Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
File:                     7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json)
Hash identifier:          uvEbUNOvMHvZFfebQxYrC/yLmhwTAepJvsPCDVOtyFk=
Subject key identifier:   8C:1A:2A:C5:99:91:39:6F:A1:51:08:53:70:F1:3C:09:9A:53:66:87
Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8
Certificate issuer:       /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
Certificate serial:       01962F74D25F44CCCDAD60797858B0AF8AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
Manifest number:          28
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: lkU10o8UJ0NvdkjCgHqM+qwCJEGhQi8tSBkiwQa2UqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d2:5f:44:cc:cd:ad:60:79:78:58:b0:af:8a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=8c1a2ac59991396fa151085370f13c099a536687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:77:c8:f4:55:94:10:22:64:70:0d:94:eb:
                    bc:33:be:fe:6e:d6:20:40:49:cd:5e:e0:54:b5:d1:
                    67:9b:63:23:6c:f7:70:e3:cf:41:8f:20:a5:09:19:
                    61:0a:49:1f:31:19:1c:31:8f:07:c1:ca:06:4e:b5:
                    5f:95:4d:29:c4:59:db:f7:d1:b1:d5:d7:64:4f:98:
                    9f:f2:42:54:e1:72:60:a3:a0:0d:bb:b7:fd:e3:9a:
                    80:58:b7:34:fb:59:9c:36:fc:a2:62:be:e8:02:26:
                    fe:12:74:de:6d:2f:b6:08:23:a7:e6:da:28:44:c0:
                    bc:ec:43:54:a3:8d:1d:2f:64:e4:32:ac:88:2b:47:
                    cb:d9:21:92:ff:7a:2e:f1:2c:06:08:e4:0d:d5:7f:
                    29:ce:15:26:06:02:fe:a2:29:7b:9d:9f:38:d7:cb:
                    9a:88:80:f1:5e:fb:73:ed:9d:a9:4f:7e:fa:9b:52:
                    ed:ee:fd:58:56:12:92:72:47:2a:68:9f:3a:4b:56:
                    f7:53:98:51:eb:02:d3:e3:81:1d:eb:23:6b:24:b2:
                    85:35:24:95:67:d4:ac:ec:ea:e1:4a:d5:de:99:2d:
                    91:c1:f0:aa:e8:73:48:2d:1f:67:6f:d9:ee:d7:23:
                    86:98:16:09:d6:4b:16:8d:bc:b3:10:bc:c8:ca:a8:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1A:2A:C5:99:91:39:6F:A1:51:08:53:70:F1:3C:09:9A:53:66:87
            X509v3 Authority Key Identifier:
                keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:14:c0:14:2e:6c:2e:ef:e1:f6:4e:c9:82:68:5e:3b:f5:
         1d:d8:2e:53:41:ff:b2:8c:15:e5:c6:78:af:eb:13:10:69:12:
         23:4d:bf:b5:17:ef:fe:4a:a9:18:ac:1f:2d:ea:55:6e:20:c3:
         c7:34:7f:da:96:d4:a1:df:13:7b:a2:e2:0b:a3:55:82:4d:f7:
         60:f1:ca:a7:61:02:3f:3d:9f:d9:9b:9d:75:67:f4:2c:8e:6b:
         a5:98:6d:ff:aa:c9:b3:79:c4:92:1d:db:6e:da:8e:d9:9a:e4:
         38:8b:40:a3:73:43:bc:66:07:b9:72:ca:d4:79:4d:79:ef:28:
         46:1c:89:9e:76:a5:fd:8c:39:70:eb:67:7a:7c:bb:06:33:1c:
         69:a9:95:95:83:5f:db:7f:c7:40:c8:3c:b0:da:61:45:46:7b:
         b0:2e:e4:b8:46:5a:78:95:78:f9:7c:48:d6:d1:6d:a2:0e:26:
         9e:a9:0d:4e:e9:97:57:f5:de:69:50:ce:2a:05:96:09:c3:99:
         14:de:f6:d9:0b:0e:94:1f:e1:c4:52:60:90:8b:06:77:70:14:
         a3:16:7d:ea:8e:05:88:41:23:22:50:fc:f8:75:05:e9:6b:4a:
         60:0f:bd:c5:a6:35:12:f2:7d:c8:f3:e0:a9:ba:d5:26:c2:9f:
         0b:40:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----