Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File:                     t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier:          SGIzyMeQ7tMnawhfHiYfh+0f3EAPBtWqUGKsxC2apaM=
Subject key identifier:   3D:9C:63:DD:AF:23:CA:B3:FC:08:9C:5F:FC:20:7E:70:D6:F0:7A:EF
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer:       /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial:       01962F744C1965672D613D4406186389D6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number:          033E
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
                          2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: nDTytFUjrJRs9Xc7wM6oyCf9EFNkNY30cNx9ticMUco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:19:65:67:2d:61:3d:44:06:18:63:89:d6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=3d9c63ddaf23cab3fc089c5ffc207e70d6f07aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:8e:0d:4d:17:81:91:fc:4c:a3:5f:16:b0:
                    a0:b2:8f:8e:e4:b7:01:a3:2d:68:4e:f9:ba:bc:da:
                    41:e0:40:04:6a:0a:1b:8f:a8:4a:95:c0:53:47:0a:
                    ec:3e:e1:e1:b8:47:22:29:ed:d6:c4:94:8b:3a:35:
                    7b:d9:b2:e6:10:f6:c6:2a:de:79:65:05:c8:04:d2:
                    bd:c3:46:a6:d2:06:df:9d:33:ab:70:e0:e5:f5:c8:
                    e9:2a:19:80:e6:59:d2:bc:eb:4a:4e:01:fa:ae:36:
                    49:99:d2:2e:73:27:e8:7f:17:a3:3e:f9:ef:8c:10:
                    07:ff:50:82:88:1e:60:c6:8c:c0:41:a4:41:43:c5:
                    28:7b:1e:42:dc:41:4f:97:36:02:67:fd:17:56:ab:
                    6d:01:75:df:0a:e8:a4:8b:7d:94:fd:b8:a0:91:f0:
                    31:fb:a8:ae:69:20:89:ad:0b:43:7d:af:df:65:5e:
                    41:dc:d7:4a:fe:b2:76:8d:16:d7:f1:0c:ae:89:a8:
                    51:90:0e:62:5d:59:43:15:a1:3e:87:c9:66:70:fd:
                    95:47:81:78:66:cf:27:f1:aa:50:04:9d:86:86:49:
                    2d:72:b3:a1:87:be:60:f9:ab:0c:d4:ee:33:56:76:
                    77:7c:25:4f:02:c3:96:88:54:9c:5a:55:3b:88:4c:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:63:DD:AF:23:CA:B3:FC:08:9C:5F:FC:20:7E:70:D6:F0:7A:EF
            X509v3 Authority Key Identifier:
                keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:64:a8:9b:af:76:eb:bf:8c:a9:db:3b:ee:33:4b:44:7f:3f:
         bf:c7:fa:f2:62:f5:91:78:31:32:fe:d6:9d:bf:91:35:58:3d:
         d1:ce:32:8e:9e:85:d4:88:95:5a:25:9d:1c:41:1e:98:24:2e:
         34:0a:6b:84:55:93:e5:75:9c:ed:a3:74:fc:e5:cc:4b:ff:c7:
         aa:ce:40:14:8b:c5:8d:6d:03:63:33:c2:04:3b:79:be:a6:31:
         5c:0f:d2:e3:f8:09:5b:e3:3b:d3:9e:68:48:3c:2c:d4:9e:ee:
         08:67:de:f5:ca:3f:5a:4a:84:3a:32:fd:7d:94:a7:4d:4a:05:
         50:fa:d7:d1:22:0b:7e:8e:91:7d:05:81:f0:50:8d:32:86:bf:
         c5:cd:b0:c9:05:b6:3b:a6:d4:eb:95:73:12:e0:1b:a2:aa:3e:
         16:9b:11:4b:27:4d:24:c1:b5:19:2b:c3:83:2b:1e:ba:69:51:
         38:97:32:7c:3c:51:a2:9b:53:70:fa:64:98:21:ee:e6:b9:a2:
         6b:f7:cd:42:ea:35:12:8d:c1:c8:eb:27:0f:f7:66:5e:94:b4:
         5d:7a:76:66:1a:bb:2f:cb:3d:59:ed:78:d8:50:29:54:92:4f:
         a6:26:00:c8:02:9a:aa:38:97:36:a1:2b:97:ec:07:43:f2:af:
         5e:8a:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----