Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File:                     7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier:          kZdSrSZXJKvAvWKxTS8mIjuf3oBgcPbzFa2EJMhjlwc=
Subject key identifier:   5B:7F:AF:C5:E6:A7:93:B7:D7:EA:5F:1B:11:02:C4:FD:14:85:E4:DF
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer:       /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial:       01962F3D679447EFE5E0B421506EA616D154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number:          04C9
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: Q87QDCOWFRtFd5cPTVdmdwOquR1AMU/K1os5k5fF/kI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:67:94:47:ef:e5:e0:b4:21:50:6e:a6:16:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=5b7fafc5e6a793b7d7ea5f1b1102c4fd1485e4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:45:14:ed:52:21:f9:0e:60:d4:42:1a:72:
                    94:8a:c5:09:d4:0e:bb:47:51:e7:af:32:5b:3c:af:
                    2f:45:52:5f:14:dc:be:08:52:66:0c:bd:19:35:4e:
                    13:dd:d6:52:78:3f:5e:fc:2d:ba:9a:8b:d4:4f:37:
                    e6:17:08:96:1a:2e:b6:0f:d7:cd:89:10:92:76:ac:
                    fd:30:a5:5f:c6:91:ec:a4:63:2b:04:57:8b:f3:a8:
                    b0:30:d4:71:b4:1c:ff:e4:7e:05:4a:d7:a6:87:81:
                    97:cf:59:13:14:18:56:44:c2:69:c7:9e:ff:d4:57:
                    12:37:51:ee:38:a9:14:f1:f4:70:06:9d:6d:ab:39:
                    e0:56:fa:5b:ae:de:33:61:25:ed:dc:70:04:b1:8e:
                    42:3e:f3:e2:ed:b9:6d:ff:21:59:a1:b1:73:79:96:
                    b9:71:98:64:56:fc:84:95:46:8e:5b:da:e1:7a:70:
                    77:2f:86:06:08:85:7a:cb:b5:6b:d8:2a:b5:c9:18:
                    6f:6f:cc:d9:db:d5:5e:c5:37:dc:9e:5a:21:5a:21:
                    9c:b2:45:75:fd:f6:af:e3:0c:dc:d8:47:09:f5:9d:
                    06:a7:8b:a9:28:84:4e:6e:ce:f9:31:0a:1e:81:c9:
                    fa:17:3f:03:71:86:3a:8a:74:90:ab:65:0f:12:d4:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:AF:C5:E6:A7:93:B7:D7:EA:5F:1B:11:02:C4:FD:14:85:E4:DF
            X509v3 Authority Key Identifier:
                keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:90:04:a0:a8:d8:e7:0f:fd:f6:c4:f8:50:6a:6b:43:e3:
         77:3c:81:d2:38:34:e1:45:75:01:76:b8:a8:ac:f0:37:f5:0f:
         93:85:09:80:dc:6b:65:ab:2c:47:ce:f1:0a:1e:2e:57:ed:a0:
         df:66:0a:f4:80:9a:eb:ed:89:ca:f8:27:6e:6c:b2:19:80:b3:
         b4:26:6a:5f:84:fe:bc:0e:a3:4f:0d:3f:b0:1a:d9:a0:f8:70:
         d1:ab:0a:f2:b8:e2:6c:df:a7:67:2d:43:ae:b3:5d:2a:94:ed:
         bd:4c:fc:d9:4a:b4:04:3b:90:80:c6:d2:80:d7:41:c6:f7:07:
         aa:fd:b1:6d:17:b7:06:ae:a1:37:98:b9:04:27:89:64:8d:33:
         d3:a2:49:ed:e3:84:76:a0:03:6e:d2:07:4e:fc:6f:27:17:33:
         f9:6c:bc:88:78:00:2b:8d:3c:a7:cc:d7:29:d1:83:22:2d:c2:
         91:f0:1a:27:55:cd:d2:f5:e5:0f:df:51:47:0e:ad:bb:bb:ae:
         b4:d7:3a:9e:79:c5:63:91:7c:49:cc:8e:f5:7f:c9:f4:1d:58:
         bf:34:f3:d2:be:d9:29:d5:ab:b3:9c:b3:d2:4f:7b:29:8c:c6:
         e3:9a:6a:a3:ab:21:05:50:a6:5e:52:38:5b:2e:02:48:2f:60:
         3e:8e:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----