Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier:          RE+dW51LSk3Yd3gok/UI1ZC02LE1josTTDYNKuTY1CQ=
Subject key identifier:   BD:20:72:F6:8B:53:24:C7:AA:08:BF:97:B6:84:10:3D:88:3C:B4:D1
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       01962E61DA8F7943DC664F0CDDCB9CBC5111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: KoyF6a1+UjTcFu/E2bHAOFQngwvAEPK5D14IF2qiLXI=)
                          2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:8f:79:43:dc:66:4f:0c:dd:cb:9c:bc:51:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=bd2072f68b5324c7aa08bf97b684103d883cb4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:7e:c5:3d:ee:04:ab:b4:58:98:3b:a2:81:
                    f6:49:15:19:f9:2e:28:3d:62:47:c2:0c:7b:e9:bc:
                    79:af:23:9d:ae:ef:9f:61:fb:d5:90:0e:e2:46:d1:
                    ff:36:0d:79:7a:16:63:fe:43:f8:f7:50:3a:df:96:
                    ae:6a:b3:6f:89:ad:63:ed:eb:90:09:00:36:10:96:
                    02:f0:95:aa:eb:d5:85:6a:cd:c6:86:7f:b1:58:01:
                    7e:64:2f:4b:8b:ab:c8:b4:d2:56:2c:95:08:31:97:
                    0a:a5:6d:43:b1:27:f0:b7:00:eb:19:a8:36:21:00:
                    22:52:2b:93:90:59:3c:19:81:ea:23:0d:96:54:a4:
                    7c:3b:eb:50:7a:26:39:63:f8:30:27:3a:64:7d:82:
                    c7:c1:fc:fc:17:f0:bd:80:c1:68:16:4e:8a:c6:6e:
                    3c:17:22:b1:19:f1:37:e7:b3:da:aa:2e:fa:58:69:
                    0f:3c:32:4e:ec:5a:ff:d3:a7:1e:35:40:cb:ea:dc:
                    db:ef:59:6c:b2:fc:77:ef:c5:55:7a:bd:1d:31:16:
                    18:4d:7e:2e:00:eb:46:3c:e6:d4:2c:2f:7e:58:8a:
                    ba:8d:00:5f:3b:d0:d9:71:1d:8e:41:be:2d:20:24:
                    f5:b6:a1:63:ca:43:65:a1:04:5b:e0:45:8d:76:a0:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:20:72:F6:8B:53:24:C7:AA:08:BF:97:B6:84:10:3D:88:3C:B4:D1
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:8f:e5:1c:ab:2a:84:22:e9:e1:04:14:2f:ae:14:2a:fd:
         73:c3:91:75:9f:f3:62:f1:52:ad:14:09:3e:79:43:72:63:72:
         6f:1f:34:02:96:e1:1b:fa:d7:1c:a5:9c:9d:a7:95:91:9e:93:
         09:f0:f3:0b:9a:eb:35:c4:af:7b:80:88:ed:5e:e0:8b:1d:ee:
         e9:90:b3:56:fe:09:de:62:87:6c:f1:ec:05:b0:f8:db:bd:d3:
         79:4c:82:f1:16:21:9a:78:b9:d7:91:4f:bb:cb:12:80:6c:4a:
         c8:c7:a2:0d:96:6a:59:e7:b5:e6:2c:5a:c2:0d:70:08:10:fb:
         f8:63:2f:5f:5b:7b:ab:aa:e4:21:a6:70:87:f2:f0:dd:de:a4:
         ef:69:33:d0:50:2d:e0:ff:94:0d:e8:07:d8:b4:6a:b5:d7:36:
         78:ed:ee:67:b0:c5:74:8e:74:be:5b:ec:6e:97:00:75:ae:c3:
         b7:d6:09:b5:94:c0:d8:a1:32:c3:57:58:53:f9:fb:c5:1e:2a:
         93:01:7c:31:8c:3c:7a:ff:f9:23:80:4c:d9:82:2d:78:1a:a6:
         02:c3:1d:d1:d7:c7:52:8f:b7:d5:f5:c8:2b:c5:75:11:e9:b2:
         73:e8:41:28:cb:e5:09:5a:2c:16:ed:94:f3:2a:80:a4:75:51:
         d2:cb:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----