Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File:                     e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier:          JRBjcfbUbK6P9zP3PJ8ikFeBicEtfkasUeTWk2vHk4E=
Subject key identifier:   29:B2:83:B8:95:AA:25:3A:6E:3B:AC:A3:13:92:CA:86:57:F8:02:32
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer:       /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial:       01962E9902B95C4DDF05817A6D980C80B03B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number:          1359
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: OxLHrIcjN6t+EOS2Yhan2dHtVhWp0IuaGeUyGLiBfnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:b9:5c:4d:df:05:81:7a:6d:98:0c:80:b0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=29b283b895aa253a6e3baca31392ca8657f80232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:b4:ac:1c:c4:17:7b:0e:d2:43:c7:06:f0:
                    35:3a:34:98:af:1a:f1:5f:d3:4a:b1:16:b9:b9:f6:
                    fe:c2:c0:75:55:74:c7:43:0f:48:b5:20:42:68:14:
                    e6:08:39:bf:33:02:a1:34:55:b9:8a:a1:35:a2:bb:
                    4d:56:83:d6:e9:64:5d:a8:72:11:ae:77:94:4f:6c:
                    93:c9:be:68:c5:a7:9d:7d:f2:fd:12:df:da:b3:f5:
                    4e:44:03:59:f7:4d:3b:9a:72:5f:35:77:e2:01:23:
                    4d:9b:6f:ae:a4:95:a5:fc:e8:37:de:4c:83:d9:d4:
                    3a:da:6a:2b:d7:f1:c0:55:bf:63:fe:b4:a8:a3:73:
                    8d:16:56:45:ca:dc:72:0c:4c:95:25:99:43:34:47:
                    79:b1:94:01:0c:2c:1c:27:07:5a:0c:d0:bd:4c:bd:
                    17:da:70:4f:56:80:9e:91:e0:b6:21:39:fb:03:5d:
                    d3:ba:6c:38:9c:43:8f:d9:7b:4a:44:5a:1a:12:cf:
                    a9:a0:53:77:af:0f:0e:e2:7c:7f:a9:0e:c8:b0:1f:
                    f6:0f:f7:15:92:21:b6:da:38:ba:2b:a3:b3:d7:7c:
                    f1:83:96:03:63:f8:1b:ca:68:8e:00:7c:ca:38:97:
                    6b:4d:a0:6f:46:0f:e5:3e:da:6e:5f:e9:b7:b8:7c:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:83:B8:95:AA:25:3A:6E:3B:AC:A3:13:92:CA:86:57:F8:02:32
            X509v3 Authority Key Identifier:
                keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:a6:2e:80:81:45:88:b7:21:2f:cb:52:bb:b4:f5:c4:31:
         e0:1f:af:6b:f4:56:83:ca:77:08:29:87:08:e3:e7:76:3c:9e:
         56:83:e3:44:8e:fe:94:3f:92:74:80:cc:18:be:40:ad:0f:18:
         a3:3b:f3:1d:dc:dd:16:2e:02:e9:cb:4a:5d:65:06:31:31:d7:
         29:de:73:18:60:e0:d5:6c:5e:92:91:85:da:d7:28:4e:85:11:
         73:d1:d7:c3:d8:69:02:7d:dc:d9:4a:31:dc:68:35:4c:ec:6b:
         47:44:f1:2a:12:c8:f2:57:37:21:62:53:6d:9c:ed:79:9b:7a:
         d7:89:79:d5:f5:01:14:4f:04:c2:8c:e9:8d:bd:59:66:e4:e0:
         70:70:47:b5:60:76:3b:6a:33:db:21:1c:fc:b6:22:bc:76:19:
         36:9d:fa:11:c0:ca:8e:78:cd:bc:91:97:b8:26:0b:90:21:23:
         69:8e:fa:70:72:13:d1:f1:6b:55:7a:a8:6a:4f:6e:02:ff:26:
         4b:88:c6:ac:5e:81:9e:50:10:28:c7:7f:20:31:4a:a3:4b:4b:
         18:83:36:93:97:7e:57:68:11:ea:6f:29:be:ea:e2:97:10:92:
         a3:25:c5:c5:90:21:a7:bd:d9:6e:20:ae:1e:db:fa:74:54:67:
         44:a4:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----