Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File:                     8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier:          DCrxjxGTlJ3CWmZDmiRmOttvGqUbZPvb9qK0LjZJUYA=
Subject key identifier:   55:25:39:95:00:A5:95:2E:22:C9:AB:6A:88:14:F3:CB:76:BB:0C:58
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer:       /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial:       01962F74C4C8F158C6603A333BD4B05BECE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: iNjFWLLZt5s4h4dUeL7bk/+piiXGiGyGQ7Z72VKagAQ=)
                          2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:c8:f1:58:c6:60:3a:33:3b:d4:b0:5b:ec:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=5525399500a5952e22c9ab6a8814f3cb76bb0c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:c5:92:b8:0d:6c:be:dd:11:c2:6c:15:9c:
                    99:3c:66:18:a9:77:13:4a:a4:53:84:23:35:26:49:
                    23:2a:5a:b3:41:d4:41:2c:2b:af:d0:81:c5:c4:2b:
                    8a:ba:18:56:1d:7a:c4:79:da:5c:ff:58:a5:23:ec:
                    73:89:7e:31:46:db:5e:de:fa:94:24:a0:02:40:6e:
                    fc:fb:96:14:49:11:af:bc:7c:d6:90:62:82:15:e9:
                    99:0a:ed:89:32:df:05:df:24:dd:6d:2a:eb:97:b5:
                    dd:bd:08:17:ac:c6:d4:d5:e9:91:b5:63:8d:43:b2:
                    26:3b:fb:fe:43:ec:a8:a3:ec:00:21:1e:65:c6:d1:
                    60:5b:67:c0:6c:6d:b8:89:7e:d2:9e:8b:53:fc:0f:
                    f4:97:1e:e9:72:93:56:dd:56:82:0e:e5:3d:74:28:
                    5e:61:61:7a:c5:ef:2b:67:8f:47:04:f8:ff:66:d5:
                    c4:70:32:8a:9c:5d:26:03:b9:0f:aa:c7:15:df:7e:
                    d4:ad:13:a3:5e:25:b8:6c:63:93:8d:43:22:3e:f3:
                    a1:22:2d:8a:69:1d:86:1c:e5:c0:6c:c3:ae:73:3a:
                    cd:43:f1:dc:c1:6e:d8:a0:dd:50:7e:b1:92:1a:fc:
                    c1:2b:e7:de:99:53:1e:95:f3:f5:54:aa:6c:27:94:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:39:95:00:A5:95:2E:22:C9:AB:6A:88:14:F3:CB:76:BB:0C:58
            X509v3 Authority Key Identifier:
                keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:74:72:bc:d9:3e:26:65:05:da:82:6e:f4:62:b0:bf:62:
         17:16:77:32:8f:24:cc:78:5e:c3:5d:23:b9:75:1b:28:7a:e1:
         fc:e3:d1:49:b9:4b:d8:fc:3d:77:b2:75:3f:fc:09:c2:e6:5a:
         ad:af:2b:4e:f4:9b:4e:0e:f0:9c:c7:5d:63:3a:cc:5d:15:e6:
         cc:33:66:1a:ee:84:df:8b:82:3f:f8:a7:7f:74:90:93:66:06:
         19:64:21:60:0b:ba:8f:68:a3:0d:88:53:5d:28:12:d4:b3:42:
         c5:20:c7:43:c5:ab:9e:aa:29:b4:7c:e0:2c:51:ee:6b:65:9d:
         61:d2:0c:8a:77:3a:4b:28:ed:c3:7e:e8:de:bf:3c:9c:7f:50:
         95:f1:cf:c0:99:7b:e0:1c:e2:97:bf:f6:d2:ad:28:5b:82:ec:
         ec:10:0b:52:d6:d8:23:24:ea:d6:3a:2d:ce:71:a6:69:12:b3:
         f4:fb:6a:06:76:19:10:86:b9:df:07:2a:d7:88:5f:2e:e4:22:
         ed:fe:bd:fc:2d:a6:07:e1:9a:94:4d:7e:7e:b5:95:a1:ff:1b:
         29:a6:b7:22:1a:48:8c:62:9d:97:7a:b5:97:12:aa:b4:1e:e1:
         23:0a:49:da:b9:2c:5a:53:0f:3c:08:1e:49:4e:45:06:1f:c4:
         d6:4d:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----