Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File:                     AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier:          wutdYELgji3yEdJd7+J4aS6f2PMVcP8Z3Pyl/2LAWhc=
Subject key identifier:   13:FF:10:24:03:9C:34:D7:D9:EE:7C:91:B0:3B:BC:19:31:26:D9:4E
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       01962E61FC59EE881ECAF049E415F17F9D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number:          11E6
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: M4gu8gpe1YUgaslevXNkerligbOz/4W+Cpxoc0sL+no=)
                          2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
                          3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fc:59:ee:88:1e:ca:f0:49:e4:15:f1:7f:9d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=13ff1024039c34d7d9ee7c91b03bbc193126d94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:70:cc:1f:dc:66:c5:74:1e:43:ee:48:64:
                    89:7b:bc:89:a4:a3:44:f2:92:11:ad:f0:57:25:e1:
                    71:b6:25:9f:da:83:74:a1:dd:fb:9d:c6:91:97:1d:
                    8e:29:91:04:1f:6c:af:cf:35:10:02:72:40:60:26:
                    64:c2:39:27:00:75:7d:30:6c:2a:4a:39:a3:36:47:
                    5d:0b:2a:62:df:c2:89:91:2b:b5:73:cb:a4:61:be:
                    4f:53:32:9c:e0:9a:6e:b0:b6:3b:fb:9b:ef:d6:03:
                    67:18:99:04:e7:5f:c9:1e:6e:87:19:d6:88:44:0a:
                    99:cf:37:81:0e:af:27:e8:70:2f:a2:b2:36:45:0a:
                    6d:71:2f:28:32:1d:4b:e4:a4:73:13:93:c4:71:bb:
                    6a:8d:ae:ba:1b:a5:df:11:f9:20:2c:3a:c3:a9:76:
                    bb:2a:97:59:38:32:06:24:19:2c:17:9c:dc:1e:6b:
                    70:2e:83:d4:d3:78:b5:50:05:3d:79:b1:c1:9d:a5:
                    78:42:e3:e7:a7:8a:86:f0:1d:6d:ad:c8:c4:bf:b9:
                    94:b3:ba:86:36:2c:e8:f2:86:16:4a:5c:4f:aa:73:
                    63:bb:c5:57:05:42:6e:1f:ac:a4:c8:7e:0e:76:a5:
                    0e:30:55:58:38:18:6e:77:9d:ee:26:93:89:f0:4a:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:10:24:03:9C:34:D7:D9:EE:7C:91:B0:3B:BC:19:31:26:D9:4E
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:c8:fb:ff:58:30:55:71:37:a2:87:37:f3:f9:a4:77:95:
         6d:88:e1:1f:b4:f7:a1:29:23:ef:71:5d:47:d3:db:70:7b:46:
         e0:fc:33:44:62:7a:23:ca:8d:29:98:31:93:4c:14:4a:0f:2f:
         72:7c:6f:8f:c6:f5:81:81:74:df:78:90:95:e5:63:4e:53:52:
         1d:15:22:c3:03:46:db:32:34:3f:53:e0:25:e5:d9:55:cd:5f:
         88:ba:ab:88:30:75:40:cd:f5:89:88:cf:45:f5:2b:b0:12:94:
         75:07:9e:03:df:4e:f6:cc:4c:f8:12:40:c6:0a:b8:fb:64:c5:
         77:ed:4f:ee:39:2e:b4:0b:51:4a:c9:92:e4:25:55:0b:3d:85:
         f2:db:e0:d4:0c:f6:f8:2f:ca:35:37:96:1c:ce:5e:b4:f9:ef:
         60:96:5a:d6:69:4c:db:c7:c1:fd:e0:fd:09:11:da:fa:17:07:
         3b:b2:2a:3c:0b:e6:bb:e2:d9:33:d6:1d:6a:41:30:d8:d1:e4:
         84:c1:18:01:dc:88:02:d0:b1:a6:b3:36:2c:50:fb:fa:f4:78:
         c7:1a:69:56:f0:06:28:39:0d:93:7c:70:9d:9f:8e:1f:88:02:
         f6:8e:8d:81:19:43:19:39:1f:94:be:fd:46:d6:e1:b8:7d:25:
         88:e0:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----