Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          lEC1iJXdGnoWh7Jwd1oZkjgCiVxapLL+GvEvAlFu1Ds=
Subject key identifier:   35:71:B1:77:47:37:58:93:B9:07:5E:52:58:A2:95:56:BA:5E:98:28
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       01962F3D8916587BDB1B7490865DD0F615D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: M7i9qkm3M3RngvpjTcygKpjVJcP1bx2zQzkaeuJHUJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:16:58:7b:db:1b:74:90:86:5d:d0:f6:15:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=3571b17747375893b9075e5258a29556ba5e9828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:59:90:cb:10:02:4f:ec:56:5b:ea:51:8a:
                    92:9a:a7:70:3b:99:a4:c8:02:3f:a7:f5:1d:7b:b5:
                    e7:e6:73:72:63:ca:4f:4b:9e:f4:79:87:5c:7c:d6:
                    9f:cb:f0:e0:da:8f:62:07:83:16:cf:5b:46:94:17:
                    e5:6c:fc:8c:b9:da:f8:54:84:d3:5c:69:4e:9d:82:
                    36:7c:5a:62:8c:f0:58:80:da:ce:f5:33:96:0d:9e:
                    07:2d:17:65:5c:e4:6d:2c:d4:b9:52:64:a3:8d:78:
                    74:1e:b8:48:28:9d:b8:24:f2:c8:d6:33:46:f3:c5:
                    0b:58:7e:6a:5b:62:ab:c9:7f:78:b9:67:19:31:44:
                    f5:9b:8c:99:25:98:84:46:fe:d7:cf:6c:09:38:55:
                    b5:56:88:bf:58:52:fb:df:87:ba:ca:59:a3:c3:20:
                    27:07:42:84:68:42:c6:ba:77:47:35:2a:57:ec:e2:
                    aa:ad:51:ac:88:f7:8e:51:23:b8:c8:5b:28:fd:8a:
                    cd:53:43:b2:d4:63:3f:74:55:48:68:5a:0c:e5:7e:
                    39:22:e2:7a:82:7c:7e:b9:2c:c6:a2:92:72:55:7b:
                    07:fe:87:22:a7:89:43:8e:4a:e6:95:f8:42:c7:45:
                    43:67:da:bb:72:4d:30:91:d6:aa:66:34:74:cf:2c:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:B1:77:47:37:58:93:B9:07:5E:52:58:A2:95:56:BA:5E:98:28
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:21:12:5c:7c:ba:2f:4d:04:1d:32:28:6f:d6:a6:b7:01:06:
         6d:75:4c:1b:23:0a:eb:28:09:87:d3:28:4c:dc:af:02:3b:b1:
         ed:18:39:99:13:b1:68:87:ee:32:50:4f:c3:9a:74:7f:89:35:
         b2:1c:bb:61:39:36:39:a3:62:49:d4:55:48:49:05:ee:d9:bf:
         40:81:4e:d5:e6:b5:51:ca:47:7b:85:61:cc:28:dd:60:cf:96:
         2f:51:cb:8e:9e:f1:8b:8a:3f:47:ee:ef:9f:6f:4a:10:a4:99:
         a2:98:18:55:19:a5:d0:88:20:bc:a8:06:68:b6:2e:5e:5f:74:
         bf:09:16:65:cf:c1:54:5b:e8:b6:0c:bf:8e:dd:39:22:09:03:
         38:64:25:c1:eb:7c:44:bd:fe:99:f1:6d:4e:8c:13:cc:77:35:
         9e:ad:06:7d:9a:d4:75:1d:ca:22:3d:60:59:b9:d0:eb:a9:6d:
         21:73:78:5d:9a:bb:bb:4d:34:31:aa:53:cc:d3:2f:bd:20:76:
         07:52:ff:b2:0e:73:28:ed:24:36:de:fc:8f:b7:26:51:ea:38:
         37:18:dc:24:85:d2:6a:85:8f:ce:be:53:c0:1f:40:26:ef:b3:
         47:e3:9c:be:91:71:95:a1:ec:68:32:a1:cd:63:93:fb:76:6c:
         6c:9a:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----