Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          7HAFRDWJKjdHPmYKsp1NgnfENY+zBK9Awp+ZHZoEM3A=
Subject key identifier:   53:B9:EB:58:40:8A:7D:76:1D:86:0A:D3:2C:9F:36:51:15:11:4B:A2
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       01962F074050292326ACDFC04C0043312AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: 4GoEeyFc0rPfsaJYDHCEmtNegesIsF/w6CNtFMXENjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:50:29:23:26:ac:df:c0:4c:00:43:31:2a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=53b9eb58408a7d761d860ad32c9f365115114ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:d4:f8:92:c1:a1:40:8a:07:18:54:0e:6e:
                    7f:31:ed:d2:8f:2e:b2:b9:cd:1f:79:87:36:c0:a6:
                    71:92:be:76:bb:04:54:db:f3:86:6c:ad:fa:63:7a:
                    bd:a4:24:5d:46:e1:0f:aa:e3:a2:c9:79:0c:88:e5:
                    10:44:90:5c:3b:48:3b:3f:6f:d7:15:67:8b:43:87:
                    cf:39:0c:c0:70:2f:6c:d6:6c:bd:d8:6f:ee:52:3d:
                    c2:25:04:31:4a:46:09:0c:bc:75:ad:be:04:24:2a:
                    f8:4f:76:0c:b2:4d:44:f8:7e:1f:35:c4:e3:07:a1:
                    02:3d:26:53:29:39:91:91:07:fc:71:94:05:91:56:
                    91:9d:63:bd:ae:ab:b2:53:5a:6e:7f:70:5d:93:4d:
                    a4:c2:df:61:2e:99:18:06:7f:5f:24:6b:0b:d3:41:
                    d4:fa:94:00:29:6a:38:d0:77:16:16:a1:07:e0:24:
                    a4:95:6a:21:b3:ac:52:b8:55:7a:d1:fa:26:23:44:
                    bc:f0:36:d4:87:43:8b:fd:af:91:b9:54:b2:30:0d:
                    86:1b:fc:1a:70:9f:ae:52:34:3d:8e:10:fc:1d:da:
                    30:39:32:8b:81:97:e6:45:1c:07:dd:64:5b:42:4d:
                    e4:9e:d3:10:87:33:ac:fd:d8:22:67:14:11:14:47:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B9:EB:58:40:8A:7D:76:1D:86:0A:D3:2C:9F:36:51:15:11:4B:A2
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:4d:db:16:cc:9f:cd:e8:26:36:1f:c4:eb:27:58:0d:7c:
         07:e8:df:74:f1:d8:14:e2:29:f9:15:f1:52:23:bd:35:b7:ac:
         7d:2b:bb:31:fa:d4:45:13:d5:ec:72:bc:00:4d:87:31:d3:a2:
         a4:0a:74:35:17:dc:98:a5:bf:98:e5:d0:de:96:6f:c6:99:f7:
         ec:df:a9:fc:48:f1:2c:ce:94:59:e5:fa:66:82:ce:e8:ca:24:
         e0:54:d2:7b:cb:c5:7a:02:ff:fa:e6:d8:c5:9b:91:be:87:4e:
         98:a5:49:a6:04:43:45:5f:55:a4:86:19:56:1a:f0:49:2d:f4:
         a6:a2:bf:e2:9e:4a:e9:2e:5f:b5:bd:6b:d0:10:d4:86:a4:23:
         19:85:6d:78:ba:4f:1d:8d:1b:30:75:c1:2b:0e:e6:fa:b7:a9:
         58:78:cb:cf:5b:ef:37:8e:1b:95:2b:b8:6a:e0:8d:4e:a7:12:
         eb:31:a5:66:4a:27:dd:61:20:89:9b:26:cc:a7:3f:62:0e:9d:
         7a:dc:53:e9:dc:b2:aa:b6:ab:e7:18:d3:a9:49:9c:e7:1f:92:
         f7:4a:82:8b:03:cf:b2:d7:1e:a7:99:f2:1d:a1:78:dc:b1:55:
         ca:47:da:5f:28:10:d0:85:c4:79:bc:a6:9f:60:69:81:5e:3b:
         66:18:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----