Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File:                     ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier:          CikB7yO7J3vbPMDHws+f7qDpaowrP1ukZx81nFWdw3I=
Subject key identifier:   6A:D7:99:33:3A:E0:48:0E:69:0F:6E:00:D0:EC:75:FE:86:AB:E1:36
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer:       /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial:       01962F3D67B8A13BA2A2DB18D4E1A2DFB797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number:          0B8D
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: hKeNcpUQ0AWyPfmQFuBqF1zSviKWhN7ax/sS3NOR8xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:67:b8:a1:3b:a2:a2:db:18:d4:e1:a2:df:b7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=6ad799333ae0480e690f6e00d0ec75fe86abe136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:12:34:0a:09:15:bc:77:58:a4:1c:ec:ef:
                    00:58:a1:e3:33:4e:ec:b1:a6:9b:b9:c7:01:54:07:
                    47:21:51:3b:e3:eb:e9:44:21:77:b8:6c:3c:3a:a5:
                    ef:0e:41:c6:39:74:ac:58:ac:bc:2b:6e:85:d0:68:
                    a8:d5:c6:1b:aa:9b:4c:a7:9e:63:1e:7f:b2:81:2d:
                    2b:d6:46:c0:7d:d4:74:c3:7e:b7:67:13:81:b1:0e:
                    5d:2b:aa:01:07:e7:bf:9d:4c:58:de:5f:59:ba:45:
                    ee:6e:67:f1:b5:ad:b4:ee:8f:78:15:b2:d7:91:62:
                    a4:61:f0:96:1d:c0:84:1a:63:11:b0:e4:ae:b6:36:
                    c4:21:fe:a7:f6:b9:eb:d9:97:3d:2b:58:fd:8d:cc:
                    01:a9:3b:e4:92:a6:3f:7d:40:34:26:92:a8:0d:fe:
                    33:3b:9a:48:77:a5:8c:73:1c:29:b3:eb:76:03:73:
                    56:b2:c1:6a:2c:ca:75:90:b7:29:6c:85:c8:ff:33:
                    5d:7c:64:00:c0:90:ae:18:84:09:b5:ca:b0:85:2b:
                    04:31:be:08:2e:73:e7:35:94:af:49:5e:29:e9:94:
                    0a:a8:6e:16:8e:9b:6c:bd:9d:2d:8c:bf:93:e8:01:
                    e5:4c:ea:17:c6:34:b9:c5:7b:57:b3:43:6c:2f:39:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D7:99:33:3A:E0:48:0E:69:0F:6E:00:D0:EC:75:FE:86:AB:E1:36
            X509v3 Authority Key Identifier:
                keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:06:19:8e:8e:07:0c:6b:50:81:46:5d:c8:dd:1e:16:cd:d4:
         c9:33:97:a5:07:26:f3:74:a3:43:03:cd:3e:d1:90:50:c2:0c:
         67:83:28:45:7d:70:f5:12:98:d1:7f:74:d4:9c:85:85:96:2f:
         ba:49:f3:0e:0f:f5:cc:ea:be:e9:5a:8e:54:63:7c:c4:b6:90:
         8b:e9:bd:09:98:1f:90:f9:24:1f:4e:6d:ab:4a:6d:6f:82:09:
         47:9d:95:7c:95:02:bc:67:be:a6:18:65:d4:82:be:51:cf:62:
         55:94:ed:48:66:c6:da:a9:f0:a9:c9:1f:ad:b6:e5:31:e9:90:
         c7:48:8c:1d:96:61:20:61:09:11:ea:ce:3c:91:db:04:98:6c:
         03:5d:3a:a0:41:44:25:4b:b7:7a:90:5c:48:a0:7b:0f:1d:81:
         62:41:19:ae:71:36:38:fb:2f:bc:f1:81:32:d5:77:49:88:28:
         72:61:b3:9e:f1:24:ad:ad:4e:7a:42:cf:7a:51:40:98:d6:47:
         80:c9:60:c7:5b:6f:15:b7:28:c0:8b:7d:e5:9d:21:35:5e:91:
         ac:e7:18:59:e4:0f:54:5d:8d:28:a1:4c:3b:87:17:d0:c4:d6:
         26:f4:db:f0:4a:0d:9a:8e:4c:76:55:59:d6:c5:00:ea:39:ec:
         c5:ed:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----