Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File:                     clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier:          dfXnvpAV9fvAb9G79Rde1myPX9LuMb5MQ/FrZoGraVw=
Subject key identifier:   EB:08:63:C0:27:BC:C4:00:8F:C5:CE:28:A5:6D:BD:35:A0:7D:A4:F8
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer:       /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial:       01962F7470AF8F7DEFED7D59A41EECD21F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: vr+EjcdIanK0xiSEianN0DDK7nJ2E5Tm1zym8W9++8k=)
                          2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:af:8f:7d:ef:ed:7d:59:a4:1e:ec:d2:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=eb0863c027bcc4008fc5ce28a56dbd35a07da4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:5c:15:a7:cc:0d:e5:30:d5:b0:06:bc:e7:
                    be:a5:69:5d:cf:3d:e5:f8:6b:72:ef:f6:e8:82:36:
                    96:97:ac:fd:7a:1f:82:93:9a:be:57:72:81:f0:13:
                    f8:b2:47:01:38:b5:34:a4:2e:73:0b:9d:49:b5:9d:
                    76:c9:e3:89:6d:dc:02:06:e8:c3:da:db:db:c9:bf:
                    59:a1:eb:16:fe:50:50:8f:85:df:51:23:bc:28:c9:
                    0a:ff:ec:e5:8a:1d:bb:1f:89:9e:d4:b4:67:27:7e:
                    00:74:cc:39:84:c7:23:95:7d:3a:95:23:e4:df:a7:
                    3e:eb:4f:d1:56:9d:ab:1b:5c:2b:47:da:56:4d:e7:
                    ca:87:48:f7:d4:03:50:3f:4d:f8:79:a2:c2:a0:e1:
                    f2:b3:bc:ae:9a:7f:3d:2c:ec:cc:47:9e:ed:b1:eb:
                    47:15:ee:ed:e0:24:14:e9:2a:90:e6:11:21:28:96:
                    9e:76:df:38:64:be:c4:5d:4e:59:7a:f3:cf:40:ad:
                    ed:a3:de:6c:a9:fd:a3:33:93:97:63:7d:3b:0f:cf:
                    6f:36:e9:a6:af:07:f1:04:a4:70:66:de:a5:8b:e4:
                    7e:cc:9e:36:8c:c3:e4:40:ae:1f:b1:05:70:58:d8:
                    92:fc:e1:b5:33:19:ea:88:ce:d7:cf:02:a1:bd:9a:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:63:C0:27:BC:C4:00:8F:C5:CE:28:A5:6D:BD:35:A0:7D:A4:F8
            X509v3 Authority Key Identifier:
                keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:70:a5:d2:57:4b:51:7c:ae:78:ed:73:01:e3:9d:da:fb:7b:
         ea:43:65:cd:af:7f:48:bc:0f:9a:4b:e9:00:f8:41:f2:1c:7f:
         08:89:bf:46:39:69:fc:97:cb:88:f5:82:a8:c9:85:e5:09:41:
         93:f0:98:f5:32:fc:54:dd:bf:0e:da:27:dc:9f:e3:46:89:d1:
         4b:40:df:32:62:bf:45:3a:83:02:b7:d8:f6:d4:92:23:59:89:
         6a:62:e0:83:dd:cd:8c:92:8e:2e:45:9e:d2:3d:78:be:34:ef:
         7b:92:b3:d5:1c:c5:d5:a2:c6:bb:42:e3:35:5e:96:14:73:34:
         55:e6:8c:dc:05:ec:32:bc:e8:2b:60:82:52:7a:d7:14:83:38:
         0b:24:cf:d7:a1:3b:d6:ec:98:06:11:81:99:8d:d6:fa:f1:d2:
         65:43:7b:86:ca:22:1c:0e:62:82:88:18:1f:82:2a:a3:61:a6:
         a4:68:35:d7:5f:33:8b:98:af:42:a2:5e:14:ad:f7:fa:7b:08:
         e6:82:ca:d0:d4:e1:81:28:57:f3:73:1a:43:b6:41:fd:b7:fb:
         77:03:8f:d6:1c:ca:d9:96:16:3e:5e:b4:61:75:de:31:67:a2:
         e6:b5:0f:67:0c:fb:b1:9c:da:93:25:83:0f:aa:e0:35:32:bf:
         e9:b2:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----