Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          JH2sYUjgIwoVuPA4gafqWZ0McCYHyQSIldZBR3ogWX4=
Subject key identifier:   32:46:CA:86:A1:4B:F1:EE:31:31:30:80:F5:F2:EB:3C:BE:43:F1:AA
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       01962DF42A82BA5391E598AF4FE1DD2AB0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0B82
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: iLH2MNvfpY145bLt01NLiCU083TWQBD8ErpXKjWa8/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:82:ba:53:91:e5:98:af:4f:e1:dd:2a:b0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=3246ca86a14bf1ee31313080f5f2eb3cbe43f1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:64:ef:8b:60:bc:60:8b:37:a5:eb:95:66:
                    55:dc:6b:f7:a1:47:9c:be:af:ed:fb:48:5f:cd:5c:
                    9a:52:69:57:19:10:b4:59:33:bd:0b:97:70:79:2b:
                    1a:48:e7:ae:7a:84:7c:e0:61:e9:4d:bd:1b:1e:39:
                    2b:c7:63:a1:d5:e1:fe:81:cb:91:f9:e5:41:a5:79:
                    a8:ad:e3:8f:01:78:ed:42:02:49:cf:78:f9:27:80:
                    0e:47:3b:0c:3c:23:e6:bc:d0:67:9f:f7:63:b6:9b:
                    1c:1d:ff:8a:b3:13:2c:98:43:a3:c4:44:cd:80:2b:
                    aa:5c:75:47:6a:b3:b3:89:0c:0c:f3:90:90:01:e4:
                    34:bf:34:cf:75:f0:60:ae:18:5d:b1:92:bd:48:2a:
                    41:9d:65:a8:59:50:3b:3e:89:b5:8b:1f:96:e1:82:
                    00:ed:9f:83:85:7d:89:9b:a3:a4:13:76:7a:9b:93:
                    4a:05:63:40:ec:f1:be:70:86:f3:c0:10:50:5c:36:
                    25:8c:7b:f2:fc:58:1d:f5:4a:bb:03:66:e1:7a:c4:
                    81:95:f6:d6:aa:70:f9:a5:ba:4e:eb:d0:b8:82:dd:
                    3f:88:a7:3b:c6:63:45:4e:2e:8d:5c:68:2d:f7:04:
                    e0:10:46:ae:c5:7f:dc:e8:36:d1:c9:ef:32:1f:12:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:46:CA:86:A1:4B:F1:EE:31:31:30:80:F5:F2:EB:3C:BE:43:F1:AA
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:ee:54:3b:71:2a:04:b3:77:97:5f:b0:30:c6:ca:63:30:
         3c:d9:b0:e1:3f:79:5e:b2:bd:0b:bc:b6:83:81:12:b3:f8:17:
         04:6f:43:2a:f9:18:98:80:82:73:73:e1:0c:e0:d0:a6:cf:44:
         dc:ae:fe:bc:83:aa:6c:55:90:13:2d:21:36:f2:4f:b9:11:f5:
         27:25:0e:c7:b0:d8:03:69:9d:bd:ca:36:05:fb:22:ce:1c:b6:
         93:80:60:e2:e2:3e:6f:a4:de:e5:5a:c3:20:e6:b2:99:63:6d:
         b1:d9:6e:96:c1:e0:21:ca:23:26:da:2c:c1:2b:fa:c1:fb:ef:
         fb:f2:07:c7:cd:8d:5c:93:bd:c6:15:90:3e:ae:d6:af:93:8a:
         81:7a:f5:08:37:7b:98:b8:c7:ad:b0:cb:da:06:c9:84:a5:2b:
         33:f6:52:60:e3:fa:3b:c8:b0:27:be:bf:55:27:ba:98:51:df:
         c0:f8:c4:3b:7c:ef:ae:00:1d:54:cd:64:23:03:f9:3b:31:ea:
         c5:9e:39:eb:0a:d9:a4:30:59:ff:df:f0:a9:5e:d8:5c:00:e4:
         52:ae:f3:0a:75:0b:50:01:d0:18:b2:89:76:da:a5:12:29:cf:
         e0:84:9b:ae:59:fe:57:10:48:bc:30:68:93:75:a0:f7:36:34:
         91:7f:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----