Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File:                     ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier:          MDD0ekC+gsCpStg6Bc97x2dKpFY13FuiggijqDw4ChU=
Subject key identifier:   D6:CC:22:5D:41:11:BC:43:4F:56:94:9E:29:F0:E1:C1:1E:02:99:AB
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer:       /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial:       01962F74E402B040FD81796C02E71AE3E17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number:          050B
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: j2kzcfRZh8yKbxhZFuK/twTiU759VBCaJJoJnop7xsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e4:02:b0:40:fd:81:79:6c:02:e7:1a:e3:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=d6cc225d4111bc434f56949e29f0e1c11e0299ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:91:77:6c:bc:10:e3:a6:7c:d2:62:a5:cd:
                    6d:02:9b:d9:ae:65:f2:eb:ed:aa:f9:3a:ba:7e:d6:
                    34:d5:41:bf:5d:8d:5b:74:a7:1f:b0:14:e3:f6:b7:
                    68:b3:2e:48:a0:c4:a8:47:20:dd:4a:d6:5d:9a:54:
                    bc:f9:da:69:fe:b5:63:a3:4b:55:53:46:81:15:19:
                    5f:50:87:3a:2e:a0:b9:32:68:ee:50:2d:5b:a0:7d:
                    60:af:10:c5:88:fc:fc:8a:64:c5:47:4c:5f:09:a7:
                    36:74:c8:f3:26:d3:a2:be:5b:a5:19:e8:03:04:09:
                    75:e6:3f:de:ad:12:6a:a5:fe:69:d9:56:a9:30:f1:
                    2c:93:48:50:ba:26:ab:a1:e4:8f:b2:71:dd:7c:84:
                    51:5c:a8:1b:0a:56:d4:a7:d0:10:7b:3c:6e:72:ff:
                    cb:e0:37:b9:1d:0e:d0:7f:05:3d:2a:d9:c7:c1:3f:
                    ae:39:80:85:d2:32:4c:6b:8e:4a:fc:2b:46:f1:4c:
                    0f:6a:c5:65:e1:15:a3:27:b4:ee:b1:d4:cb:0a:0c:
                    a2:d1:89:97:b4:10:d2:03:67:92:52:92:b6:3c:eb:
                    92:8a:59:98:cd:76:0d:c6:d7:1f:57:82:b0:14:33:
                    55:bb:d9:6e:82:f1:65:a9:33:17:a6:65:31:61:c8:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CC:22:5D:41:11:BC:43:4F:56:94:9E:29:F0:E1:C1:1E:02:99:AB
            X509v3 Authority Key Identifier:
                keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:95:c2:87:1b:e3:fe:a5:7d:f9:66:c5:db:8c:09:d3:7d:
         fe:5b:83:e6:0c:91:60:3a:9f:d1:90:9d:59:76:59:4b:c0:d5:
         8e:7a:83:0f:97:a2:0d:fc:10:23:71:f8:70:86:2f:35:2a:ee:
         07:a7:7d:62:67:18:b9:20:20:2e:13:31:db:f6:8a:1a:bb:99:
         30:88:72:52:37:08:60:df:a8:61:31:9e:d2:d2:d3:44:be:e2:
         57:d6:51:35:98:54:42:97:ee:20:ae:0e:83:a9:93:b5:69:0a:
         bb:f7:ca:09:5b:d3:5f:f4:33:e5:d9:1c:1c:5e:e3:4e:da:b4:
         45:0a:94:07:b1:23:b2:5c:f3:c0:6b:bd:b1:f4:39:12:a2:c6:
         63:d3:1b:bc:02:9a:79:ea:0c:9f:1c:a8:cb:47:68:6e:25:bf:
         42:79:2e:76:74:a9:7c:bd:bf:f9:56:87:14:cc:2d:a3:27:af:
         14:15:6a:6e:48:11:2a:3b:d7:be:61:69:24:50:a1:7b:59:56:
         8c:43:47:68:b7:ab:83:2e:5c:87:06:4b:e8:61:3b:4e:8f:2a:
         c6:d5:8e:28:96:a5:c0:58:dd:06:cf:4c:b1:ca:9b:27:be:79:
         74:c4:d2:e1:ea:9c:23:d6:5c:1d:54:b3:4d:9f:49:f3:b6:17:
         c9:49:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----