Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File:                     veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier:          wMLqs72oTCgzqPwRSfmVCpfqf1RN01HweWGtWL65U6s=
Subject key identifier:   60:D5:70:4B:34:76:43:1D:EB:53:AE:82:A1:8B:65:2D:55:F4:CF:90
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer:       /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial:       01962F0694C87F1628BA58F17C6E68F06683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: BkYDB3lrl4W/JRhprl+/V0BYhj3DXLivV+Hy95Tchv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:c8:7f:16:28:ba:58:f1:7c:6e:68:f0:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=60d5704b3476431deb53ae82a18b652d55f4cf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:a7:16:50:c9:eb:67:14:33:6d:fd:2f:4f:
                    10:b1:ad:7d:21:f3:bc:cd:94:d3:40:ea:04:fd:a7:
                    eb:56:a7:ec:7f:c2:29:86:15:31:7c:87:db:e2:3d:
                    3a:4e:23:aa:54:81:9a:a8:41:4f:5d:d6:02:3f:2f:
                    4f:c5:b0:9c:3d:29:0e:18:89:f5:68:49:39:99:82:
                    c1:c3:86:fb:5a:d3:53:8c:b8:57:41:79:18:c4:19:
                    31:0f:4f:71:b9:05:1e:21:71:73:6e:f3:41:c1:f2:
                    ca:5e:f4:ec:d2:eb:b7:a8:b8:fd:55:aa:30:41:c6:
                    c9:80:3a:9a:1a:6f:8a:b5:3e:22:c0:6f:25:70:bb:
                    81:f7:95:ec:86:38:90:cb:94:af:da:eb:0e:12:c6:
                    c2:3c:ac:62:3b:16:e0:a4:67:44:41:47:8b:06:f9:
                    6f:10:20:0d:ba:8f:aa:90:7a:14:66:5e:d1:01:b3:
                    e1:00:2a:c4:a7:f9:3d:44:1c:c5:20:5f:a5:16:4b:
                    c3:2e:c3:d2:bb:dd:bc:80:47:50:d1:70:a6:ec:c5:
                    43:f6:24:7a:a5:37:15:12:8f:fe:ed:8d:f8:7a:f5:
                    7c:b0:e9:e1:a4:65:ff:41:e4:d4:48:4f:96:93:95:
                    16:be:07:e4:fc:2e:fe:25:cc:21:29:25:42:c9:0b:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D5:70:4B:34:76:43:1D:EB:53:AE:82:A1:8B:65:2D:55:F4:CF:90
            X509v3 Authority Key Identifier:
                keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:94:3c:c7:92:59:bd:9f:13:b9:e2:6b:44:a6:41:ff:e8:
         f6:67:bd:67:7b:08:b2:4e:ea:d5:88:b4:4b:3e:b9:dd:6f:8d:
         11:3d:14:d8:4b:0d:b5:c5:e1:2f:f5:a1:fc:59:b0:bd:49:18:
         56:e8:59:5c:4e:5e:e6:fa:19:76:c3:49:60:2d:a2:3e:7a:67:
         14:86:c2:34:ff:b7:6f:1d:79:3a:ac:e0:48:a2:8c:a5:5c:e4:
         77:0c:3f:71:f7:ba:f5:bb:d1:e5:dc:37:82:ba:3b:01:4e:da:
         88:cb:1f:e6:94:5b:1d:cc:8b:e1:6b:8f:6c:1e:4a:f2:9c:42:
         16:3e:98:ee:2e:b3:84:e7:12:fb:14:4d:27:20:ba:14:ec:e4:
         09:70:c6:cf:39:b2:c0:f3:68:40:42:37:7d:a1:af:e5:c5:0e:
         df:67:41:fe:d6:f4:5a:8e:ac:5b:37:37:e4:e0:2f:a4:de:52:
         36:88:c2:48:25:a9:b5:7e:0a:f5:36:7c:e3:94:74:07:3b:93:
         8d:87:25:4c:a1:1f:5b:2e:d8:bf:bc:18:32:cf:68:25:fc:b8:
         81:ba:ef:64:fb:9e:1b:94:76:d5:4a:1e:26:e0:58:a8:36:cd:
         7c:80:45:9a:6a:6b:fc:f9:36:91:f7:b9:60:a8:57:2b:a0:6d:
         54:35:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----