Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File:                     7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier:          apwlZPlCxcOlztPwC81gIJT+7uDSSCT53tMFEa/5BKc=
Subject key identifier:   EC:6A:D4:0C:91:7D:1A:4E:D9:15:AF:EA:5B:73:97:BE:65:77:D9:1C
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer:       /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial:       01962E994802DD704A785FED62BEF1398311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: h57hqjNG4Ir6UhnJAMWxCW3QxYXi1L81gGh9lZGQips=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:02:dd:70:4a:78:5f:ed:62:be:f1:39:83:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=ec6ad40c917d1a4ed915afea5b7397be6577d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:c6:9c:f1:8b:aa:1d:5b:38:2e:6c:8e:a9:
                    5e:ae:ae:fa:2e:d6:3b:c4:a6:7a:9f:24:81:49:a7:
                    48:8a:f5:f6:6f:4a:37:09:64:5b:6d:ca:a4:33:bb:
                    d4:e9:83:19:67:ac:fc:36:0b:1f:ea:8d:16:0c:f5:
                    65:91:74:b4:0e:a6:31:b2:ed:14:96:24:eb:ae:c0:
                    33:d0:9a:eb:a2:c3:de:bd:74:6b:61:31:f0:25:13:
                    41:f5:24:45:22:d7:24:83:5a:da:6b:03:ab:5b:8d:
                    cb:be:ca:a6:49:d0:27:82:11:ca:05:71:ac:1b:cb:
                    cc:e4:8a:da:35:6b:af:2f:a5:4f:45:e3:db:76:89:
                    6d:59:07:ad:b9:97:1a:eb:71:4e:3e:0c:c9:01:9e:
                    8e:e4:a3:ae:f9:c7:0c:92:8f:f6:fa:ff:34:67:87:
                    0a:22:b5:0a:54:27:e3:57:09:90:10:ba:c6:86:77:
                    d3:45:fb:ad:b6:00:d1:ce:92:55:a3:ca:ba:9d:5e:
                    20:73:80:6f:93:64:c8:55:0c:11:3b:bc:d1:90:4a:
                    31:e9:e2:09:42:6e:a4:60:5e:cf:70:52:5b:78:c6:
                    6a:44:61:32:a0:58:38:12:25:3a:d6:ed:2d:59:08:
                    d0:15:cd:f9:6f:a9:4f:c0:58:ea:d2:a6:2a:c2:02:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6A:D4:0C:91:7D:1A:4E:D9:15:AF:EA:5B:73:97:BE:65:77:D9:1C
            X509v3 Authority Key Identifier:
                keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:0b:ea:cf:85:34:85:29:bb:c3:e4:41:72:41:94:8f:9d:
         64:20:db:cf:3a:b2:2d:3e:60:1c:7f:75:41:f5:cf:ab:9d:e4:
         6b:49:be:39:66:32:d1:76:43:bc:19:2c:5e:88:f6:f6:ae:e0:
         93:bc:e3:d8:fc:b4:18:e3:52:a2:72:60:e0:88:65:fe:47:90:
         41:e8:2d:18:3a:01:73:76:6f:f1:39:a6:a1:2f:6f:fe:6f:52:
         50:79:6f:a2:a5:e5:ce:51:47:d2:8f:a1:a7:69:b6:7f:ae:e9:
         d2:e4:c4:69:74:46:76:2b:a4:93:ff:1c:21:23:af:f0:8b:68:
         03:43:e5:42:e6:7d:df:a3:6d:e8:74:e6:22:1b:7b:10:31:db:
         e7:7f:6b:16:1e:20:2e:79:0b:f2:29:6d:1c:e4:67:78:f5:e8:
         60:02:86:9f:c5:ab:60:53:32:20:3d:13:49:d5:69:b9:fa:5f:
         3a:73:51:2f:40:38:0d:bc:22:7a:50:54:ad:07:e5:0b:54:13:
         1d:ab:11:8c:5c:0b:a5:9c:23:c7:80:3b:5d:0d:d0:4a:f1:16:
         2a:b0:d4:94:c8:a2:a6:d5:6d:d6:c9:b8:28:47:50:06:81:13:
         c9:14:24:87:e9:aa:3c:24:ef:d3:b8:68:c4:cc:3d:54:49:26:
         97:81:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----