Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File:                     eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier:          3+PhnwQEjBEhVedbvUObhfKckS370lMzMKML3vzcnzY=
Subject key identifier:   23:54:6F:31:FB:ED:B6:7C:76:6B:07:6A:69:2B:52:4F:19:D5:B5:66
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer:       /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial:       01962DF395568A135DE38F564534774B8A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: mfehtjZb40z7SFoKE37tcf+ie8gLOLV+LsjWOo0+JHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:56:8a:13:5d:e3:8f:56:45:34:77:4b:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=23546f31fbedb67c766b076a692b524f19d5b566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:b6:fd:a0:f1:f2:cb:20:47:9c:0b:c0:11:
                    48:a2:ce:15:b8:11:c4:ec:6e:52:93:ba:18:ce:03:
                    b6:62:19:45:ac:13:cd:7e:3c:f0:7f:02:fd:bd:2e:
                    e2:64:c6:51:54:74:37:36:0f:9f:6f:09:62:d9:1a:
                    9d:4c:89:40:c1:84:65:04:43:d6:ff:d2:50:04:2b:
                    59:e4:2d:f9:13:58:8b:73:a4:06:a8:8c:5e:42:f6:
                    b8:79:1d:3c:81:52:40:5a:8e:19:9d:3e:7a:00:94:
                    18:4b:e9:24:74:3f:2b:83:5e:ce:87:48:ac:c1:fb:
                    03:f0:ef:4d:90:d6:ca:6e:b4:b0:ef:cd:3f:94:32:
                    2f:45:a5:04:b5:51:dd:18:b7:70:f9:90:f8:e0:aa:
                    01:16:16:b4:5d:9d:fa:1d:b1:82:b2:91:e2:53:80:
                    ac:76:05:b1:19:7f:9b:43:82:35:30:36:7e:78:77:
                    9a:4f:be:0a:7e:da:03:8c:2d:dd:9f:90:a4:7f:69:
                    01:46:63:a4:54:60:0c:f0:76:ff:05:16:e3:ae:dd:
                    81:41:05:36:19:1a:a1:99:08:f7:76:68:bb:fe:70:
                    c6:1a:f6:09:3a:f1:fa:8b:91:cb:11:20:60:98:6b:
                    ea:79:c2:48:e2:aa:3b:57:0d:cc:15:da:b3:e2:a9:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:6F:31:FB:ED:B6:7C:76:6B:07:6A:69:2B:52:4F:19:D5:B5:66
            X509v3 Authority Key Identifier:
                keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:fe:eb:cd:eb:c3:5b:39:50:fe:2b:d8:1b:e4:f5:ac:1c:
         ac:06:d2:d5:2d:98:85:eb:59:e0:7c:7e:f7:b7:cf:0d:29:59:
         59:64:a6:5b:e8:54:24:ef:9a:2b:63:ad:dd:0d:4b:e6:6d:37:
         b1:2a:0b:61:fd:b6:0d:f8:09:45:36:10:32:8b:c8:be:49:78:
         09:4d:59:eb:14:02:e9:5c:66:6f:32:22:e2:c4:96:eb:4f:d8:
         0e:27:79:bb:5b:51:7c:38:fe:f0:6c:86:95:58:f5:d4:5d:ed:
         89:76:71:d4:1b:5d:2d:28:94:19:92:07:fb:f5:00:37:43:c1:
         77:2a:fa:8a:b0:68:5d:7e:7e:cf:91:8e:8a:a7:d4:60:bf:99:
         57:42:80:9d:30:77:7e:8f:0d:00:bd:86:be:05:0f:ff:56:07:
         69:f7:bd:df:14:ec:15:b3:e9:04:0c:dd:55:10:f7:1f:41:f6:
         3d:58:31:c5:37:b3:63:f6:b2:81:ad:b7:6e:f2:1a:fd:10:70:
         09:16:98:f9:2f:79:5f:26:a7:4b:86:a7:3d:44:ce:67:02:26:
         21:05:65:a1:f2:c5:22:83:b8:71:59:63:46:0d:b4:b5:06:93:
         6f:b4:aa:1b:46:45:7f:bc:5e:f3:10:1c:de:dc:56:52:1e:58:
         7f:89:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----