Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          mRwMQFc7UMH07t4P1/wFNGtn1R7COKHcMYQg70bmY6U=
Subject key identifier:   E7:78:93:55:30:5D:D7:EE:C6:36:04:4E:40:40:7A:96:DC:BB:A5:B5
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       01962E988D1D01322CEAD81DE88A702E1583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          03A1
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: J10ewG2bbpNegVmoRdGTGUawNuEH936aAU2zv4nsVXc=)
                          2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
                          3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:1d:01:32:2c:ea:d8:1d:e8:8a:70:2e:15:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=e7789355305dd7eec636044e40407a96dcbba5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:76:5a:0b:49:c2:ce:a4:f7:ca:94:5e:dc:
                    36:9b:64:02:65:34:1f:9e:c0:ba:46:f3:e3:17:82:
                    0d:68:64:c3:15:2b:da:2f:b0:8b:f8:6e:dc:be:53:
                    42:c9:c0:62:b5:be:9b:3f:cc:8a:ff:a7:89:13:05:
                    80:7e:c7:03:60:80:71:51:e7:e2:43:50:46:53:08:
                    3b:5e:66:c5:ff:b4:dd:4b:63:a9:56:22:f1:af:a8:
                    89:ca:b4:d8:38:83:85:2b:9e:bc:4f:f7:cf:18:00:
                    26:b0:00:c8:77:66:a0:1c:1a:8e:88:a6:8a:bb:09:
                    64:c1:a5:e7:5d:69:f8:3a:cd:a3:6e:a4:44:b8:61:
                    05:74:1d:ec:eb:cf:26:22:ce:c8:46:50:75:9f:b7:
                    38:0f:01:1a:68:27:1f:66:5c:a1:4d:07:97:e6:28:
                    ac:0f:68:2b:02:45:b1:ca:ba:5f:15:4f:72:11:2a:
                    3d:1c:d1:20:27:51:ed:d0:4c:b7:ca:cb:5d:0c:b2:
                    93:fe:32:85:5f:e4:c8:10:55:83:ec:dd:21:a3:68:
                    00:f9:4f:2b:74:0e:82:6c:7f:bb:95:98:46:ae:3a:
                    10:3b:43:a7:91:d1:b4:47:63:e0:76:1c:81:f8:a3:
                    6b:4d:04:5d:d8:69:d6:ec:ad:ee:ff:f3:32:ae:34:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:93:55:30:5D:D7:EE:C6:36:04:4E:40:40:7A:96:DC:BB:A5:B5
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:f3:98:e7:f3:4e:6c:96:d7:f9:e0:06:8e:67:1e:12:40:
         28:ed:56:89:0b:14:2f:60:c0:06:fe:7c:f0:6b:f9:a1:96:77:
         94:bb:0d:20:a9:03:59:d0:06:ae:c1:7d:fc:0c:d6:53:72:06:
         98:83:d9:8e:51:58:27:d5:aa:91:07:59:03:42:89:1b:ec:4c:
         8f:c4:11:25:58:36:05:ba:66:58:34:4b:a6:3b:e5:ed:df:fe:
         8f:ff:06:2c:ab:7e:e3:f4:30:2c:25:51:de:30:00:b6:9c:df:
         26:d9:ce:70:1e:d1:bc:c1:d4:4a:a9:e1:bf:86:1a:47:f6:74:
         30:15:4d:4a:bf:83:a8:34:8a:c5:54:bd:56:7e:97:d9:86:f2:
         7f:d2:ff:32:5a:7a:64:0d:4f:bd:cc:f0:77:2f:63:79:fe:44:
         fc:a7:56:c2:d2:83:3c:91:90:37:79:ab:e8:47:85:1e:24:27:
         d2:98:bc:ed:3b:c4:4a:54:7a:21:01:73:6c:32:73:5e:8d:b4:
         32:b2:3c:1e:9b:32:60:87:8a:ca:19:92:89:31:cd:81:da:37:
         44:0f:8c:1e:5c:46:0a:ca:eb:15:51:8b:9b:c7:cc:09:5f:74:
         d7:9c:8d:76:df:72:61:6a:2a:f9:14:71:64:bc:5d:87:d9:01:
         e8:78:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----