Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File:                     Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier:          LEQ8sFmjqAI/VgNsRLlGOPejTZcw/Wiy/MOPyRMZVVA=
Subject key identifier:   29:5D:F1:D8:46:D2:12:4C:0A:03:CC:1D:7B:68:A7:51:74:6C:C7:67
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer:       /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial:       01962F74EBA08E77458EC7CD1A3B53507F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: FdRaHGgIhkaqGWyS/jc4u6m+CEkQoEpLY203bDuZoUQ=)
                          2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:a0:8e:77:45:8e:c7:cd:1a:3b:53:50:7f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=295df1d846d2124c0a03cc1d7b68a751746cc767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:d9:ab:56:18:c6:ad:ec:f3:e8:4e:15:02:
                    6e:b8:65:eb:a5:5a:e0:e4:4d:1f:19:58:3e:8f:f5:
                    e6:84:cc:b9:86:4e:82:04:ed:fc:d5:0b:e2:35:ca:
                    cb:c7:da:32:cc:78:1e:9c:30:86:40:13:ab:37:1c:
                    22:bd:93:53:ee:de:6f:71:e8:9d:37:0b:c7:6d:e4:
                    80:66:30:d3:1d:3c:24:15:0d:80:3b:ac:18:8b:e2:
                    6e:3c:58:50:93:e1:1e:43:76:f5:cc:dd:80:02:9b:
                    42:a7:b4:25:cf:13:74:35:80:79:a7:fb:6f:c0:c3:
                    de:53:7b:08:8d:94:c5:5d:5f:70:f6:ac:ff:69:e4:
                    54:3d:62:e1:82:8a:23:e6:25:9d:75:a0:07:d9:dc:
                    7f:f1:ea:99:cf:f3:bf:8f:d4:39:00:6d:04:b8:c2:
                    5c:b9:be:ed:9c:1b:e5:5d:87:f1:da:a7:a7:37:1d:
                    15:71:f4:d3:1b:65:a5:c1:04:5a:d2:ae:fc:45:de:
                    93:77:8f:7c:cf:71:3c:7a:1f:e9:5e:45:17:cb:1b:
                    24:94:f1:29:8a:40:8f:d7:89:91:0b:81:6f:81:72:
                    80:19:3c:03:bf:a0:86:2b:03:d1:ea:fb:47:5f:5b:
                    c3:49:15:f7:86:d2:49:c7:78:ab:a1:2f:bd:1d:cd:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:F1:D8:46:D2:12:4C:0A:03:CC:1D:7B:68:A7:51:74:6C:C7:67
            X509v3 Authority Key Identifier:
                keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:33:58:c5:9d:1a:7c:c0:26:47:62:b1:90:97:95:b5:00:
         2b:13:a2:56:53:85:7f:7b:9d:95:d1:d2:60:10:a1:6d:b9:b7:
         2b:fb:97:a7:77:c7:f1:09:d5:f1:f9:1f:8e:eb:f6:88:3b:c7:
         99:63:bf:d9:50:db:e0:64:36:af:d9:28:97:0e:c5:7b:89:96:
         77:16:db:97:b2:e7:1e:18:dd:d3:0f:06:f7:44:0b:de:0b:7d:
         4e:25:61:c0:76:24:2d:ac:6b:74:5e:c3:90:2b:65:ef:b7:6a:
         96:bf:00:bc:e4:aa:37:be:ed:57:ce:fd:e2:0c:c0:28:c8:9e:
         48:92:2f:9f:29:ec:e1:cd:a4:a5:ab:2e:d1:71:09:97:34:52:
         f5:7c:8d:b3:f9:c6:3e:60:f6:a1:76:f9:9f:73:48:2d:20:a3:
         05:17:06:5b:7f:29:12:cb:bb:17:98:94:36:4a:03:62:c8:d8:
         db:fe:fe:71:4a:7f:be:91:1c:44:81:53:5f:20:1a:58:5f:b5:
         4d:69:54:c9:4d:04:8e:e8:ff:92:38:a2:98:8f:3e:c1:0d:99:
         43:a8:6e:47:ee:7d:09:fb:25:f6:0f:83:e2:47:4d:b8:bd:7c:
         f9:30:3b:0f:68:64:7e:c6:a7:03:88:a3:30:ba:a8:e3:46:22:
         b4:76:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----