Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          sE1vsZPxeqIlkbtGz0mAmW0qltdMeuS2bNC+VdbtsQk=
Subject key identifier:   70:60:3C:CF:56:BE:79:26:14:D2:E3:74:2A:AE:A8:E9:7E:8E:0C:88
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       01962E989B05076A9A852E249BD181846A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          108D
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: dGVo2hLBb6qCbZcN4caNVYwYtAh83VoLoEQKR+fNldw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:05:07:6a:9a:85:2e:24:9b:d1:81:84:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=70603ccf56be792614d2e3742aaea8e97e8e0c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:f5:c8:a5:88:34:3b:b3:76:6e:96:cf:8b:
                    40:2c:ce:c4:a4:72:0a:d2:35:1c:e6:26:6a:98:8c:
                    97:f3:85:d6:45:48:73:cc:0a:9d:11:80:d5:ab:e7:
                    93:b8:e9:fc:5e:ba:0a:2f:fd:c5:b3:f2:bf:2f:e9:
                    e4:2b:de:8a:9b:4f:af:3f:ce:be:4b:39:95:cc:e7:
                    44:54:37:90:5f:58:68:5d:10:aa:c2:1a:d6:da:01:
                    65:c4:d8:62:40:e1:86:24:36:e0:6e:72:6b:ce:84:
                    f5:0c:47:8e:62:89:ea:16:e3:39:45:17:71:a5:2f:
                    5e:59:22:b9:96:8c:88:18:2c:e1:32:82:ca:1e:0a:
                    37:a5:a4:20:5e:fb:9f:08:82:0a:11:9b:92:ef:24:
                    58:e5:d7:81:72:3a:a5:48:8c:38:c8:41:39:ee:c3:
                    1c:56:7c:fc:c0:7b:cd:c0:3f:c8:b4:6c:64:60:ec:
                    35:10:f4:0c:1a:9c:60:50:1c:31:df:e8:de:d5:94:
                    51:3a:46:89:9c:35:f5:6f:b1:32:a5:d6:92:20:ad:
                    d5:03:fa:d4:05:0e:3a:86:e0:ff:0a:ed:49:9e:56:
                    c0:e6:70:0e:3e:8b:48:16:5c:8f:b2:86:44:71:8a:
                    f1:85:3b:9e:06:23:f5:bc:78:cb:22:3b:1b:9d:c4:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:3C:CF:56:BE:79:26:14:D2:E3:74:2A:AE:A8:E9:7E:8E:0C:88
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:9e:db:15:fa:0c:31:52:0c:27:1c:6f:4d:03:0c:93:d2:
         43:59:98:f0:6b:28:fd:31:81:dc:7b:e4:87:15:a3:80:21:ab:
         60:ac:79:99:79:3d:1a:f3:14:9e:e7:8b:84:b9:84:f8:0c:a6:
         09:17:71:2a:dd:27:ab:60:98:de:0f:e8:21:20:e7:26:b8:8f:
         6d:55:10:01:e5:94:b8:f7:22:4e:32:2c:cc:5e:94:4a:0b:ce:
         b7:35:a1:d7:67:0c:8b:39:1e:d2:3b:d7:fe:1a:7a:da:59:00:
         41:72:59:c8:eb:a8:45:50:68:8f:39:95:85:c8:c2:58:c2:bc:
         62:46:3b:3b:72:f1:d5:01:8b:59:e2:86:d8:3f:c7:b7:2f:d5:
         09:7a:ef:0c:9c:72:58:91:c5:aa:24:fc:d5:fe:19:49:a9:fc:
         51:4e:0b:24:a9:65:6e:0a:30:08:a5:20:ff:fb:ba:4f:47:07:
         78:79:65:b3:62:0d:75:28:08:a8:e0:bc:77:88:93:f5:a0:69:
         f9:7e:e5:13:82:ca:2f:78:d1:36:b6:fb:32:2b:f6:9c:e8:f2:
         61:c1:42:2f:b6:ce:11:65:c3:29:5b:7f:0a:82:87:f5:7c:4a:
         05:ec:f8:c8:a2:80:64:53:68:75:dc:06:2b:10:ac:72:94:0d:
         71:5c:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----