Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File:                     ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier:          opIhknb3uQxybMO8Qa5gk/4M3bn2On9dz1bDkDo17v8=
Subject key identifier:   2E:86:C5:06:3B:6E:74:6B:39:83:F6:0A:B6:C5:13:29:75:45:02:BB
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer:       /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial:       01962E99A37E4AC8F133D676276179C1B9A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number:          129A
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: qOM06PB61aG1ByE5ee4ItsFpWG8iSPIbwNr95013M2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a3:7e:4a:c8:f1:33:d6:76:27:61:79:c1:b9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=2e86c5063b6e746b3983f60ab6c51329754502bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:14:b6:11:c5:f1:b2:d1:b1:60:67:e3:5f:
                    d6:75:40:3e:90:fe:2b:96:3e:03:71:e8:05:f9:54:
                    7d:5f:a7:66:3f:79:3c:e6:9d:8f:60:7e:e7:0e:b1:
                    b8:56:08:a7:9e:b7:55:da:5a:12:79:92:cb:63:19:
                    55:77:c4:83:c6:35:b1:47:16:46:79:64:89:07:bb:
                    90:d8:d3:e1:8e:0a:3c:c8:4d:d6:0d:72:d2:e9:a7:
                    b3:94:a2:e4:ef:87:5c:74:d1:25:96:98:cd:e2:b9:
                    68:48:6c:14:a1:64:77:3c:e1:bc:08:93:57:4b:88:
                    af:ab:61:24:29:b5:46:9f:98:7d:f1:93:16:63:9c:
                    45:ca:b8:56:c5:fb:12:fa:40:15:dc:24:4c:97:0f:
                    d9:8a:44:42:7e:85:44:9c:34:9e:d6:88:51:38:d5:
                    92:f4:78:fe:87:a8:77:2f:03:c1:89:4e:21:bb:35:
                    ce:8a:1f:09:7f:81:61:87:f5:3c:c6:99:88:90:7b:
                    58:52:8e:a1:18:7a:13:59:7d:b3:64:01:02:72:d6:
                    e0:1a:0a:15:70:3d:77:05:fb:d6:40:1e:3b:e7:88:
                    ac:e1:b4:4f:d6:f7:98:ba:b3:c6:e3:1c:fc:67:e2:
                    4d:4e:5e:02:3f:37:1f:21:1a:e0:73:92:48:f3:e5:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:86:C5:06:3B:6E:74:6B:39:83:F6:0A:B6:C5:13:29:75:45:02:BB
            X509v3 Authority Key Identifier:
                keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:67:46:9e:f0:3a:67:59:e2:46:0a:dd:6d:a3:da:77:88:d1:
         c7:03:7a:c8:b0:fa:31:87:cc:d3:b1:69:02:58:dd:55:06:62:
         da:05:3e:86:1f:04:da:d9:bf:ab:57:78:8d:01:f2:bc:5f:a5:
         10:75:ea:83:16:4a:38:6a:a0:0a:0e:7e:63:9b:92:06:95:48:
         e7:3e:b4:f8:df:51:a9:02:d0:75:71:38:b5:19:e5:56:59:fb:
         d1:6d:09:82:44:97:f9:06:0e:af:fb:2d:97:1f:b0:45:3b:31:
         7c:7c:83:8f:f3:c5:f1:10:09:d4:bd:4d:be:7b:62:f3:6a:a4:
         01:69:a2:0b:17:1c:b4:73:4f:fb:aa:34:b4:cd:5d:3f:99:e1:
         07:61:1d:75:dd:e4:98:1f:67:c7:bb:d6:28:47:16:ed:62:ea:
         2f:85:68:2f:3e:13:f0:6c:1e:6e:31:58:7b:8d:23:ac:b9:2c:
         5c:5c:84:a9:02:36:ab:8d:7c:80:e9:a0:85:45:03:14:c7:07:
         07:e7:15:b4:f2:69:56:a7:63:cf:88:3f:e9:ff:73:0a:aa:33:
         8e:ae:6b:8e:2d:39:91:e5:73:b9:fd:a5:c1:d3:60:3d:66:f9:
         d8:f6:c1:72:2d:2d:7d:60:75:cb:9a:19:24:2c:e0:5e:e8:a3:
         f0:f6:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----