Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File:                     eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier:          1//tGQ1JAPQfNVHOBbXiyxgcPITlC3PRxtypEszZEE4=
Subject key identifier:   7D:BA:DC:79:F9:40:7D:9E:B3:3F:0A:90:7E:1D:83:CE:7D:C5:30:28
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer:       /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial:       01962E99874959510ACF67B295D81B92E9B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: N/y8B8nNnjW+bNRiQwS3zv7dJov5h7vCaF46ZLHwhfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:49:59:51:0a:cf:67:b2:95:d8:1b:92:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=7dbadc79f9407d9eb33f0a907e1d83ce7dc53028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:2c:5e:17:3b:68:a1:bc:e0:a0:09:63:40:
                    76:1b:26:a8:af:00:33:22:34:97:c7:75:69:23:ea:
                    78:80:5d:1c:2c:11:7c:6a:a0:76:36:7c:37:99:70:
                    3e:a1:44:ce:92:dd:ab:c8:10:52:34:cd:be:9a:9f:
                    46:a1:b4:af:03:ba:c5:44:14:96:5b:47:d4:10:f0:
                    15:c2:56:28:b8:25:29:59:2a:51:0f:bd:5a:b8:00:
                    e4:73:38:1a:aa:31:a2:04:e9:81:6a:19:32:61:3d:
                    c1:31:ff:ad:bd:6e:77:28:39:e0:1e:d2:4a:fd:c9:
                    98:07:98:dd:72:8a:c7:d1:6c:43:e5:9b:a2:21:9d:
                    d5:0a:84:fb:9a:13:b0:93:88:82:29:31:85:57:35:
                    42:54:3c:c6:17:24:e5:a4:ef:2e:74:10:a5:2e:0f:
                    f4:b4:18:14:70:ae:c3:ef:d1:6f:cc:e1:de:ac:16:
                    20:d1:cd:6b:a6:3f:2b:0a:cb:86:89:8c:a5:93:ff:
                    c8:ba:d6:03:23:72:e9:91:8e:0a:ff:d9:0d:fb:09:
                    69:af:68:80:81:24:e1:5b:c6:c9:11:69:b3:8c:06:
                    f4:84:0c:07:88:75:22:87:e9:7c:eb:60:3e:32:03:
                    c4:05:ac:70:d5:f3:c5:85:86:5e:c8:17:3e:70:4b:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:DC:79:F9:40:7D:9E:B3:3F:0A:90:7E:1D:83:CE:7D:C5:30:28
            X509v3 Authority Key Identifier:
                keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:02:46:7e:07:25:16:1e:89:cf:72:c1:f7:6d:af:23:eb:
         26:3d:d4:cf:1c:d1:f0:ed:9e:67:02:00:45:0a:d2:51:61:42:
         8f:c7:74:7d:04:3d:cc:5c:66:97:8b:d6:5e:18:73:fa:c8:4d:
         b9:c7:f8:40:15:c1:7a:6b:2e:52:ee:a8:04:c3:4e:20:7b:28:
         6b:29:6c:b4:e5:b3:b0:35:bb:c7:42:b5:5d:56:4b:fa:f0:88:
         e9:41:22:d2:0e:ac:71:3c:8e:bb:42:46:61:e4:8c:23:3e:50:
         55:ea:f4:ab:4d:7d:b7:8e:cd:50:ac:36:ec:3a:66:53:f1:66:
         1a:67:9f:b8:cc:72:f4:26:e2:b9:40:08:d6:a9:97:7e:67:08:
         bc:9d:ef:4f:26:ee:d3:43:5e:82:9e:83:61:0b:5d:32:de:1c:
         6d:18:ee:7b:e4:0b:78:c1:c0:21:9a:49:d7:ff:0c:a4:0c:b1:
         d1:55:30:25:c0:2b:7a:f1:09:84:26:9b:22:8e:c0:f6:fc:f7:
         5e:01:cb:a3:ac:50:48:14:cd:a7:f7:6e:19:6f:bf:d0:ff:f3:
         91:1b:f8:8d:cf:fa:4b:a0:4c:c9:59:a6:87:a1:c5:5e:ab:41:
         5d:91:1a:69:2a:20:a4:6e:22:ef:d7:5a:c2:63:69:34:8d:40:
         ec:4a:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----