Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File:                     CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier:          Fop7GpMdyybAFYt7+Y6KwiJNj7FG+1XbyNJICn2UmEo=
Subject key identifier:   7E:F6:98:66:C2:2A:87:3D:6B:25:8D:8A:DD:E0:D0:4C:00:06:8E:E6
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       01962F74D44309D11CCD600CF4E32BCF5906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number:          07B7
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=)
                          2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: CGgBzfnlneTS2YCZodyA9SIqoVjLzazaHP7n1M5o25o=)
                          3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=)
                          4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=)
                          5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=)
                          6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=)
                          7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=)
                          8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=)
                          9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=)
                          10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d4:43:09:d1:1c:cd:60:0c:f4:e3:2b:cf:59:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=7ef69866c22a873d6b258d8adde0d04c00068ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:78:f5:5a:db:9b:a7:29:44:09:ab:34:cc:
                    9f:87:9d:2e:23:7d:3b:37:cd:67:58:91:b9:04:11:
                    f3:80:40:d4:4b:ec:5f:a7:b2:30:6e:52:09:e1:43:
                    2a:a7:bf:b6:be:d9:ae:77:23:5b:5e:1f:f8:74:04:
                    73:b5:ae:bf:8d:e6:0a:29:f7:44:81:37:5b:09:53:
                    ff:33:f1:94:9d:84:7f:01:82:f1:56:c9:a6:45:e9:
                    3c:5b:1f:cf:07:bc:29:02:76:8e:d7:56:8a:0a:57:
                    eb:21:40:c3:69:94:e0:78:e1:3a:d2:7a:23:16:ee:
                    18:56:73:d6:36:69:d4:90:71:27:d9:cf:61:c4:19:
                    74:57:6d:89:d7:e9:68:5b:40:2c:4c:23:89:97:9e:
                    89:9e:65:3e:35:63:f9:d7:3b:1d:08:1c:24:93:08:
                    a6:9e:c0:da:32:8f:4e:b0:55:28:b5:c5:b8:8d:cb:
                    e7:09:6a:72:20:ee:53:f6:d1:91:97:3a:56:73:f9:
                    dc:ff:9a:3b:97:9f:e1:f4:48:43:58:5e:1f:ff:1c:
                    84:5a:9c:58:53:eb:b8:79:9a:8b:f1:67:b5:96:fb:
                    89:b2:c2:11:71:83:2c:72:50:84:97:d6:e6:44:f8:
                    a8:f7:10:ff:8b:86:08:70:11:30:1c:0c:1e:87:88:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F6:98:66:C2:2A:87:3D:6B:25:8D:8A:DD:E0:D0:4C:00:06:8E:E6
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:c3:35:2b:9f:76:91:1e:10:5d:21:91:2b:43:f2:b4:be:
         94:3c:28:66:e4:11:a0:a8:16:ab:8a:7e:db:33:f4:23:88:b7:
         82:d2:b7:ae:d9:54:ea:ff:f1:d1:55:89:a0:6b:ca:82:23:6d:
         33:c5:25:16:23:c5:a6:a1:7c:3d:d8:6f:68:a2:27:e8:a9:7f:
         54:cb:82:24:7f:d3:b8:2f:7f:91:25:6c:db:a4:03:00:52:b7:
         3a:6f:28:75:93:df:93:33:9c:8f:fa:1e:f0:15:af:03:6d:3f:
         15:f1:27:fa:28:5d:bb:0a:85:f7:65:97:e9:df:1e:3d:fb:a6:
         c0:dd:ab:6c:0d:61:39:f7:93:1c:b9:75:d1:9c:5e:b0:3e:6c:
         b6:d8:1e:fb:42:db:54:97:33:86:9d:21:0c:3c:80:63:f1:5b:
         b1:e6:d7:47:bc:7a:9c:44:a1:81:c4:1a:41:52:46:2f:80:dc:
         11:f9:1e:e1:b1:8f:53:d0:43:c6:b9:20:c6:54:f7:6a:a3:ef:
         da:c7:ee:b0:87:31:03:1c:81:0e:90:4e:9e:e2:54:39:8c:2d:
         81:bc:7a:10:3a:5b:35:ec:96:67:4f:6b:1f:f5:b5:43:df:80:
         71:ea:01:f8:09:f5:02:d4:28:c2:c8:0d:01:cb:ac:2c:e4:e5:
         fb:e8:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----