Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
File:                     eylHREhZAKyWM7duV4vRXvgjhBg.mft (raw, json)
Hash identifier:          nWANka3dbUAwoAZdQpZfO/ZxlUz9iRjMBywBAA76H5s=
Subject key identifier:   C8:72:02:82:F6:3F:94:F9:24:3C:7C:00:4E:FB:A5:E9:8D:50:F5:28
Authority key identifier: 7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18
Certificate issuer:       /CN=7b294744485900ac9633b76e578bd15ef8238418
Certificate serial:       0193FB1DAEB7941795EB00781A1545B3DD10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eylHREhZAKyWM7duV4vRXvgjhBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
Manifest number:          0320
Signing time:             Wed 25 Dec 2024 00:00:46 +0000
Manifest this update:     Wed 25 Dec 2024 00:00:46 +0000
Manifest next update:     Thu 26 Dec 2024 00:00:46 +0000
Files and hashes:         1: eylHREhZAKyWM7duV4vRXvgjhBg.crl (hash: 6fG5pWuN9CmyHeeBOvfQvU5dUFrzqABH3ut3swydjBc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fb:1d:ae:b7:94:17:95:eb:00:78:1a:15:45:b3:dd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b294744485900ac9633b76e578bd15ef8238418
        Validity
            Not Before: Dec 25 00:00:46 2024 GMT
            Not After : Dec 26 00:00:46 2024 GMT
        Subject: CN=c8720282f63f94f9243c7c004efba5e98d50f528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:87:4d:06:ed:cb:24:47:c1:d0:17:c8:fd:
                    ef:c4:b0:82:8b:e4:cf:b6:66:2c:3e:a2:e4:bc:52:
                    a2:22:ea:c1:f1:26:36:b1:ab:18:92:2e:36:ae:e1:
                    f2:cf:84:1b:96:06:01:bf:ec:45:d5:04:bc:38:9b:
                    58:a0:f9:57:cf:4c:91:f3:fd:be:db:da:f6:62:37:
                    2a:2f:6e:88:66:65:62:e7:91:c2:06:81:ed:65:f5:
                    ae:30:6f:f5:3c:d4:19:5b:3f:9a:e8:6b:86:ec:49:
                    f9:9a:03:4e:bf:1f:69:6b:ee:cf:49:65:10:17:a2:
                    52:10:2a:30:59:21:b8:4f:f8:72:0d:ea:0d:e0:13:
                    7a:a6:36:b6:a0:25:8c:c0:6d:f7:11:43:ed:56:a4:
                    fa:f9:e9:70:e7:55:47:45:f0:66:64:be:77:c6:2b:
                    3a:91:ff:1c:0c:3b:ca:c9:f0:a4:cd:47:3a:f4:e4:
                    aa:a3:06:8e:bf:fa:e1:f0:b6:fe:20:cc:35:60:a5:
                    73:aa:5f:e1:b9:4c:39:e6:52:60:71:51:2d:e6:f4:
                    d2:3b:12:68:f8:26:bc:5f:b1:c6:72:f2:66:52:12:
                    26:90:b3:de:4c:49:d7:9d:41:4a:2b:93:cb:74:bc:
                    1f:52:80:75:34:21:dd:91:bc:fc:7b:8c:f9:1c:6b:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:02:82:F6:3F:94:F9:24:3C:7C:00:4E:FB:A5:E9:8D:50:F5:28
            X509v3 Authority Key Identifier:
                keyid:7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eylHREhZAKyWM7duV4vRXvgjhBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:55:6d:da:23:f3:d4:1b:6c:30:25:01:0b:99:03:74:79:
         18:f0:c9:79:ee:c1:29:e5:05:06:e9:b0:bc:61:a3:5c:63:14:
         23:6d:66:2f:0c:ce:af:34:88:68:89:e1:89:a3:8b:d5:34:97:
         bc:be:6d:5e:cf:82:d7:2a:86:90:42:0c:7a:3e:21:b9:76:f7:
         86:a8:ed:84:c8:9c:3c:b8:ba:7e:30:87:f0:39:eb:56:8d:95:
         11:99:37:49:fb:00:3f:fd:1b:2a:98:ad:36:7f:a2:a3:37:bb:
         8c:13:22:93:e6:55:41:f1:2a:2d:69:95:d2:70:a6:96:99:5d:
         50:ba:6d:a7:eb:5c:cc:ca:82:96:59:62:d5:2d:5f:56:ec:52:
         3c:3d:c9:68:f0:e9:df:44:43:fb:db:2c:bb:0b:49:a7:69:43:
         1d:ab:ca:38:df:80:31:36:ef:6e:cc:fb:c7:1f:18:17:9d:7d:
         e4:36:84:15:46:da:f3:29:90:ea:7e:af:e5:6e:50:8a:6c:06:
         7c:ac:eb:71:62:cf:f1:09:51:1c:d2:c5:72:58:62:65:38:64:
         55:6e:e1:9e:8d:38:c1:67:a7:1b:46:9c:90:df:69:65:53:d1:
         f5:e1:21:d7:80:98:f0:ed:44:23:04:0a:a5:87:16:ed:77:c1:
         9c:02:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----