Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File:                     4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier:          eDSk0o1d3V746TQjnd7mpTe+2vlosPVrcBt5x9xWUgI=
Subject key identifier:   CE:99:D1:61:0D:D5:27:C7:45:C0:0C:9F:58:80:8C:E5:9B:91:15:80
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer:       /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial:       01962F742CE7ED57EA7DD799377CB6E120AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: D7+kiYBtSgGrWBDOz8y/TnCm2+gDlTez8b9vwSCGvlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2c:e7:ed:57:ea:7d:d7:99:37:7c:b6:e1:20:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=ce99d1610dd527c745c00c9f58808ce59b911580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:7d:0b:76:ed:21:32:7f:6b:43:65:b1:9b:
                    0c:a9:ab:f9:87:54:36:73:de:e3:96:71:95:ef:f1:
                    a6:18:f7:f0:0f:f7:ff:54:10:ec:89:fd:7a:65:35:
                    73:39:ff:d6:fe:52:66:29:2b:15:b2:28:f7:cf:38:
                    f5:a2:ea:2b:d4:92:1c:28:28:da:84:b4:88:54:48:
                    6e:fb:53:14:72:36:f0:28:b4:53:de:a5:e6:57:49:
                    ab:39:2b:7e:76:99:c8:06:6c:98:9d:67:f3:86:59:
                    09:2c:ce:fa:0e:02:3a:f0:59:1a:ad:26:07:ff:b9:
                    8b:94:f7:68:13:0f:a4:fe:1b:a4:c4:8c:ff:2b:85:
                    cb:db:89:e9:d7:d8:48:fe:fd:e5:fe:5f:4b:58:87:
                    76:fb:5a:5f:b7:ed:0b:75:27:c6:71:0f:00:2c:d8:
                    d3:68:5b:f3:34:8c:e4:91:fa:95:13:a8:97:94:81:
                    46:39:31:67:ff:42:50:cd:c1:39:62:ac:6e:56:f3:
                    b9:52:78:33:cd:4c:51:52:5a:dd:8a:dd:ca:55:35:
                    a9:b5:7c:45:20:bb:f0:ec:b4:7a:ec:2a:5e:bb:78:
                    ef:26:9e:ab:1b:de:cd:ed:b8:a9:7e:38:9b:c1:b8:
                    06:16:9d:27:41:11:68:54:ae:37:19:b2:4d:39:1c:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:D1:61:0D:D5:27:C7:45:C0:0C:9F:58:80:8C:E5:9B:91:15:80
            X509v3 Authority Key Identifier:
                keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:95:17:6d:ea:d7:12:01:30:0a:fa:3c:e1:62:ca:06:87:2c:
         be:f1:ea:21:b7:5d:61:5e:c8:40:4d:97:3f:00:5a:7d:3c:d5:
         d5:33:69:d7:60:37:5f:61:9b:45:d9:ba:c6:85:d1:07:34:1a:
         4f:c0:b1:00:92:81:58:b4:c2:ce:1e:d3:3e:06:b3:78:be:2c:
         d2:6b:c2:7a:f9:ed:52:54:3f:d4:ea:d1:31:43:b5:b6:13:79:
         7d:13:51:a1:44:70:a4:46:15:5d:75:b1:39:57:ea:da:f5:b7:
         f2:85:df:0c:8c:e0:fb:bd:09:6d:9e:eb:92:e9:62:81:d7:18:
         60:48:36:c4:62:ff:07:5e:63:7b:e9:f9:2f:2b:ad:fb:e0:70:
         54:cd:16:52:df:3b:1e:e2:12:fc:43:61:d8:bd:6d:e6:28:d6:
         be:87:ce:5b:d5:5e:9d:d2:37:c6:d5:7a:cc:41:7c:ef:49:96:
         db:09:cc:c0:12:e0:9b:6d:1d:2f:fa:67:8b:60:af:8d:ac:9d:
         aa:b8:e3:10:08:80:4c:b1:05:24:8f:49:a8:7f:0b:3a:0d:6b:
         c1:b0:f3:05:78:0c:10:cc:26:34:72:aa:65:0e:cc:f0:1f:5d:
         47:77:71:28:6a:f0:69:2c:0b:e3:b1:f7:27:28:3d:1e:90:99:
         02:67:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----