Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File:                     _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier:          VqWuzMUf9yuaVL4/2jjXMfq27OSknvy0S7MhJu8L89w=
Subject key identifier:   3A:40:AC:70:C9:70:57:FD:10:0E:7F:35:B2:3C:9E:6C:DD:80:30:47
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer:       /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial:       01962E99631D4314F9608807BC0AC86B6A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: rNcTaM2Lgr5dudKKmzT/nvFYFJ+1c25kxafqNsW+bFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:63:1d:43:14:f9:60:88:07:bc:0a:c8:6b:6a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=3a40ac70c97057fd100e7f35b23c9e6cdd803047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:78:b9:ce:64:6d:fa:91:ac:30:f2:1f:32:
                    dc:7c:5b:3f:80:9b:d5:8f:0c:8b:a9:7f:11:cf:83:
                    4f:37:34:59:ff:43:89:13:e9:74:fb:ae:c5:dc:4b:
                    bc:2d:d9:02:6c:ac:c0:7d:59:8d:82:39:9e:bc:dc:
                    de:39:2d:c4:ac:1a:77:40:d0:2f:e2:3e:af:0e:a8:
                    b2:0a:83:8f:1a:76:30:25:90:1c:fb:d3:92:f4:d0:
                    22:1c:78:d1:b4:52:e6:f9:c6:11:9f:fa:02:29:66:
                    37:09:b3:44:fb:b5:59:14:c8:a7:c3:8e:7e:e1:57:
                    54:7f:4e:7d:e8:b4:e1:fd:d8:b3:31:67:01:39:e7:
                    be:6a:c0:09:96:81:d1:29:5a:c5:ce:78:bb:0a:fc:
                    b1:49:9e:76:88:71:95:14:bd:58:45:ae:83:83:66:
                    50:6b:c9:22:08:3c:ee:df:a6:dd:03:ff:69:bb:44:
                    4d:a5:7c:5d:a4:f4:2d:f6:c6:17:3b:9d:47:03:8d:
                    dd:89:fd:06:b4:5c:12:7f:29:07:5f:17:e6:ca:58:
                    31:95:c9:1c:fe:a5:40:0a:ee:5b:49:aa:3f:26:ed:
                    e1:0c:0d:17:b2:3e:f6:b8:2f:d8:68:d6:4b:bd:e5:
                    7b:ad:ce:a5:03:2d:ed:aa:ee:1b:38:e9:31:31:da:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:AC:70:C9:70:57:FD:10:0E:7F:35:B2:3C:9E:6C:DD:80:30:47
            X509v3 Authority Key Identifier:
                keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:80:ae:f5:4c:6c:4c:1d:c1:03:42:64:7e:ec:43:3b:49:
         8e:0f:1e:2e:85:0d:7d:1c:45:2e:42:14:59:fe:85:92:44:49:
         12:36:43:c5:58:e8:99:6e:c1:41:ca:f0:da:1b:a4:fc:8e:84:
         45:a3:01:77:12:21:b4:0d:1a:18:d6:b8:03:b5:9b:b1:55:55:
         a0:0b:4b:47:fb:7d:84:61:23:72:05:5a:21:b7:c8:5c:ad:83:
         77:ea:2f:de:2d:f9:b2:f4:1c:50:20:ab:2e:32:95:06:23:aa:
         74:66:a7:9c:4f:f0:12:38:9a:ae:58:f6:3a:53:8d:04:b3:c2:
         fe:e9:57:cb:e4:e8:84:0d:ad:d9:87:43:39:40:45:47:75:75:
         7d:5f:3b:2c:ff:91:00:2c:b3:0d:3e:d9:34:00:61:ec:88:f8:
         fe:44:8e:93:68:a1:cf:b5:62:1b:02:f0:7c:0a:30:9c:80:b5:
         ef:97:cf:eb:20:13:7b:c0:05:c2:3e:19:fb:10:45:e6:bd:30:
         04:b8:41:c6:20:1c:9b:ab:0f:0a:60:54:74:c0:65:73:e1:f4:
         ee:59:5f:06:f1:69:31:79:85:0e:db:b7:ed:76:b0:85:56:cc:
         a2:18:48:24:fc:f1:05:27:f5:f3:96:02:d8:be:c8:22:1c:22:
         e8:4f:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----