Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier:          HLFkOrQEP8YxC3RkygymU5X3Uqgkw63dI0i8EtS1XFw=
Subject key identifier:   C0:10:54:34:8D:2C:8B:17:E6:3D:4E:A6:E0:55:E3:E4:AB:B1:C3:08
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer:       /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial:       01962DF3FAAF37EC9EDD80DD176D41E00A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number:          01CC
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: zFthCUKO1vA8el3Z4UfXoGIqUYTIVUQ+IkHL2hD1l3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:af:37:ec:9e:dd:80:dd:17:6d:41:e0:0a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=c01054348d2c8b17e63d4ea6e055e3e4abb1c308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:93:18:62:8f:22:89:c3:f7:9e:86:51:82:
                    3c:78:29:c5:dd:1c:4b:36:9c:1d:0e:f5:22:3d:13:
                    ae:72:c2:b7:8f:98:0b:3b:39:ef:6a:ee:0c:77:73:
                    d6:7c:56:35:99:8b:41:da:36:bb:17:c7:e4:9d:ca:
                    0f:26:58:cc:9c:e0:1d:02:7b:96:24:e5:00:61:35:
                    50:85:a3:2f:4d:59:7a:bc:54:c6:2a:0b:72:15:1e:
                    35:4f:e7:93:04:e2:10:37:c2:66:b0:26:0b:5a:72:
                    e8:46:21:99:36:2e:4f:17:90:8b:cf:7a:04:11:fe:
                    00:ab:83:37:f1:c4:ca:50:1c:51:f5:0e:c8:05:5a:
                    cb:d0:07:48:cd:17:be:49:59:d5:ba:25:7f:4d:fb:
                    2d:c4:24:3c:c4:64:f7:ac:8d:a4:cb:6a:99:6e:0b:
                    a3:fb:2c:c1:2b:54:0b:91:9f:ca:50:1f:7f:8f:ba:
                    9b:c0:8b:e5:60:22:7a:2a:cc:93:3d:9d:61:74:35:
                    d0:d8:5c:c0:04:43:89:fb:db:43:f2:64:67:17:83:
                    c6:1f:b6:a3:16:67:5a:de:0b:fa:d2:50:69:03:70:
                    c9:f1:20:d9:f8:34:2a:88:91:ae:9c:74:75:a8:9a:
                    a6:a9:17:1d:2a:92:3d:4c:a9:72:db:b8:1f:28:68:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:10:54:34:8D:2C:8B:17:E6:3D:4E:A6:E0:55:E3:E4:AB:B1:C3:08
            X509v3 Authority Key Identifier:
                keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:33:27:c1:84:40:b4:ea:d3:2b:7b:d3:97:93:c2:39:fc:ab:
         c2:f7:12:7b:46:60:a1:d0:77:6c:3a:5b:4c:68:55:3b:4d:9d:
         20:01:03:08:5a:2f:61:88:2a:39:c0:b8:52:b0:51:c3:c7:85:
         18:fc:cc:7d:f4:6f:f2:3d:65:31:ee:ed:dd:6a:52:8c:70:31:
         70:a4:46:14:aa:03:e0:06:37:87:82:b0:e4:55:4c:c8:c6:6f:
         45:6a:fd:a2:c2:68:d2:2b:7f:ab:e2:42:99:f3:19:60:89:33:
         b0:fa:ab:a8:36:bf:ba:dc:fa:18:d1:11:82:1f:db:3d:75:7a:
         e1:35:1d:06:53:1b:60:57:97:6e:98:af:c4:60:f3:1c:a9:93:
         99:7b:75:bd:e8:25:f6:71:f0:7c:c6:bd:95:dc:d5:e8:13:27:
         05:ae:60:d6:bc:e2:38:26:94:1b:94:91:c2:ee:34:56:27:9c:
         d0:3f:dc:88:a9:63:24:ff:46:dd:fe:ca:70:f4:ef:0d:30:68:
         2e:1a:74:ba:cf:e5:b2:fa:86:8b:99:1b:ab:75:48:57:bf:b1:
         04:68:6c:bc:18:c5:46:0c:96:f2:70:92:3d:fc:b2:47:c3:06:
         d1:23:21:ef:dd:94:c4:0c:13:b8:15:13:e3:4d:c8:31:05:4e:
         e4:41:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----