Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File:                     Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier:          ZWEwI6MW4MIZppWREFOH47Nf/dJmqYl8zbdlYJEk8Xo=
Subject key identifier:   7B:DB:BB:88:FE:91:62:77:AF:93:36:A3:6E:E9:81:97:FA:6D:CB:A8
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer:       /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial:       01962E996FA4F141D9A3592AAA8D4D7B92A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: gAy3+a5BGQX4Q12wsntS5fgi0LRdMC1MVBtRtz6e8iY=)
                          2: ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa (hash: pOwNfstFAL1zr5tNQSEDWIMsfqU4J9T9Io0xMgEThiM=)
                          3: lmg8TFGUlHLh94h8C2YmH1aKN7I.roa (hash: /G2RJ6kE/znQ/BtVoL2ygrSOBDDhTzMPkkZBmwvtXKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:a4:f1:41:d9:a3:59:2a:aa:8d:4d:7b:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=7bdbbb88fe916277af9336a36ee98197fa6dcba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:22:92:99:e5:b3:29:3c:1e:1f:09:e7:d4:
                    8c:30:84:ee:05:5b:1f:c1:d8:a3:be:ca:68:95:29:
                    0e:91:68:89:41:19:4f:25:69:ca:d8:dd:27:96:02:
                    7a:5e:17:a2:fc:a1:9f:fa:57:7f:2e:60:7b:5f:f0:
                    9e:1d:fb:39:00:02:60:1a:3b:f7:5a:4e:7d:0e:f5:
                    72:8b:64:f4:d9:a5:0c:9f:52:c0:d1:68:26:df:d0:
                    e4:f4:7f:59:15:53:9d:64:c4:0d:48:eb:f8:55:74:
                    1f:94:09:ec:58:51:bf:62:ec:0d:c3:e1:f2:4a:6a:
                    92:fc:29:e0:f0:6b:9d:b5:5b:9f:86:a2:48:c4:63:
                    4d:8c:93:92:e9:67:5f:e4:ac:72:45:39:e7:68:b7:
                    df:e6:34:c5:70:65:4c:77:d6:36:03:0c:a7:0f:db:
                    8c:3a:c9:09:27:2c:c6:20:30:09:52:cc:40:22:c7:
                    c0:1d:f4:ba:d4:a1:fd:f9:2b:79:37:aa:79:a8:0d:
                    d4:b5:37:b1:ae:0a:34:6d:7d:34:bc:5f:05:0a:99:
                    25:48:b6:2e:91:be:12:13:d4:29:aa:5b:e8:cc:cd:
                    a4:9f:ed:b8:c5:2f:b6:31:5e:75:40:0a:4c:84:2c:
                    7e:83:6f:d0:59:4e:b6:b4:83:69:fe:1c:64:9d:4e:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:BB:88:FE:91:62:77:AF:93:36:A3:6E:E9:81:97:FA:6D:CB:A8
            X509v3 Authority Key Identifier:
                keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:96:85:4e:6e:82:38:a0:4f:e2:1b:dd:35:b2:a8:22:b6:
         da:9a:c7:78:fa:1f:ca:8b:6f:b6:04:56:33:b3:9a:98:3f:1a:
         b9:b8:bb:66:fd:87:53:30:9b:fc:f2:7b:5d:0f:31:a2:d9:b0:
         63:ec:ea:b2:46:86:c2:f7:33:46:26:84:52:a9:6c:35:5a:14:
         be:cd:3f:f7:85:ea:b2:1f:31:cc:3c:75:ac:7e:02:5a:d9:54:
         ac:76:cc:47:7e:aa:01:b7:21:0a:8f:31:e3:ab:e6:df:a2:1e:
         98:4d:21:4b:3d:15:b9:34:dc:fb:74:b6:5d:c4:08:63:e5:b9:
         63:5f:3f:8e:cf:41:8a:70:c3:d6:e6:30:c1:2e:38:d2:27:91:
         e5:86:e0:3d:34:1f:5e:e2:c9:c4:22:b5:be:68:9a:d8:e4:19:
         66:99:5a:15:56:9d:1c:89:18:fa:54:25:e1:4e:75:9e:62:4b:
         46:39:ff:03:92:d4:63:78:ad:e9:74:c9:66:2f:73:91:0f:f3:
         e6:cc:60:5d:4e:5e:5d:c1:2a:4a:d8:23:1b:f5:36:a1:fc:03:
         89:95:ef:17:3b:de:db:5b:63:30:e7:9f:66:ad:4a:ca:c7:54:
         47:55:78:5c:7f:2f:84:4f:11:2f:b2:17:4d:3e:b1:31:76:ff:
         d6:0e:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----