Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
File:                     ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json)
Hash identifier:          mzpnANpS1aNlBIE94afP7kZwf8A/OdOEqfmRMIOt84g=
Subject key identifier:   45:4D:B3:9C:22:5E:15:60:E3:C5:09:42:64:BF:C8:E3:3D:92:22:69
Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
Certificate issuer:       /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Certificate serial:       01962F067293819512AA91A6C977EA26FFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
Manifest number:          0E66
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: Vjk1yD+J8Hy/UxH+pBf48WZSvJWtKB8uixM+aC/zgnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:93:81:95:12:aa:91:a6:c9:77:ea:26:ff:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=454db39c225e1560e3c5094264bfc8e33d922269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:16:ac:ee:96:bf:c3:df:a9:98:4c:24:19:
                    d5:b6:3c:83:32:50:20:db:07:04:3e:e9:9c:61:0a:
                    b2:05:cb:24:3e:e9:95:b4:16:07:d2:89:fe:cd:c4:
                    a0:01:76:63:99:17:70:16:de:34:55:0a:67:ce:86:
                    ff:ef:b1:85:43:6e:ab:70:7e:17:24:5f:cc:2e:40:
                    c7:40:80:4c:46:d6:ab:aa:f7:23:3b:cf:9a:0d:09:
                    e8:bb:dd:74:81:ca:df:77:8d:52:4d:a1:5a:f3:f0:
                    25:9a:4e:1f:87:ad:02:35:7f:d8:b5:34:4b:04:af:
                    91:76:6b:80:ac:09:bd:47:a2:cc:e3:5f:8b:9f:9f:
                    08:be:a4:24:9b:18:95:b3:1c:9a:37:c3:f1:11:0c:
                    24:42:3e:6e:1a:d6:54:e1:e0:c7:6f:3d:89:72:5f:
                    1a:9d:ae:e8:ba:85:e3:c4:63:c4:be:c5:04:ee:7d:
                    e8:92:16:75:7e:39:74:0a:d3:ba:ea:a5:a6:7c:2f:
                    47:24:2a:d6:63:c4:d8:a4:5c:65:e4:00:43:18:8c:
                    70:41:9c:6a:a8:59:16:f9:2d:a1:b5:be:ec:8b:46:
                    52:39:06:09:9b:c6:4c:db:d6:2f:cd:22:f3:12:41:
                    65:1a:f4:81:51:8e:40:86:fa:6b:4a:ae:a7:ce:d4:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4D:B3:9C:22:5E:15:60:E3:C5:09:42:64:BF:C8:E3:3D:92:22:69
            X509v3 Authority Key Identifier:
                keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:cd:da:64:83:86:37:3d:5c:71:58:1c:ad:be:c2:90:67:
         5f:76:09:47:bc:c3:e1:08:a3:40:51:8c:33:7a:7a:bf:61:a8:
         30:b5:e3:11:db:51:76:b5:19:f9:ab:f3:8d:d5:32:fa:97:25:
         0d:de:d0:38:d4:9a:41:be:5b:f7:95:87:49:64:f7:57:70:12:
         73:45:ef:9b:35:58:1b:c6:d0:93:56:5f:ad:7c:c3:b8:af:28:
         09:7a:45:b3:0e:fd:19:58:d4:c3:95:76:7d:81:e6:e8:45:48:
         36:6d:3b:4a:94:9b:b0:98:2d:d8:b8:e1:c2:03:ac:08:d0:ab:
         3a:43:99:be:ea:fd:2f:b3:c5:c7:05:0e:93:c0:e9:8d:d2:0c:
         03:5b:0e:f6:6b:f3:64:34:7c:8a:93:5c:de:7c:72:72:e3:d5:
         4a:8a:13:09:27:8e:a6:ec:46:14:5e:e0:51:c1:81:7c:00:b6:
         e2:7d:47:23:c0:10:f3:46:e3:a9:03:ff:48:10:c5:5e:0d:40:
         17:c1:b1:49:5f:74:70:f8:22:11:47:e5:d6:c3:e7:5b:ed:4b:
         cc:99:3d:6f:e8:aa:e2:03:ad:61:38:7b:ab:a8:8a:59:1c:de:
         57:46:78:38:32:11:94:31:9e:f0:1b:51:8a:fd:26:bf:e0:01:
         dd:e7:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----