Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File:                     2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier:          rqMLhQPs20uLHWc77Z72ixLyTVvjDxg7EPLuW1wzqb4=
Subject key identifier:   86:91:2B:21:B0:38:3E:7F:5F:B0:8D:18:1D:FD:F6:9A:EE:69:A7:11
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer:       /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial:       01962E989D20ECC70A08EA47599E1DF154E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number:          07CB
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: Yb9+hhrQldfY94P/w5zpBeWS1dsojqbhJLDB0mogTyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9d:20:ec:c7:0a:08:ea:47:59:9e:1d:f1:54:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=86912b21b0383e7f5fb08d181dfdf69aee69a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:86:46:a0:fc:0f:5e:eb:6a:90:a0:18:bc:
                    bf:22:c3:e3:8a:db:ea:02:a8:e9:5c:4f:b0:b5:d7:
                    f1:1d:8a:cf:86:52:40:d5:93:75:df:fa:bd:8d:9b:
                    87:a7:82:34:ec:99:f0:3e:9a:a1:fa:33:3e:94:0e:
                    d2:8b:8f:35:ba:e5:bb:d8:08:50:80:ed:fb:41:76:
                    22:9c:be:e4:98:0c:e0:e6:be:7b:07:58:31:51:44:
                    60:82:70:e3:fb:78:9b:14:87:71:79:9f:a8:68:25:
                    d0:89:16:05:ee:46:2b:8e:2a:d1:73:13:cd:7e:16:
                    b4:bb:38:2a:40:7b:35:cd:cb:b9:2b:28:cd:fe:89:
                    1b:c9:5b:01:b7:f4:4c:79:5a:00:e8:6c:5e:dd:47:
                    57:c3:97:76:c7:c0:07:15:f7:9a:d1:fc:c4:f2:9e:
                    89:ba:7e:bc:ff:c1:47:56:18:0d:47:16:4b:86:dd:
                    ea:81:b6:a4:8c:43:c2:e7:f1:dd:c4:b7:40:81:02:
                    0b:d2:4e:4a:d9:9d:d5:35:82:55:2f:a4:dd:32:64:
                    7e:c3:d4:e4:e9:00:29:7b:b7:4f:7d:1e:f4:43:88:
                    d6:25:9c:9c:81:80:01:be:1a:6e:0b:2d:b1:1b:d1:
                    f1:f4:1e:d6:0a:9d:46:bc:79:92:ed:2d:fc:7a:38:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:2B:21:B0:38:3E:7F:5F:B0:8D:18:1D:FD:F6:9A:EE:69:A7:11
            X509v3 Authority Key Identifier:
                keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:a6:a8:9b:81:99:06:af:bb:bd:67:3d:69:b1:aa:3e:52:
         d5:fd:54:13:51:85:76:82:e6:84:b9:6e:31:ab:e8:97:4a:eb:
         0e:62:df:2f:2a:07:f6:90:36:85:98:85:24:2e:9d:5e:10:c1:
         94:3c:b5:8d:d3:f2:7f:86:7e:5c:b7:0e:64:3c:96:10:0c:cc:
         b6:d0:1a:c1:ee:b3:a7:aa:5c:58:b8:1f:b9:20:ac:92:96:01:
         45:a7:cf:12:d3:0a:00:5d:b9:fd:4b:03:0c:d5:f5:d5:ab:e3:
         0c:fe:52:2d:bd:93:9d:27:7f:15:87:01:ae:70:5d:be:2d:cb:
         8d:29:de:b5:6f:7d:d9:87:8f:55:16:a3:00:20:9d:df:cd:44:
         91:b6:0b:8c:63:ee:3a:57:71:ca:33:5a:a1:a3:f9:36:94:38:
         58:04:f3:40:bd:f7:e9:6b:f3:df:4d:58:f2:f6:4b:fa:39:71:
         83:17:cd:94:87:c8:08:f3:b1:00:7a:fc:d8:67:3c:d9:4d:a3:
         a9:82:42:2a:75:5b:f4:6b:b2:66:df:f2:e7:22:a2:11:c8:9f:
         4c:bf:95:1b:b9:4b:69:78:0b:8a:23:87:73:2b:17:5c:29:f8:
         fa:7d:db:02:ff:f2:3d:b1:39:3c:13:2e:b4:ed:fb:18:5f:f1:
         08:37:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----