Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File:                     Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier:          Mq4o1Dp36bfMQzyddwI/c2JOll2Cfjcu3La/qbQv5Hk=
Subject key identifier:   EA:4B:49:58:89:5B:08:0C:B1:2F:32:9B:96:0A:02:49:1D:57:4A:54
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer:       /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial:       01962DF3E821531AC4F760DC1FAC95492F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: 6Ghjp9CfVOPK4NLg82jMdbtZksO4cB17AF6+PPNq2yY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:21:53:1a:c4:f7:60:dc:1f:ac:95:49:2f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=ea4b4958895b080cb12f329b960a02491d574a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:bc:c9:3d:85:42:c7:df:46:72:6e:68:c5:
                    bb:4b:4f:97:4a:dd:06:79:bf:0c:15:e1:91:b3:d7:
                    3a:e4:49:09:62:94:2c:cd:d1:43:f6:e8:26:3a:66:
                    41:57:1b:ac:73:9c:42:d9:93:e5:f3:11:47:22:99:
                    bb:52:47:80:90:70:7e:80:83:5e:97:36:c9:eb:99:
                    44:0f:13:b8:1a:47:d2:73:cf:68:55:be:fa:52:05:
                    b5:62:16:bd:e4:20:7c:2a:24:1a:9a:20:af:69:35:
                    b4:93:d5:7f:31:91:d3:4e:e5:0f:3f:c8:e2:40:26:
                    38:31:7e:e3:e1:5a:90:15:4d:cf:69:88:aa:ac:52:
                    ca:28:e4:81:39:59:55:57:06:2a:6c:ae:3f:59:61:
                    75:4b:9d:6a:91:b1:e9:98:9e:b8:47:35:fb:c7:03:
                    d5:b8:bb:fc:98:cc:ee:f3:ed:64:96:dc:64:fe:e7:
                    f3:98:3e:bc:ed:83:35:83:16:47:fb:b2:ff:fc:48:
                    39:37:66:08:23:d4:f1:34:80:4d:6b:48:2a:3d:bb:
                    bb:dd:54:f4:17:83:2c:f5:95:dc:40:94:5c:e5:51:
                    10:6d:84:2b:d7:52:20:53:35:20:5d:48:9f:24:35:
                    f1:ab:6c:8a:51:93:fe:30:3a:f0:b7:61:3f:6b:ad:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4B:49:58:89:5B:08:0C:B1:2F:32:9B:96:0A:02:49:1D:57:4A:54
            X509v3 Authority Key Identifier:
                keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:6d:b4:cb:47:85:4d:f8:f6:0b:48:9a:ff:78:5d:d3:74:
         4f:cf:68:ec:72:eb:24:1a:f6:11:22:6b:d5:a9:47:1d:6a:3d:
         10:f4:81:c4:c3:d3:b3:41:b2:ed:96:a6:fc:13:d4:bf:5f:59:
         f4:a1:e9:34:af:63:fd:ff:d4:6e:ab:12:54:89:a6:56:4f:9c:
         38:59:ee:ff:59:7e:f6:29:77:64:8e:92:85:d3:f4:f5:fd:98:
         c7:e1:1c:b6:86:26:de:0d:a7:40:c6:4b:9a:eb:ee:69:e5:4e:
         41:56:11:21:2c:c3:25:74:43:70:7c:9c:ce:d3:de:75:88:a7:
         be:8b:ca:b4:fb:81:06:90:d9:2c:3d:cf:e8:0e:4a:b7:f8:10:
         68:e6:1e:d7:16:9c:57:d8:b9:f0:4a:00:28:3f:01:4a:b6:1d:
         a1:2c:44:d8:ea:bd:db:eb:c5:17:09:30:80:41:75:eb:25:25:
         be:e6:9f:78:a8:0f:50:13:72:8f:7a:42:f5:90:a6:a8:74:ad:
         d4:d2:e2:2f:05:97:83:2e:5a:8c:e1:98:a2:be:63:cb:8d:67:
         33:ec:b5:97:9f:89:37:46:d7:3b:59:42:fa:bc:48:84:d2:7d:
         92:c8:c9:b8:ae:d2:f2:ee:fc:d9:9e:0a:f8:a5:30:39:51:dd:
         08:dc:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----