Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File:                     mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier:          ch5Ec12aQLNmjwNu7DukON41Ka6qc6Tk5nsQ6XNAfDc=
Subject key identifier:   C9:C2:78:92:25:61:BC:1F:DB:CB:EA:D0:BF:FE:1D:4F:A6:4B:D0:20
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer:       /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial:       01962DF3B2EF15A4DCDEA5F05F509D217D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number:          05DE
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: L59p/a6u9X+XSvHdHXV0OpNUcoj+HUS6dHWT/c9JSsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b2:ef:15:a4:dc:de:a5:f0:5f:50:9d:21:7d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=c9c278922561bc1fdbcbead0bffe1d4fa64bd020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:d2:56:a3:88:a9:0e:45:df:fa:1e:2c:c2:
                    87:19:87:01:1e:78:c5:27:6a:be:2f:3c:5a:3c:7e:
                    4b:70:f8:3d:2f:86:05:44:4e:d8:91:3f:5c:1c:b8:
                    66:fb:ed:a3:f5:e7:68:15:1a:3b:84:e0:92:6d:5e:
                    2b:1f:11:2e:a4:6a:44:25:68:f3:01:e7:5c:d9:75:
                    d3:fd:14:c8:69:26:8f:df:ca:1a:4e:be:19:a7:17:
                    84:d8:fd:27:f8:70:ae:f1:b4:d3:31:51:ec:67:c6:
                    b1:38:43:55:33:f4:52:d1:b5:50:49:59:01:c7:86:
                    27:ec:e2:00:3e:1f:0e:92:91:1e:38:41:03:1a:7d:
                    dc:e4:47:65:de:cf:57:9d:6d:6a:98:30:4d:df:07:
                    e9:a5:85:73:1a:67:8c:a3:d7:fa:fe:6f:83:71:c6:
                    8c:df:1d:a3:66:5a:6e:cd:1e:3b:c3:d5:3b:f1:b6:
                    8f:73:b6:c6:1b:6a:bf:a0:27:fe:2d:cb:49:72:27:
                    e3:cb:e8:3d:06:66:b8:17:c6:04:11:9e:46:9b:c0:
                    05:50:ba:ee:7d:04:f0:01:d1:d3:9f:dc:00:30:e4:
                    8a:c7:19:74:ae:5c:c4:09:5f:8e:ee:be:36:a8:ad:
                    41:a0:07:13:cd:3f:f1:fd:ff:77:25:ae:c7:bc:ab:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:78:92:25:61:BC:1F:DB:CB:EA:D0:BF:FE:1D:4F:A6:4B:D0:20
            X509v3 Authority Key Identifier:
                keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:ef:e9:95:55:db:1e:e9:b4:0f:2c:d7:f4:9f:04:43:aa:
         6e:9b:42:3c:7f:18:59:99:ab:df:14:f7:bc:f3:38:e0:40:b9:
         62:c7:23:bc:59:da:32:da:c4:9b:76:54:73:83:15:da:00:52:
         de:9e:1a:1f:69:0c:ec:d3:36:9e:06:70:a4:6c:81:b1:8b:5d:
         d4:9d:79:c1:99:98:da:07:13:98:08:d1:f3:2b:fc:01:92:b7:
         b4:39:db:0e:82:42:ad:46:77:b4:e3:95:7e:73:33:94:21:11:
         0a:30:55:00:b0:e1:71:e7:f3:fc:37:3d:c0:ae:22:d1:dc:6b:
         4a:9d:ad:2e:e6:56:b5:d2:bc:77:88:f9:eb:cf:4e:c5:3f:af:
         6c:ac:e0:9c:e2:78:24:5b:05:bd:24:2a:82:fc:64:a2:95:18:
         55:28:60:fd:cf:a1:b1:bb:99:70:28:ab:c0:6d:3c:39:1c:11:
         71:2e:9e:19:3a:b6:e9:c2:ae:2b:07:3f:bd:00:e9:0b:1a:01:
         76:45:ad:ca:c5:e2:65:73:de:4a:17:7b:2b:a4:7b:3e:f7:ba:
         fc:a4:73:4f:7d:25:d8:a6:13:5d:4a:b8:4e:b1:bd:0a:ac:c1:
         08:36:da:37:bf:0f:8b:e4:0b:36:1e:67:7f:54:25:76:0d:50:
         a6:b3:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----