Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          MvZru3rEwYly4xe6s19maNJeRuevb5NYdWmEmKgBQg8=
Subject key identifier:   BE:D3:A7:62:73:38:92:05:5E:6B:B2:68:A2:EE:97:66:EE:D7:1A:BC
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       01962F74ABB2875BB80C4E72437D59487776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0A5A
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: AkL0DQlUvKfYz5EsgsGecm0/PK9hEOyeXYc3MhLYuLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:b2:87:5b:b8:0c:4e:72:43:7d:59:48:77:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=bed3a762733892055e6bb268a2ee9766eed71abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:a6:3a:38:e2:60:bd:04:81:60:14:97:c6:
                    ff:c1:ae:b8:a6:d4:2a:42:84:65:78:56:5b:c4:9e:
                    9e:9d:b8:68:3a:2b:95:ac:cc:59:96:13:2c:e6:73:
                    01:62:2a:32:c5:ee:6e:a3:86:ea:93:72:dc:c5:b9:
                    b2:5f:69:84:e7:a8:de:d9:4e:61:04:a9:ba:ed:b4:
                    26:10:5e:a4:d7:9e:da:f7:68:30:99:ef:04:b3:45:
                    b3:e8:f8:a0:f8:39:47:00:64:ce:ef:01:47:ba:9e:
                    fd:ce:64:f2:85:1f:45:2f:f6:ab:66:28:e6:8a:6d:
                    ca:d6:ee:c2:33:27:45:cb:d7:ce:3b:b8:7f:3b:19:
                    ba:db:54:57:08:4f:55:c3:13:fe:21:ba:3d:d8:65:
                    91:72:b3:71:37:b5:b1:3a:7c:ac:26:6d:3a:31:1d:
                    ac:2c:f6:e8:07:10:2f:bf:15:36:a0:2b:cd:00:15:
                    08:9e:a7:cf:3c:5b:4e:48:e8:c9:1a:fb:39:18:93:
                    41:27:d7:b2:fd:0a:5f:19:0b:d7:e2:63:07:0f:66:
                    1c:11:af:89:55:5f:f1:a1:83:53:99:0b:9a:4d:4a:
                    b6:43:2e:ad:21:8b:f0:2b:78:fa:0b:d9:78:5a:87:
                    8a:53:3b:ff:cf:07:96:b1:0c:f5:81:2b:27:86:3c:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:A7:62:73:38:92:05:5E:6B:B2:68:A2:EE:97:66:EE:D7:1A:BC
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:57:fe:9f:f0:67:e4:a9:b3:41:9f:bb:9d:a4:f2:24:88:72:
         73:7e:8d:83:fd:75:af:a6:ff:11:1d:44:a1:10:7e:4a:70:dd:
         49:ba:14:cf:fe:3e:c7:92:18:70:c0:7b:c4:16:b1:b6:88:7e:
         1c:f9:f2:5e:e2:5f:32:37:c2:84:9f:17:18:9a:06:aa:63:89:
         5d:04:38:a8:9b:65:51:db:8a:11:c2:61:f9:3b:da:0c:2c:71:
         8e:e2:57:63:5b:4e:25:15:e0:e6:1e:f1:61:57:05:ef:a6:59:
         e8:63:fb:aa:03:5a:91:9f:7d:02:fa:ac:fa:ae:17:71:b0:b9:
         f5:e0:ae:68:98:b5:e7:56:1e:b9:17:1a:f2:ee:60:c8:1f:bf:
         b9:18:9b:b1:22:50:92:19:0b:df:12:f8:a4:c1:01:f5:76:6a:
         d0:88:ad:2c:d5:fa:e6:a5:cf:91:38:d0:4e:75:14:5f:a0:59:
         43:d7:4d:0d:b1:46:52:3d:13:56:a7:93:95:eb:ca:7f:04:fb:
         8f:40:d8:db:06:8b:18:e9:24:f3:6d:f2:fc:42:28:bc:fe:cc:
         c6:02:75:54:ee:cd:f5:e0:17:41:03:10:97:d4:cc:6c:53:cf:
         00:d9:03:72:71:3d:a0:a0:71:18:cb:cd:7a:b0:07:67:8b:0f:
         05:51:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----