Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File:                     fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier:          OPzxzMGwWEmTV3zCcfPD8GYhn1jP2geqMhrb69cDm+E=
Subject key identifier:   B6:C4:9C:6D:77:0B:ED:3F:54:7A:20:3B:46:3D:71:9A:3B:CB:EC:84
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer:       /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial:       01962F7453A759B96965EDE76BD4EDDA0D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number:          133F
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: UVKP136+jEHh0urq389n3LTHLUlSjU5KbWjZsPm3hk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:a7:59:b9:69:65:ed:e7:6b:d4:ed:da:0d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=b6c49c6d770bed3f547a203b463d719a3bcbec84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:15:c5:31:68:83:e4:fb:e0:b4:d4:80:1a:
                    5f:ce:23:6e:f6:cd:d8:11:6a:61:48:71:b5:72:83:
                    bb:d9:ca:6e:06:be:09:49:ce:ba:1d:1e:9b:1e:4a:
                    4f:92:4f:d2:88:fe:10:71:93:c1:44:d2:5b:13:da:
                    66:b4:d6:6d:4f:84:5f:b1:38:f9:d7:f5:85:ee:d8:
                    96:1f:87:69:94:fd:78:a0:3e:24:2a:cf:b8:34:a0:
                    7e:0b:98:4d:0c:0c:be:21:7d:8c:a7:2b:3f:27:04:
                    60:5b:f7:db:a5:55:70:58:f7:dd:85:a0:72:bc:c2:
                    5d:98:81:4f:80:3b:7c:79:1b:8a:79:70:64:75:e9:
                    69:08:33:5e:4e:7f:da:88:03:03:09:f8:a0:dd:77:
                    d6:7e:42:b3:d0:0e:64:88:94:13:95:2c:87:c2:ce:
                    d3:28:11:e2:15:17:96:b2:38:8d:f5:ee:d1:5d:f7:
                    4c:59:aa:69:2d:fa:93:58:9d:3a:32:2d:e4:80:1b:
                    70:ab:f7:5f:9f:9c:3e:e2:3d:ef:8f:68:a4:3f:a3:
                    06:6b:fe:61:ae:f7:e5:22:e9:cc:6c:42:0f:fc:40:
                    b2:8f:5c:c8:0d:b4:89:fd:9b:2d:9d:91:fb:eb:f5:
                    d9:48:58:3f:77:68:5b:58:81:9c:68:47:ca:54:1f:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:9C:6D:77:0B:ED:3F:54:7A:20:3B:46:3D:71:9A:3B:CB:EC:84
            X509v3 Authority Key Identifier:
                keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:6d:00:b3:cd:5e:d6:cc:40:f6:eb:e8:8a:78:3c:1c:3e:
         52:ea:35:89:4e:4c:41:f8:f0:49:f0:a2:1c:ad:7f:ca:25:8b:
         06:55:a2:e3:a9:51:d1:75:d2:ec:b6:6c:b2:15:83:f2:a9:60:
         0e:47:38:bb:79:2c:aa:39:a0:1a:d0:4a:fa:8b:32:f1:01:5e:
         55:a9:5a:fb:80:af:9c:1d:73:3f:53:bd:6e:39:a9:94:28:78:
         61:a2:d1:c0:29:20:0a:77:6a:6e:8e:96:a9:08:c1:4d:24:8b:
         7e:fe:51:ed:28:4a:f8:d7:8b:3c:be:1c:03:9f:70:ea:78:35:
         7a:23:01:81:22:ce:ef:c5:4f:1d:65:02:0a:ef:5b:1f:c4:e6:
         fa:df:6c:91:4e:c3:1a:95:33:d4:49:7a:de:42:ca:ec:95:72:
         79:0b:35:f2:ad:cc:4c:51:ce:c9:27:ba:cf:0a:d4:1e:6e:c2:
         2b:d4:f9:74:f3:e2:b7:5d:ee:85:bf:3a:44:3f:6e:be:9a:f4:
         39:e9:96:31:68:36:13:d1:d0:62:31:32:33:14:c5:87:2a:14:
         b8:e2:69:a4:d5:27:1d:ca:eb:66:66:72:91:96:2f:d1:12:a1:
         0b:48:53:72:74:11:e7:a9:20:31:8b:4e:85:cb:a7:88:b5:26:
         30:04:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----