Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File:                     7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier:          E7bR3rcikVqbQMjBkVXblYS04okrbFOy6YUSj35atqw=
Subject key identifier:   55:FE:74:34:F1:D7:81:0F:EF:C5:1C:DC:DD:59:CF:49:3F:AF:92:F2
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer:       /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial:       01962E98AFBEEE6EB03926D9D47734FB806B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number:          0848
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: kQwmi9IoQg8in8lBLRGiPhpg/xJNh0oGCOV1kzj6yhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:be:ee:6e:b0:39:26:d9:d4:77:34:fb:80:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=55fe7434f1d7810fefc51cdcdd59cf493faf92f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:09:da:55:6f:9e:19:57:5b:e8:b2:88:b8:
                    ee:86:23:fd:7d:71:3f:d1:fa:70:da:63:b4:0d:da:
                    88:62:fa:1d:c2:96:60:bb:5a:2b:70:93:d5:32:78:
                    c8:f8:f9:f1:93:71:40:2e:62:c7:10:a7:e6:ed:f9:
                    e4:24:b2:b9:d5:2d:1b:e9:75:ca:c0:af:af:25:72:
                    b4:ed:bc:af:71:c2:cd:7a:c2:c0:73:0a:52:68:80:
                    ee:5f:35:b4:d4:2e:78:ea:e5:4d:83:83:c4:08:1a:
                    7e:9f:76:6f:74:80:42:5c:8d:8c:68:72:3a:d6:cf:
                    4a:0d:b2:32:09:cd:f0:dc:0e:8f:a3:9d:1a:11:58:
                    8e:3b:e9:d9:3c:c1:f0:b0:4e:5b:6d:4a:5b:55:9c:
                    5e:6c:2d:67:6c:cb:30:70:e3:89:5c:5c:ec:ba:b2:
                    61:81:54:a8:6d:32:82:f4:88:e0:72:9d:ec:5a:31:
                    a8:52:b8:98:e3:73:d5:69:14:69:6b:87:d0:13:7d:
                    20:94:80:49:73:d6:cf:20:e1:8b:c1:53:e5:a6:d1:
                    56:e8:d0:da:39:d1:74:a6:81:4d:f1:51:7a:5d:2e:
                    c3:ff:61:31:32:90:d9:d7:83:53:10:f5:61:29:e9:
                    83:ee:23:fc:79:fd:c5:60:9f:ec:88:06:94:38:ab:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:74:34:F1:D7:81:0F:EF:C5:1C:DC:DD:59:CF:49:3F:AF:92:F2
            X509v3 Authority Key Identifier:
                keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:aa:a5:f6:82:b1:3b:32:49:a2:6a:fa:7c:9a:c5:4c:1e:
         02:a7:9f:10:62:7f:85:69:9b:a0:c3:dd:95:39:e8:91:aa:73:
         8e:28:a3:34:17:fb:9d:d7:e8:f7:e1:27:ef:ff:e6:30:7a:b5:
         e5:50:05:e9:58:a3:4b:f2:ad:34:f8:56:ba:81:d6:0b:35:32:
         9f:43:3f:6e:4c:3a:0c:20:2a:ba:f9:65:45:67:c4:0c:c6:42:
         62:d4:41:dd:a9:63:80:4c:dc:92:41:5f:01:7d:3a:3d:cc:f6:
         55:da:ca:56:48:78:61:17:10:fc:87:57:d0:16:8b:29:dc:3e:
         9f:16:c2:73:04:50:3f:9b:8f:3a:87:ab:05:17:78:ce:8e:62:
         c1:4c:1e:4a:a6:57:4e:37:4e:fe:03:f7:aa:bf:f0:20:66:82:
         d3:d6:3b:0c:67:31:38:04:25:c4:bd:cd:39:dd:39:44:79:b2:
         8d:fd:41:7f:05:6c:c8:21:cd:e3:b8:17:e6:be:6c:3b:f8:6a:
         d3:6b:8b:70:f4:44:7e:75:a9:55:aa:08:60:c2:80:8f:7d:f1:
         e4:51:be:99:19:f5:69:1d:04:c7:12:22:5e:80:5a:7f:1e:8d:
         66:52:4b:d4:bc:ce:37:69:86:80:e3:12:95:0d:12:00:cb:ab:
         27:b2:c8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumK++7m6wOSbZ1Hc0+4BrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM2ZDYyODRmMTE2NWQwOWViZWRiNDRkZTYxNzVmZTAz
M2I3NzQwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
Eyg1NWZlNzQzNGYxZDc4MTBmZWZjNTFjZGNkZDU5Y2Y0OTNmYWY5MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoAJ2lVvnhlXW+iyiLjuhiP9fXE/
0fpw2mO0DdqIYvodwpZgu1orcJPVMnjI+Pnxk3FALmLHEKfm7fnkJLK51S0b6XXK
wK+vJXK07byvccLNesLAcwpSaIDuXzW01C546uVNg4PECBp+n3ZvdIBCXI2MaHI6
1s9KDbIyCc3w3A6Po50aEViOO+nZPMHwsE5bbUpbVZxebC1nbMswcOOJXFzsurJh
gVSobTKC9Ijgcp3sWjGoUriY43PVaRRpa4fQE30glIBJc9bPIOGLwVPlptFW6NDa
OdF0poFN8VF6XS7D/2ExMpDZ14NTEPVhKemD7iP8ef3FYJ/siAaUOKtCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX+dDTx14EP78Uc3N1Zz0k/r5LyMB8GA1UdIwQY
MBaAFO4sbWKE8RZdCevttE3mF1/gM7d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUt
YzRmNTNlMTdkZGIwLzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUtYzRmNTNlMTdkZGIw
LzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbmqpfaC
sTsySaJq+nyaxUweAqefEGJ/hWmboMPdlTnokapzjiijNBf7ndfo9+En7//mMHq1
5VAF6VijS/KtNPhWuoHWCzUyn0M/bkw6DCAquvllRWfEDMZCYtRB3aljgEzckkFf
AX06Pcz2VdrKVkh4YRcQ/IdX0BaLKdw+nxbCcwRQP5uPOoerBRd4zo5iwUweSqZX
TjdO/gP3qr/wIGaC09Y7DGcxOAQlxL3NOd05RHmyjf1BfwVsyCHN47gX5r5sO/hq
02uLcPREfnWpVaoIYMKAj33x5FG+mRn1aR0ExxIiXoBafx6NZlJL1LzON2mGgOMS
lQ0SAMurJ7LIQw==
-----END CERTIFICATE-----