Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          gpaDPJscTHJQnPCySy/1HgqnupBL+9UputaT5CZElJs=
Subject key identifier:   58:E5:6E:0B:05:BC:E0:9A:FE:B2:03:A4:41:E8:08:60:67:2B:4F:2B
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       01962F064C4655EA1A3FCC739F53B034933B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          0156
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: vB74qJazU7Uyz+myvhj6tBcvlQjoAGGb9StCj3ae7r0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:46:55:ea:1a:3f:cc:73:9f:53:b0:34:93:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=58e56e0b05bce09afeb203a441e80860672b4f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:a2:df:3d:86:4e:8d:de:f2:da:1b:15:c9:
                    11:c5:b3:e0:d6:ba:43:c8:d5:5d:05:3e:0b:cb:19:
                    e7:cc:a4:9a:55:b7:24:15:2b:e9:a7:94:c5:56:ed:
                    33:5f:64:4c:58:c7:7d:ca:fd:5a:53:ae:5c:dc:94:
                    b1:ed:59:1d:ba:8a:b8:de:e9:ce:0c:33:ef:ee:83:
                    4f:0f:6a:a0:28:b4:11:52:d1:e5:3a:2e:1d:e8:bf:
                    7e:be:0a:6d:53:9c:ff:fb:51:7e:4a:a6:62:48:2a:
                    59:ca:d8:60:c8:c9:5c:f2:db:c8:49:45:7f:1f:b6:
                    05:bf:41:d3:02:6e:40:2a:aa:e9:5a:a9:4e:3a:1f:
                    2b:4a:e2:c5:ff:7e:0d:25:b4:8b:f3:97:ed:fa:81:
                    98:80:28:9d:d2:d7:b1:0e:18:5b:f2:76:cf:52:75:
                    69:46:51:01:12:bf:bd:2a:2b:8d:cb:82:58:97:ca:
                    d4:e6:c4:68:d9:53:f8:49:86:9a:82:d2:d8:ee:45:
                    41:e9:ca:c6:1f:1a:e0:a1:5c:bf:8d:3f:5e:97:bf:
                    e4:a5:92:09:91:2c:16:e4:2e:76:ff:8f:cf:5a:18:
                    5c:3c:a0:70:b5:75:53:83:fc:92:af:08:0b:6c:d2:
                    e6:a6:5b:e1:f5:73:d9:d0:67:bf:5d:ad:66:59:ea:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E5:6E:0B:05:BC:E0:9A:FE:B2:03:A4:41:E8:08:60:67:2B:4F:2B
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:91:13:d0:71:0e:eb:bb:27:62:16:41:86:b8:66:3e:6b:
         9f:e8:24:bf:c8:e3:0c:8c:71:7f:05:42:18:87:c6:66:3c:26:
         62:9a:c8:7d:03:cf:9c:48:8e:2d:66:f8:9b:7c:34:c1:01:08:
         7b:32:e1:9b:16:c3:a7:ba:27:e5:c8:4c:22:13:e4:40:af:61:
         16:81:a5:5f:96:c9:ed:20:a3:7f:46:88:40:0e:c6:e2:6c:da:
         6c:6d:7d:75:01:3b:38:a0:cd:4b:cd:45:39:ee:84:38:e9:69:
         a6:78:15:ba:cb:94:78:11:e1:21:e8:15:31:2e:b4:d7:c8:58:
         6f:a3:5b:bb:b0:55:27:87:39:32:80:cf:94:a9:4c:ad:9e:e5:
         89:50:15:9e:0f:7b:7b:97:39:80:37:65:30:a2:6f:1a:50:b6:
         0d:69:35:8b:cd:ad:f4:1f:d2:6f:a5:23:5b:1a:25:31:0a:ef:
         c0:78:60:8d:f7:39:b9:20:a4:cc:2b:09:0f:ad:be:a0:12:c0:
         d1:58:a1:78:ff:e1:23:69:40:74:a9:1d:b2:ae:7b:b2:e5:4b:
         3d:56:39:0d:fc:ce:d5:18:a2:db:c1:10:89:8e:8d:94:a3:5f:
         b0:ae:4b:fc:6a:8e:67:3e:0d:36:e2:b5:0d:8c:5a:cc:10:db:
         d6:1f:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----