Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File:                     rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier:          xm4yAj9CP7BbGQVhzAdqUAOWL0bWDfYkm60YnBq387c=
Subject key identifier:   E1:E6:5D:8E:A5:9A:22:2C:95:4B:36:D0:EC:B4:C5:DB:E2:D4:37:E5
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer:       /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial:       01962DF43F467233541A02C394E20212A5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number:          0EE7
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
                          2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
                          3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: QNvD6je7ILEeh//OQtUOueyRw1K/ojYaHl69x06st90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:46:72:33:54:1a:02:c3:94:e2:02:12:a5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=e1e65d8ea59a222c954b36d0ecb4c5dbe2d437e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:24:75:29:2f:93:d1:b1:9c:6b:7b:1b:3c:
                    29:46:73:45:9c:a0:be:e5:fb:66:ad:5f:5d:2d:0f:
                    23:cd:69:e8:6e:81:7f:08:6a:c6:29:20:0d:45:27:
                    8c:d8:05:81:03:3c:5e:17:ea:1d:17:c2:4d:bd:e5:
                    38:64:ca:b4:e9:54:02:ac:d1:02:8e:e6:94:a6:af:
                    3d:49:15:b1:b0:8c:2b:f1:1d:7d:df:b2:82:e6:65:
                    a7:d4:33:e7:30:af:e6:8a:3f:55:81:2f:4b:a0:40:
                    b0:9e:17:6a:76:72:23:ed:7c:ec:aa:75:b9:54:03:
                    99:5c:cd:0b:d4:24:74:65:f3:75:57:5c:8e:b0:79:
                    6c:aa:71:a2:c0:7c:69:0e:c6:2e:ea:29:fb:bd:68:
                    55:4b:d3:8d:3b:44:e1:24:94:51:d8:06:ea:d8:ad:
                    47:7e:4f:ea:dd:3a:f6:a8:eb:05:fa:b2:90:1f:29:
                    e5:02:b1:bd:30:e3:fc:f2:84:87:6a:c6:82:3f:47:
                    ae:94:c9:16:3e:46:0d:7b:89:00:fd:34:2a:11:02:
                    52:a3:68:97:a0:40:4a:00:36:40:f0:1a:7b:46:bb:
                    3b:9a:65:63:6e:8a:5b:40:00:b8:22:a1:d1:8a:c9:
                    72:5e:f1:9a:62:e7:13:92:0d:e9:13:95:5f:9d:7c:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:5D:8E:A5:9A:22:2C:95:4B:36:D0:EC:B4:C5:DB:E2:D4:37:E5
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:97:21:16:ff:7f:8e:a2:95:fe:cd:f1:7a:c3:7d:f6:86:ed:
         6e:cf:82:df:94:2b:42:7e:f5:b8:8a:13:49:51:0e:ec:13:b4:
         58:53:fe:36:ec:dd:be:71:bf:91:e0:2f:bb:84:07:62:43:af:
         4e:7d:6c:73:4a:d7:a2:67:93:3c:9d:2d:a2:06:a3:71:d8:ae:
         4c:e6:d1:b6:34:dc:5f:cb:b5:20:62:61:cf:3d:b2:be:7c:a6:
         be:fe:3c:1a:0b:cd:8b:09:63:17:8e:e6:51:16:5c:9b:e6:90:
         c2:90:74:18:de:66:e1:96:5d:60:7d:31:c4:b2:e7:6a:d1:bb:
         54:2e:00:d4:73:ee:ac:bb:c3:e2:c3:36:5d:47:85:05:31:48:
         e0:0b:b9:11:a9:13:31:6a:c4:7c:2d:38:a9:bd:a8:dd:b3:34:
         0e:c0:5e:b0:70:f6:9d:da:2d:7a:f9:1b:a9:ba:e6:19:7f:e0:
         58:46:99:c8:cf:2d:5c:90:fc:b1:f4:d7:e4:d2:0d:98:1c:a4:
         fe:95:a7:07:7d:b5:ad:e0:79:f8:88:53:03:9b:70:5c:89:9b:
         fd:00:13:48:90:d3:84:81:a4:d8:0e:ba:c8:5a:ec:64:a5:6f:
         81:b0:45:41:5b:26:39:cd:86:19:04:ae:e9:23:90:e2:12:59:
         ad:70:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----