Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File:                     if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier:          Z5cnEckFBOb4Pa0OoVt1/Vu9Orqcry3KnwHoCMjGb0I=
Subject key identifier:   71:48:5B:C9:EC:56:61:1F:1D:AE:CC:9F:B7:30:BE:21:72:C2:57:38
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer:       /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial:       01962F06ED3EC17499A7F92AB0664C060048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number:          0746
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: G4qGmcgx0rz57D/dCwPVwG6bBOBUnI0RX0jB+p+tFCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:3e:c1:74:99:a7:f9:2a:b0:66:4c:06:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=71485bc9ec56611f1daecc9fb730be2172c25738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:4e:c6:f8:f2:d8:e8:79:bb:84:31:15:af:
                    49:36:7a:3e:a4:43:26:66:53:63:c8:f9:02:c5:35:
                    52:dd:f3:4d:06:0d:9d:46:d5:26:83:c5:32:31:fc:
                    00:1b:ef:ad:b6:81:8a:53:5d:2a:c5:c9:3e:fe:e6:
                    12:ab:a0:9f:78:05:7d:dc:d2:0a:b8:dc:01:56:62:
                    4f:66:1e:1b:db:2d:5d:96:71:1d:dd:f2:44:07:ec:
                    bc:9e:00:d8:7f:0b:5a:bf:fe:9e:bb:6f:68:ca:17:
                    00:45:1a:d3:91:8c:3e:07:cd:40:5f:b6:e0:70:2b:
                    88:2e:43:ae:69:7e:b9:17:bd:78:01:df:77:86:66:
                    22:ea:06:28:5a:2e:74:60:e4:df:49:d8:46:ee:f5:
                    f7:ec:2c:6a:4a:86:25:7d:20:8c:65:03:b9:a2:12:
                    85:f5:69:99:50:44:4f:d1:fc:5f:19:91:70:6d:f4:
                    cd:c5:4b:d1:0d:b4:7a:23:8f:0a:8e:7b:b5:8a:69:
                    7c:a1:d4:93:7f:86:e2:12:69:61:ce:c1:26:00:9e:
                    4a:4e:ce:d3:8f:ab:53:b1:fc:0e:c2:e5:83:c1:66:
                    f4:58:a2:10:54:03:97:00:c0:a7:d9:9d:eb:b8:90:
                    79:5d:12:9f:55:c1:c4:e7:b7:31:e7:46:1d:a6:7a:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:48:5B:C9:EC:56:61:1F:1D:AE:CC:9F:B7:30:BE:21:72:C2:57:38
            X509v3 Authority Key Identifier:
                keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:16:aa:a0:cf:b2:98:97:44:66:01:74:68:e8:12:bf:ab:34:
         0d:da:fa:9a:29:87:05:c9:7b:6d:48:2b:15:55:d5:be:5c:6e:
         3c:bf:63:b9:f0:c7:04:7c:7c:b1:50:ce:b6:5d:d4:b0:8e:45:
         2d:f7:36:1c:6e:c9:a2:64:fb:e5:e5:ab:d0:57:de:2c:6d:8e:
         07:e0:88:7d:76:cc:40:8e:04:4c:c4:1d:dc:9f:11:dc:87:66:
         2a:bf:59:a2:cb:ab:b0:57:3e:d7:81:b4:f9:c5:81:30:81:e5:
         30:ac:3c:ce:eb:b2:a9:e0:45:14:47:a6:b1:f8:61:c1:e9:dc:
         e7:fd:b9:0a:bb:c6:11:21:36:d6:66:ef:21:37:36:42:b6:fd:
         e1:1d:f0:fe:21:1f:fa:c8:e7:ee:2b:32:5f:af:e4:0a:eb:c6:
         a0:d8:b6:77:ff:c6:de:50:14:27:e7:ae:2c:05:d5:61:0c:e7:
         61:da:0b:f9:3c:a9:26:1b:32:8f:e7:16:1c:d7:9b:bb:74:7a:
         a6:b2:1f:ed:dc:e1:46:40:0d:da:b1:8c:b9:c9:cf:4d:bb:58:
         bb:cb:6c:5c:56:f7:8c:d2:2c:99:85:f3:32:ab:e0:79:48:4f:
         33:dc:95:13:b3:38:37:08:ba:2f:ca:69:26:bf:0c:1b:77:00:
         73:ca:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----