:
                    12:70:08:ee:07:cc:56:e7:d7:65:92:d6:a3:23:0c:
                    a7:a6:93:ca:ba:d6:0c:3a:97:35:a4:c2:56:2c:fd:
                    c4:02:1e:ff:8e:57:ec:6b:db:21:73:8a:88:88:e2:
                    48:38:66:01:ca:18:a4:7b:0c:b0:87:66:60:43:d2:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:54:D5:3A:89:77:34:BC:00:29:BD:3F:14:F9:1C:44:EF:76:D9
            X509v3 Authority Key Identifier:
                keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b1:da:55:4a:9c:d3:c6:93:5a:8e:51:8a:c8:d1:5b:be:e2:
         9a:e0:2a:cd:4d:de:5e:a4:e0:5f:11:f3:ec:09:cd:54:32:97:
         8c:e4:06:75:40:f7:a0:ae:ec:c8:74:2e:50:d9:16:77:c6:31:
         ab:69:7f:9d:e9:53:bb:35:97:5e:6f:54:44:45:fa:54:54:97:
         b6:68:16:80:b8:3b:45:d5:8d:de:6f:47:60:3c:5e:da:fa:09:
         95:8c:1c:28:8c:5a:07:b0:3e:4c:92:c8:4b:10:6f:ed:e2:2d:
         38:14:0e:e7:f5:f6:d3:d5:53:0f:92:30:2a:e8:b2:41:5e:85:
         7e:fd:a8:cd:41:99:2e:d2:4e:d0:4d:bd:22:f5:89:a3:7f:34:
         d3:c6:06:5c:e9:0e:3a:c4:c1:8f:f1:e1:71:15:30:1c:44:a6:
         28:9d:57:a7:5d:17:41:8a:23:b2:31:79:38:ca:eb:f1:81:92:
         4a:6f:41:5f:f9:2b:01:15:86:62:76:93:6b:55:4d:75:ab:c3:
         18:e1:c0:6d:0c:27:07:a6:4d:9a:03:16:6a:37:cb:22:0b:ec:
         a5:93:12:45:b7:56:4a:a7:8c:4a:ac:b9:b4:d1:d3:3e:43:fb:
         95:9b:88:00:df:c8:b1:c6:52:a6:43:8d:7d:ee:ff:62:1b:02:
         8b:2f:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----