Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft
File:                     5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft (raw, json)
Hash identifier:          PUE0iP80nBC3uQcGk+DYIpQPDLm61T5Mibdp49xjXFI=
Subject key identifier:   9A:33:1C:A9:F3:B7:11:3A:3B:34:23:B8:1A:AC:4D:B9:E6:3C:98:54
Authority key identifier: E4:6D:57:9F:EF:50:14:7C:1F:D0:9D:96:B4:95:6F:DD:1F:20:9D:72
Certificate issuer:       /CN=e46d579fef50147c1fd09d96b4956fdd1f209d72
Certificate serial:       01962F74602BEF18E78A754E267C6F013BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft
Manifest number:          0DF8
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 5G1Xn-9QFHwf0J2WtJVv3R8gnXI.crl (hash: NjhD0ZlZ9/Ed8ipMDx+QgCiHfHhBwqvWWs8XqBLbyJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:2b:ef:18:e7:8a:75:4e:26:7c:6f:01:3b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46d579fef50147c1fd09d96b4956fdd1f209d72
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=9a331ca9f3b7113a3b3423b81aac4db9e63c9854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:0f:c2:0a:98:2c:8e:df:d2:de:d6:b8:a0:
                    1c:5e:97:54:55:44:5c:07:b3:f1:dd:e1:82:d3:c3:
                    d4:ef:3d:e6:01:7e:1c:28:ac:64:4c:b1:27:1a:5a:
                    1a:31:1f:2a:bd:11:b0:ad:04:73:0f:c2:99:45:71:
                    6e:0e:7d:85:9e:3b:9b:8c:e6:da:88:9e:46:18:ce:
                    01:13:6a:54:57:ba:9c:a9:4c:d4:da:21:d0:6e:4d:
                    28:f0:44:81:98:d4:01:24:63:a8:6f:d6:87:72:76:
                    31:9a:d9:8c:50:b0:d7:69:d0:32:1d:42:0b:92:d0:
                    90:bc:a2:bf:2f:c3:34:ea:18:69:92:19:2b:27:08:
                    99:7d:70:5d:db:6d:de:bf:46:1b:45:7e:ea:ca:62:
                    2e:4c:ba:a0:25:18:87:c2:a6:1d:47:fb:a0:4f:cd:
                    3c:7c:df:3e:76:cb:d4:76:d6:df:75:3f:07:4e:bc:
                    fb:9a:4d:52:3d:2c:7c:9f:64:fc:c3:c7:df:0f:23:
                    6b:7e:1b:b9:53:13:66:5b:6f:a8:63:14:2b:af:5d:
                    ae:72:d0:5a:91:cd:b8:41:4c:b9:f9:be:4f:11:9c:
                    da:1e:73:4d:9c:0c:84:3a:03:50:dd:3d:d9:c8:24:
                    d2:d9:2c:1c:5c:7b:07:df:a1:70:a4:eb:73:4b:5d:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:33:1C:A9:F3:B7:11:3A:3B:34:23:B8:1A:AC:4D:B9:E6:3C:98:54
            X509v3 Authority Key Identifier:
                keyid:E4:6D:57:9F:EF:50:14:7C:1F:D0:9D:96:B4:95:6F:DD:1F:20:9D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045a5a-17bf-44d0-834d-134337d0c735/1/5G1Xn-9QFHwf0J2WtJVv3R8gnXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:70:be:27:48:88:86:55:8e:9f:27:99:e7:19:8c:b4:0d:58:
         44:26:29:78:7b:94:d5:9e:5c:5c:94:be:99:19:11:63:90:3e:
         f9:b6:b5:dc:74:21:30:a8:86:f9:3c:72:17:69:02:be:4e:24:
         76:eb:3e:88:3a:ff:12:b2:83:eb:a4:74:19:be:f3:6f:af:30:
         5c:6e:f7:b1:00:8f:e0:4d:f3:9a:b5:eb:94:8b:37:81:8a:d8:
         ad:42:54:4f:07:87:43:4d:5b:a2:fc:d9:01:e6:39:b4:4f:f6:
         81:da:75:c6:f6:c9:c5:fb:bd:f9:54:d0:8c:86:98:61:76:de:
         38:4e:cf:83:3b:70:d3:28:f4:f4:19:21:f8:68:42:2f:19:f1:
         0d:e7:4b:2a:36:c8:4d:94:c6:61:d7:49:26:c3:92:14:d5:77:
         7d:62:99:64:77:81:67:73:e6:22:6c:cb:53:21:05:76:3c:84:
         0f:53:df:b8:ca:dc:cd:ce:fa:85:af:de:1c:70:20:57:a2:d8:
         ea:bf:a9:d6:c2:c5:71:ac:75:89:61:26:c2:d9:9a:39:53:5c:
         a6:fc:79:43:c5:94:59:f7:b2:53:0e:b9:8c:63:fb:7c:5d:84:
         3b:32:60:31:5d:73:a8:f3:df:70:0a:6c:cf:4b:27:a2:a2:a5:
         b7:44:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----