Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          QyOhKbv343icxYwlzDMwm+wqPBGUzotCPL1LDZEYSOs=
Subject key identifier:   BA:C2:E7:21:92:B8:0C:36:4E:16:7E:23:A1:2D:25:2B:52:1B:1A:A4
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       01962E994CFF454816560F2D186571444A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          14D7
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: DNatRDmJQf2vCaDwqtUGIkltc3v+g9D4f0zWc1KAKwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4c:ff:45:48:16:56:0f:2d:18:65:71:44:4a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=bac2e72192b80c364e167e23a12d252b521b1aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:12:c5:4f:57:e1:0f:1e:d0:0b:6f:68:8b:
                    50:60:67:fe:37:66:14:fb:a6:1b:4e:47:b7:ed:ac:
                    64:df:ef:9a:bf:83:e9:80:c6:6b:7c:19:7c:aa:e2:
                    83:b4:8f:cc:e9:75:38:b6:2d:4f:ab:f4:e9:a9:d0:
                    7f:b2:07:ab:ca:c3:61:cd:6e:eb:bc:d1:f8:0e:a3:
                    0a:46:5b:01:1f:45:3d:3e:a7:ab:67:ae:12:71:e6:
                    90:e2:df:ae:2d:5d:84:7b:79:ce:cd:3f:f9:a7:3d:
                    2e:b9:1d:4d:9c:47:7e:8a:d5:4e:78:16:84:41:86:
                    fc:8e:7b:36:83:90:51:00:d1:b6:c1:e2:04:c4:22:
                    65:b6:41:65:c0:5d:e0:5c:e2:f6:b3:2f:3c:f3:20:
                    01:26:bc:81:cc:eb:35:e0:5e:a9:4f:ca:5c:cd:42:
                    08:7d:f3:31:b6:83:8c:52:6c:a4:83:1a:03:2a:29:
                    d2:6b:2c:ed:6e:a5:96:1d:25:9f:f1:f5:c4:38:4c:
                    f5:9a:c3:00:9d:92:55:1b:9b:45:67:24:9b:fb:62:
                    4e:2d:c6:f5:60:9e:26:37:3a:f4:0c:73:ee:3a:25:
                    d9:64:55:6e:fc:11:43:90:75:de:22:96:80:23:ee:
                    a5:a1:11:09:da:c6:f6:57:99:f5:73:bd:c3:f6:c5:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:E7:21:92:B8:0C:36:4E:16:7E:23:A1:2D:25:2B:52:1B:1A:A4
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:a4:b2:e7:ac:1a:b1:ba:54:9d:7f:b0:00:68:aa:50:95:
         a9:70:9c:57:b9:56:fb:20:de:ae:60:4b:dd:44:5d:3e:2a:2a:
         06:c6:ce:6c:9a:42:00:4e:5e:9d:f2:38:05:db:4d:6a:fd:ed:
         85:90:9c:cc:77:2b:e9:1d:f2:f3:79:c5:ff:00:b9:58:9c:8c:
         3f:7e:68:ad:0f:1b:7f:31:7b:fb:e4:66:06:49:43:e3:ba:c1:
         2e:1b:74:bd:94:3e:45:1f:a1:a3:14:3f:08:e8:45:c8:1b:b1:
         35:df:c4:43:9a:c0:d5:39:e6:bf:16:a8:fe:cc:89:85:88:2c:
         75:3f:50:bd:9d:85:2a:12:32:57:8f:c1:9c:3b:2c:0d:82:97:
         be:11:19:3f:db:e4:d8:d8:5f:20:02:f2:f8:29:cd:55:76:e7:
         7b:59:cb:22:b9:f1:23:17:f9:6a:86:93:9d:94:63:52:e1:ad:
         f7:bf:2e:57:dd:ee:d9:59:3e:77:7e:bc:e0:28:7f:fc:c1:31:
         bb:1f:14:a9:d4:13:a3:e6:30:b8:97:e6:17:b3:3a:08:76:87:
         6b:9b:05:46:b7:35:a9:ba:7c:84:b6:af:cb:59:44:dd:d9:24:
         ef:fc:ab:ee:82:e3:bd:a1:a0:a2:9e:1d:11:8e:d6:9f:c9:98:
         9e:5a:f3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUz/RUgWVg8tGGVxREqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw
YzIyYTAwHhcNMjUwNDEzMTAwMjAwWhcNMjUwNDE0MTAwMjAwWjAzMTEwLwYDVQQD
EyhiYWMyZTcyMTkyYjgwYzM2NGUxNjdlMjNhMTJkMjUyYjUyMWIxYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7wSxU9X4Q8e0AtvaItQYGf+N2YU
+6YbTke37axk3++av4PpgMZrfBl8quKDtI/M6XU4ti1Pq/TpqdB/sgerysNhzW7r
vNH4DqMKRlsBH0U9PqerZ64SceaQ4t+uLV2Ee3nOzT/5pz0uuR1NnEd+itVOeBaE
QYb8jns2g5BRANG2weIExCJltkFlwF3gXOL2sy888yABJryBzOs14F6pT8pczUII
ffMxtoOMUmykgxoDKinSayztbqWWHSWf8fXEOEz1msMAnZJVG5tFZySb+2JOLcb1
YJ4mNzr0DHPuOiXZZFVu/BFDkHXeIpaAI+6loREJ2sb2V5n1c73D9sWcWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrC5yGSuAw2ThZ+I6EtJStSGxqkMB8GA1UdIwQY
MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt
NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy
LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUeksues
GrG6VJ1/sABoqlCVqXCcV7lW+yDermBL3URdPioqBsbObJpCAE5enfI4BdtNav3t
hZCczHcr6R3y83nF/wC5WJyMP35orQ8bfzF7++RmBklD47rBLht0vZQ+RR+hoxQ/
COhFyBuxNd/EQ5rA1Tnmvxao/syJhYgsdT9QvZ2FKhIyV4/BnDssDYKXvhEZP9vk
2NhfIALy+CnNVXbne1nLIrnxIxf5aoaTnZRjUuGt978uV93u2Vk+d3684Ch//MEx
ux8UqdQTo+YwuJfmF7M6CHaHa5sFRrc1qbp8hLavy1lE3dkk7/yr7oLjvaGgop4d
EY7Wn8mYnlrzFQ==
-----END CERTIFICATE-----