Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File:                     11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier:          Prv8HcHLPrmriZ36XAZvysI3lfrwWXPv8C3m+MpIhGc=
Subject key identifier:   9E:F6:3E:C4:40:73:85:0E:62:26:77:A6:D7:A6:2D:BF:7A:7A:18:AC
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer:       /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial:       01962DF44C3FF7786918CF1BE49A7477A5C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: 9JJKA88I0TROrYoCEVlhLdSx4C0wMLN/y/odEcnyuY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:3f:f7:78:69:18:cf:1b:e4:9a:74:77:a5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=9ef63ec44073850e622677a6d7a62dbf7a7a18ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:5a:f4:9a:1f:1f:70:e7:11:ac:19:db:08:
                    7e:18:99:ab:36:ac:3b:09:e7:ed:70:c2:77:e8:9f:
                    16:1c:9d:76:3d:43:92:f4:7b:49:c4:6f:73:22:c7:
                    61:fb:c5:26:92:5c:20:36:c4:f9:ad:9d:ce:f7:43:
                    91:0f:d3:75:12:34:85:5a:66:e5:e1:f8:9f:14:ae:
                    a0:5e:d2:5b:35:13:d9:de:a3:bd:b2:18:db:ea:ba:
                    e9:f0:3a:93:0e:fc:0e:95:e2:46:54:46:ac:be:86:
                    c5:1d:a0:b5:49:20:9d:7a:71:53:21:da:4c:ad:2d:
                    3c:97:ae:be:d9:4e:14:01:7c:b9:d7:6b:37:aa:3d:
                    e6:fd:77:8a:ef:3d:8a:2b:88:a7:c9:fd:b8:7b:ef:
                    a3:2e:76:a4:71:8c:21:ef:1a:ba:1f:2b:88:80:28:
                    0a:f6:59:a5:49:1a:78:55:69:fa:cd:e3:3c:2a:70:
                    8e:cf:e5:6c:2c:5c:c4:86:33:c2:e0:c1:ff:86:be:
                    2a:74:7a:82:f0:9d:50:8b:da:cb:2d:44:e8:55:d5:
                    37:88:3a:7a:95:d6:97:75:9a:67:0c:d9:67:6a:c8:
                    86:29:ad:5e:8c:bc:7b:36:b9:ba:8e:7b:ad:3b:2e:
                    c8:39:cd:55:8f:54:84:76:f5:0f:9f:d4:ca:dd:ba:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F6:3E:C4:40:73:85:0E:62:26:77:A6:D7:A6:2D:BF:7A:7A:18:AC
            X509v3 Authority Key Identifier:
                keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3c:6f:26:36:58:6a:80:85:a4:fd:70:a7:b8:8f:f2:2a:42:
         8e:a1:90:11:7e:cf:1e:58:20:c6:7a:22:c2:4f:0f:cd:e1:ec:
         a2:90:f6:08:a8:9d:c4:bd:10:2e:19:e8:03:d9:20:97:a3:d8:
         3f:04:34:9f:80:50:73:df:4e:53:9f:12:03:5c:70:91:e1:fa:
         6e:9f:8a:35:fb:0f:19:67:bc:19:ec:69:48:ea:3a:d4:90:5c:
         ac:bf:e3:cd:00:61:57:1e:0a:ac:98:73:9e:78:a9:e4:8c:23:
         e0:ed:f0:83:aa:4f:06:f6:ba:d2:a9:75:f6:6f:6f:80:39:51:
         80:70:f8:5b:8f:06:37:c7:5b:6a:16:14:fc:75:6b:b0:83:05:
         ed:b4:3c:d2:a0:0a:dc:7b:ab:9e:cf:98:9b:c5:ab:a5:6f:99:
         29:00:0f:82:c8:64:85:e1:99:bf:c9:13:85:6e:65:24:26:8e:
         0d:69:4b:d9:c2:f8:82:f0:c7:4c:b6:8c:60:cb:49:e5:a4:97:
         08:d0:42:cb:5c:d4:dc:8a:7e:57:15:90:10:dd:d1:6e:fb:c3:
         a9:92:5e:c5:2d:e8:76:a7:aa:46:28:01:62:29:91:13:7b:07:
         b8:96:23:d6:06:04:82:66:40:ed:b8:d4:d1:3f:e8:86:fd:4d:
         d0:dd:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----