Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File:                     1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier:          POR+TEb089KMbT44tc+n75StiMtUFFObY5jd7GayHbo=
Subject key identifier:   AD:21:38:C9:AA:70:B7:50:27:A4:BE:C5:76:94:94:B4:FA:7B:80:1F
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer:       /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial:       01962E994709C71BFD1696A1D7DE843CD066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: G3YPawmRsXoSAzYZWtrZuN0rjhHXFT8YM7AU+9yzazU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:09:c7:1b:fd:16:96:a1:d7:de:84:3c:d0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=ad2138c9aa70b75027a4bec5769494b4fa7b801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:6a:c5:f4:6c:b6:e6:3f:0c:94:d0:1b:9d:
                    5d:94:7d:95:47:a8:ae:fb:ec:2b:0d:ce:2e:a1:aa:
                    59:bf:d2:89:ba:f7:fa:da:cf:0b:b0:7d:5b:e0:80:
                    e1:c0:c6:be:5e:54:dc:dc:67:f5:e2:66:fd:b9:05:
                    5a:e0:10:47:2f:88:94:32:c5:4a:37:97:b1:d8:bc:
                    c7:46:cd:88:b5:ea:1c:3d:84:0c:3a:8f:53:b4:64:
                    dd:3c:99:4a:ef:b0:54:9b:23:2d:e8:bd:4e:cf:9e:
                    51:49:c5:11:f0:0c:79:a2:12:4f:d0:04:a4:35:cd:
                    14:3a:8d:75:e8:85:67:9c:5f:2c:7a:2a:91:3d:cd:
                    cc:8a:c7:2c:ed:d2:9d:26:c0:7e:41:ff:53:c5:49:
                    b7:49:83:e3:ff:3e:5c:d4:20:4e:bd:01:bf:95:a8:
                    f7:b9:0c:14:3c:bc:c7:3f:68:10:75:88:ea:40:9c:
                    33:29:d2:34:e7:35:63:8f:49:17:8b:14:d7:2b:38:
                    fc:2a:e8:ba:b1:78:c0:38:e2:8e:bd:ce:dd:17:22:
                    b5:f5:61:d5:75:77:85:a9:12:37:68:c0:d3:95:f5:
                    f7:57:f2:fe:45:43:d5:71:44:fd:f8:c2:5f:7d:2d:
                    8d:8b:05:21:a1:fd:7a:2e:d1:41:3d:f7:33:45:fe:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:38:C9:AA:70:B7:50:27:A4:BE:C5:76:94:94:B4:FA:7B:80:1F
            X509v3 Authority Key Identifier:
                keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:9e:9a:02:36:00:f6:af:85:8a:b2:68:0c:c2:74:24:31:
         6e:67:52:3f:8a:b4:bc:08:a7:65:20:1e:0e:22:9f:5f:80:a8:
         4b:0c:47:88:c2:9f:8b:56:8a:fc:7c:6f:3a:8f:d2:3d:80:0c:
         92:a6:29:58:f7:2e:04:05:3c:25:11:42:19:57:aa:d2:25:47:
         77:b3:56:c0:92:44:cd:6d:62:c4:27:26:94:60:e7:60:4c:a9:
         91:81:54:8a:86:75:a0:22:3f:6e:44:45:b4:3d:6f:aa:87:03:
         bf:41:db:7a:27:fc:95:91:e0:03:b4:c1:b4:18:9f:19:c9:94:
         7f:90:b8:a7:34:d5:32:c5:0c:96:a1:9d:78:4c:25:c3:bb:e9:
         cd:77:48:fa:f6:8c:63:86:0e:7f:07:bb:74:fb:e0:03:66:8f:
         e9:90:49:13:58:79:29:34:39:cc:b0:6f:d8:6e:02:d5:9e:69:
         08:99:6f:85:b3:f4:c4:1a:da:68:13:c1:c4:52:50:34:89:b5:
         ea:55:b7:3b:4f:82:7f:de:8b:68:68:9f:40:68:55:f6:ed:dc:
         a2:df:58:75:2c:d7:08:ad:7f:f7:a2:65:c8:03:7c:0f:6b:3e:
         fb:0d:79:87:71:c9:e9:70:c0:25:9b:43:10:c1:b9:0f:4b:58:
         4e:05:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----