Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File:                     EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier:          DgO5fcrlg/kA86PmdhxM0HN8q4L7B/fzYNfm4Pcuyjs=
Subject key identifier:   A6:C6:45:D6:7C:19:BB:FA:86:5B:2E:F5:8C:47:79:7D:B6:0E:04:90
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer:       /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial:       01962F3D74C05A1BC61BF65EAF85B15A9F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: qtL9xhT8ht7QoX9Q4sp65hDdpdYVBGa1SlbAqFXCWc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:c0:5a:1b:c6:1b:f6:5e:af:85:b1:5a:9f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=a6c645d67c19bbfa865b2ef58c47797db60e0490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:20:dd:32:4e:98:bc:8b:7c:2e:c5:bd:ac:
                    29:66:29:ce:6d:97:4b:69:ca:74:f4:87:2d:21:36:
                    b1:b0:20:f9:9b:be:1f:e7:85:b4:fb:94:47:64:f8:
                    e1:44:5c:3f:bc:92:93:2d:b6:ee:58:84:13:9a:ec:
                    d9:98:17:55:a6:d8:e7:9b:67:41:06:18:9e:3a:50:
                    42:47:99:db:1c:0b:ae:d8:e9:67:03:84:e8:da:8c:
                    73:61:d8:53:a7:6f:67:96:b7:a5:74:12:89:c4:dc:
                    50:1b:d0:8b:00:31:c7:84:62:e7:e4:ea:8b:d5:16:
                    f8:d1:8f:8f:ac:70:48:25:ae:3f:47:e7:b0:da:ef:
                    87:b3:41:49:36:c9:3e:5f:81:4b:b9:93:45:8d:59:
                    94:d9:ef:53:d5:62:5d:e2:97:2c:0d:fa:89:fd:7f:
                    09:3a:53:a6:98:4a:d8:ab:09:7a:a5:9e:ff:62:fb:
                    ba:de:30:5e:30:bc:12:83:0a:97:6d:ac:5c:06:36:
                    09:fd:12:86:56:31:1c:98:4b:2b:08:bb:bc:c4:88:
                    ca:cc:57:55:3a:89:d5:22:89:8d:e9:ab:a8:c6:1e:
                    43:ca:23:76:ac:57:f1:43:a5:72:2f:cd:a9:42:af:
                    b0:7f:e1:10:95:5c:38:77:ae:4f:b5:1f:fd:db:fd:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:45:D6:7C:19:BB:FA:86:5B:2E:F5:8C:47:79:7D:B6:0E:04:90
            X509v3 Authority Key Identifier:
                keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:74:53:cf:98:40:80:5a:d3:24:b1:d6:d3:88:5a:06:78:24:
         1b:89:e9:80:e2:8d:a3:d2:10:d5:0f:b2:9f:55:e4:df:1c:43:
         ed:6d:42:b9:cb:f2:93:af:02:1c:e9:40:aa:fb:13:eb:06:65:
         c3:f2:e2:2f:d8:79:e6:8a:2f:b2:26:96:db:d8:94:6c:a7:ae:
         1d:01:ce:dc:46:ea:c2:c2:23:c8:38:cd:4a:5e:25:4b:f4:90:
         ab:bd:dc:0d:e2:bc:ce:f4:fb:9a:26:af:bd:54:a2:94:00:3a:
         90:58:87:cc:93:21:38:a1:7e:ef:8f:1b:92:10:b9:8d:04:b7:
         51:09:55:e2:75:d2:72:c1:cb:ec:f7:73:2e:74:93:76:63:6a:
         c2:d2:ee:c9:56:23:ac:51:c6:8f:63:03:40:e8:ab:6f:53:3f:
         d7:1a:86:3a:e1:e7:3a:1d:a3:c4:0d:6f:94:fc:3a:f7:20:d8:
         bc:ca:8e:60:78:60:a8:43:a0:f8:eb:d2:6b:b1:db:36:9a:58:
         d6:a8:a4:6c:dc:84:3c:b8:32:65:33:16:ca:d1:07:54:24:6b:
         72:2e:2d:3a:6a:c9:38:8f:c8:bb:e1:c8:1f:a5:d0:ea:90:30:
         76:70:d9:52:d0:3e:de:e5:84:0b:82:36:a3:35:0c:61:7c:34:
         68:94:08:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXTAWhvGG/Zer4WxWp93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy
YWZhZGYwHhcNMjUwNDEzMTMwMTE4WhcNMjUwNDE0MTMwMTE4WjAzMTEwLwYDVQQD
EyhhNmM2NDVkNjdjMTliYmZhODY1YjJlZjU4YzQ3Nzk3ZGI2MGUwNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWQg3TJOmLyLfC7FvawpZinObZdL
acp09IctITaxsCD5m74f54W0+5RHZPjhRFw/vJKTLbbuWIQTmuzZmBdVptjnm2dB
BhieOlBCR5nbHAuu2OlnA4To2oxzYdhTp29nlreldBKJxNxQG9CLADHHhGLn5OqL
1Rb40Y+PrHBIJa4/R+ew2u+Hs0FJNsk+X4FLuZNFjVmU2e9T1WJd4pcsDfqJ/X8J
OlOmmErYqwl6pZ7/Yvu63jBeMLwSgwqXbaxcBjYJ/RKGVjEcmEsrCLu8xIjKzFdV
OonVIomN6auoxh5DyiN2rFfxQ6VyL82pQq+wf+EQlVw4d65PtR/92/0NFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbGRdZ8Gbv6hlsu9YxHeX22DgSQMB8GA1UdIwQY
MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt
NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy
LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXRTz5hA
gFrTJLHW04haBngkG4npgOKNo9IQ1Q+yn1Xk3xxD7W1Cucvyk68CHOlAqvsT6wZl
w/LiL9h55oovsiaW29iUbKeuHQHO3EbqwsIjyDjNSl4lS/SQq73cDeK8zvT7miav
vVSilAA6kFiHzJMhOKF+748bkhC5jQS3UQlV4nXScsHL7PdzLnSTdmNqwtLuyVYj
rFHGj2MDQOirb1M/1xqGOuHnOh2jxA1vlPw69yDYvMqOYHhgqEOg+OvSa7HbNppY
1qikbNyEPLgyZTMWytEHVCRrci4tOmrJOI/Iu+HIH6XQ6pAwdnDZUtA+3uWEC4I2
ozUMYXw0aJQIqA==
-----END CERTIFICATE-----