Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          nEw0r09JQ1GbUPZHKzcXxnquiUrVh0zvvH82+JQi4AA=
Subject key identifier:   04:A5:6C:0E:7E:99:21:87:E3:8A:21:B0:1B:8F:F6:F7:84:96:48:7B
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       01962E98D1C330B9C84E12A94C23343B465E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: ZbkB13work1Q1jQ1v9t5rhei3RDKbwOuUYNyMGsUxNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d1:c3:30:b9:c8:4e:12:a9:4c:23:34:3b:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=04a56c0e7e992187e38a21b01b8ff6f78496487b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:8f:bd:b8:89:dc:1e:2c:e0:e6:90:d9:ca:
                    3f:a9:83:2b:d2:5a:56:23:44:86:73:72:94:7a:4f:
                    15:d6:1c:d9:14:da:44:2b:7b:5e:73:ce:be:9d:c8:
                    d8:fb:92:f0:fc:bb:67:7b:57:96:72:39:e2:36:12:
                    e3:eb:c0:fe:cf:fe:48:fa:45:65:85:d1:ee:12:30:
                    33:8d:8e:3c:1c:c3:fa:29:bf:ac:90:19:1f:7b:b9:
                    aa:c0:fb:d1:af:f9:f6:1a:aa:33:5d:f8:07:ea:83:
                    1c:b6:c7:c4:1a:66:78:5a:37:92:25:8c:12:0b:cd:
                    0e:a3:92:59:37:1e:e2:a8:fa:fc:1d:b5:81:c3:e1:
                    b8:e5:e3:43:fb:b6:27:d8:60:cd:ef:7b:4e:57:4c:
                    d6:46:e1:f8:11:60:53:79:9b:28:49:85:80:e4:e0:
                    9c:d4:c4:c7:f3:8b:a6:49:37:ba:f6:2c:ad:d6:2a:
                    1f:4f:7f:ea:e2:dd:c5:e3:c5:f7:1d:dd:aa:d2:a3:
                    58:b3:d3:03:10:29:bb:04:72:82:7c:d5:fa:99:af:
                    88:32:53:db:b0:4c:09:0b:2e:49:e9:9a:11:c1:e9:
                    56:46:2f:ce:d1:27:c1:33:97:71:49:b2:0a:57:4c:
                    18:33:45:37:0a:6d:b8:5c:bc:fe:94:20:d3:62:3f:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:6C:0E:7E:99:21:87:E3:8A:21:B0:1B:8F:F6:F7:84:96:48:7B
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:cd:44:da:ba:d3:74:e0:0d:9d:f3:c0:c9:fd:12:be:d5:
         e1:24:6b:3b:20:cf:ff:02:8e:f5:10:f4:5a:3e:cb:08:a6:df:
         1b:a2:45:80:4f:2c:e1:c7:a9:3f:c9:75:cd:28:4b:cc:2a:75:
         c6:64:60:6f:8d:0f:de:7f:56:ab:f7:64:9f:e2:46:88:b0:6b:
         e4:9e:78:d7:e1:24:6f:52:f9:7a:ed:4b:b2:aa:96:b5:31:aa:
         2e:9b:68:7b:ab:c3:a8:be:4f:2c:8a:11:fa:78:15:50:9f:30:
         65:8c:62:0a:c6:2f:fa:b8:a3:29:d5:b8:5a:0a:8f:47:79:5c:
         fb:69:01:56:77:81:cd:00:74:a8:c7:a4:28:45:25:5d:a9:2e:
         e8:71:0c:a0:e1:d9:2b:57:79:a6:3e:ff:91:9a:e0:35:b1:16:
         b8:8b:a6:d2:34:a7:84:34:49:d2:ad:9c:71:7e:c0:e1:5e:1b:
         6d:c5:0d:b4:3b:6d:83:71:43:ae:ab:15:bb:7f:36:6d:cf:63:
         3c:0d:e2:04:f7:86:9a:c5:7c:fb:d3:4c:c2:9b:34:23:5a:4b:
         b4:a4:13:9a:cc:06:d8:0f:54:01:2b:a3:7a:4e:26:46:ef:46:
         d7:88:91:d2:1e:a2:2a:e7:ac:f3:30:d9:f2:da:9d:4f:c2:0d:
         df:f6:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----