Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          eGSzOstliPqFmdhNiF6WTyyacEXAKx55rBPRQRj0prw=
Subject key identifier:   4A:F7:BE:10:62:64:27:A9:6F:AC:FB:87:9A:37:07:52:6C:A8:C5:21
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       01962F0684D956BEEADCAF0FD9B6C84666B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: BxGjCCNH4MEFEiuxT05GNJnKgQJOAfPrXdqzbvenQoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:84:d9:56:be:ea:dc:af:0f:d9:b6:c8:46:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=4af7be10626427a96facfb879a3707526ca8c521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:9f:4d:7b:a7:6f:15:f5:01:52:0a:98:d2:
                    04:98:7b:28:6d:95:46:c3:31:0d:3c:ac:ad:71:f1:
                    82:c6:b6:f2:5c:b7:77:ff:e2:5a:67:c5:d5:27:3a:
                    b7:21:60:36:37:bd:69:8b:f3:51:a2:54:ac:eb:6d:
                    5c:eb:80:4a:3f:39:bd:d8:ef:4c:5d:ef:83:33:d2:
                    ea:86:58:d3:63:f6:88:bb:e5:14:bf:d7:3b:0a:cc:
                    4c:04:23:e7:31:fc:d6:14:78:4f:20:0c:55:ce:1f:
                    5f:a8:95:d1:f2:f9:af:4d:38:f3:a2:39:fa:3b:58:
                    18:c0:13:0e:1e:a1:49:bc:1c:29:1b:b5:44:c8:30:
                    3e:cd:21:fb:48:ce:e3:f9:dc:46:0c:0f:87:de:75:
                    73:f0:56:4c:43:1e:73:6b:1d:e3:65:92:c5:d9:b4:
                    1d:6f:68:1f:c5:ec:9b:cf:f5:c9:bf:4c:bf:7f:c9:
                    91:dd:0f:21:f2:e1:51:e3:83:3b:88:1d:6c:a3:11:
                    9c:c5:27:4e:1c:4a:51:df:fd:e8:b2:72:16:fe:c6:
                    9c:5d:8a:e7:d6:4c:a1:5a:0a:7c:5b:15:60:de:67:
                    18:96:12:75:04:86:19:f2:81:07:69:e6:45:83:b4:
                    70:1d:1b:e3:1f:d5:e0:42:ec:62:f8:90:63:7b:51:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F7:BE:10:62:64:27:A9:6F:AC:FB:87:9A:37:07:52:6C:A8:C5:21
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:9c:9e:b8:27:ab:d5:9a:09:4c:df:dd:e3:56:b5:15:2c:
         7c:05:8e:4c:c5:02:8c:aa:f9:0c:2c:64:50:f3:15:84:2f:31:
         67:06:64:1c:1e:37:a7:4a:07:c2:a5:94:c7:87:6d:63:af:25:
         3c:3e:dd:00:47:e3:1d:6e:d6:b9:64:b4:73:df:8a:1e:5f:b0:
         0c:43:36:94:13:d4:5d:36:93:fc:7e:96:91:9c:2b:5f:67:8b:
         06:0b:f6:13:08:be:b4:2b:7e:59:13:00:04:4b:4d:e4:25:a7:
         ea:ab:20:b7:61:b5:b6:7c:91:ad:3d:03:55:6d:bf:93:b3:64:
         dc:58:54:57:ea:6f:94:6d:61:5b:14:97:d0:16:96:60:c5:32:
         ea:e0:28:21:7d:e1:c7:da:a9:55:47:82:ef:31:67:36:e4:3d:
         6f:22:4e:4e:55:de:93:1b:81:ee:83:b6:08:63:5a:0f:db:36:
         ce:cd:07:23:1b:5b:87:1f:dc:11:ae:5f:c9:9d:f4:27:d0:50:
         af:69:cb:6b:33:4a:67:91:a8:5f:e1:f0:87:08:8c:33:b8:9e:
         77:6d:c3:a8:a9:7b:01:6b:5b:48:71:d7:da:72:3d:b3:82:ed:
         df:d5:7f:c8:0d:dc:14:f8:4c:0a:e8:47:89:0f:2b:1b:9f:59:
         a7:f6:9e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoTZVr7q3K8P2bbIRma4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBkZTRiNTJjMzE3MjJlNjJiOTM5NmQ4N2ExZWE4ZDUx
YTA4ZTUwHhcNMjUwNDEzMTIwMTE4WhcNMjUwNDE0MTIwMTE4WjAzMTEwLwYDVQQD
Eyg0YWY3YmUxMDYyNjQyN2E5NmZhY2ZiODc5YTM3MDc1MjZjYThjNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5afTXunbxX1AVIKmNIEmHsobZVG
wzENPKytcfGCxrbyXLd3/+JaZ8XVJzq3IWA2N71pi/NRolSs621c64BKPzm92O9M
Xe+DM9LqhljTY/aIu+UUv9c7CsxMBCPnMfzWFHhPIAxVzh9fqJXR8vmvTTjzojn6
O1gYwBMOHqFJvBwpG7VEyDA+zSH7SM7j+dxGDA+H3nVz8FZMQx5zax3jZZLF2bQd
b2gfxeybz/XJv0y/f8mR3Q8h8uFR44M7iB1soxGcxSdOHEpR3/3osnIW/sacXYrn
1kyhWgp8WxVg3mcYlhJ1BIYZ8oEHaeZFg7RwHRvjH9XgQuxi+JBje1H1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr3vhBiZCepb6z7h5o3B1JsqMUhMB8GA1UdIwQY
MBaAFHiw3ktSwxci5iuTlth6HqjVGgjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEt
NDc0ODBmZWQwOWIwLzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEtNDc0ODBmZWQwOWIw
LzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUWcnrgn
q9WaCUzf3eNWtRUsfAWOTMUCjKr5DCxkUPMVhC8xZwZkHB43p0oHwqWUx4dtY68l
PD7dAEfjHW7WuWS0c9+KHl+wDEM2lBPUXTaT/H6WkZwrX2eLBgv2Ewi+tCt+WRMA
BEtN5CWn6qsgt2G1tnyRrT0DVW2/k7Nk3FhUV+pvlG1hWxSX0BaWYMUy6uAoIX3h
x9qpVUeC7zFnNuQ9byJOTlXekxuB7oO2CGNaD9s2zs0HIxtbhx/cEa5fyZ30J9BQ
r2nLazNKZ5GoX+HwhwiMM7ied23DqKl7AWtbSHHX2nI9s4Lt39V/yA3cFPhMCuhH
iQ8rG59Zp/aeAg==
-----END CERTIFICATE-----