Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File:                     5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier:          h+AOyqo1sXZ8WI5oGGIdaEU0gd+Ii8yJ52h0WBYJ3P4=
Subject key identifier:   D1:9A:19:2D:32:AB:A8:16:D1:30:8A:6C:1E:61:12:9D:9A:E6:F9:29
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer:       /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial:       01962E987FD48A046172E1BC85374CF00A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number:          036F
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: i21PW4HxJZSN1xFe4V2b31UcbnE2l7m67HRgDwdxliw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:d4:8a:04:61:72:e1:bc:85:37:4c:f0:0a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=d19a192d32aba816d1308a6c1e61129d9ae6f929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:7f:70:8e:83:1d:30:22:9d:7d:09:ab:f8:
                    21:80:2a:ba:bb:a7:9b:18:96:7b:04:52:4b:d4:e7:
                    cd:9b:b7:7b:7a:b9:cb:64:12:49:68:6f:3b:d8:4a:
                    62:58:04:95:5e:52:17:ec:40:f0:3a:ee:43:59:35:
                    f3:45:a0:75:5c:34:8d:c3:7e:e7:a4:e1:68:39:6b:
                    17:af:8f:7b:bf:54:61:22:fd:1d:30:d4:16:8f:01:
                    c9:3f:4c:be:6e:7b:ef:67:a3:09:48:5f:a1:a0:04:
                    5f:12:fe:9c:83:24:df:ac:bc:b0:ec:59:e0:8e:9e:
                    00:45:69:c8:f3:f4:57:65:50:d6:03:53:82:01:af:
                    e0:6c:e6:ad:bd:d7:e2:3f:52:25:82:94:ad:56:81:
                    46:53:a8:e3:d2:52:f7:f8:62:81:a5:17:b1:75:35:
                    2d:98:4a:d9:04:b9:0b:f2:7a:bc:66:fc:ac:6e:dd:
                    39:d7:cf:04:61:41:0f:29:a2:33:ef:5e:8e:66:16:
                    8d:58:0b:e5:45:ad:12:04:77:1f:af:91:14:71:8a:
                    35:8b:c4:e9:dd:f8:7e:29:d5:f7:a4:95:f5:b5:af:
                    f9:d6:41:6c:21:8a:c0:bf:7c:50:08:fb:05:ba:64:
                    07:e5:c2:b2:52:ce:e9:d5:34:af:96:11:37:d6:52:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:19:2D:32:AB:A8:16:D1:30:8A:6C:1E:61:12:9D:9A:E6:F9:29
            X509v3 Authority Key Identifier:
                keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:0c:9b:36:5e:53:66:44:a8:91:59:9d:65:ed:4f:8b:09:
         b2:c0:df:c9:0b:2f:52:07:c3:e4:77:95:03:41:e0:cb:b7:6a:
         0b:86:bb:f8:d3:b5:15:dc:41:7e:bf:a3:73:d1:4c:da:44:be:
         bc:64:c7:2f:81:e7:9f:9f:ec:7f:10:2e:4c:c8:f0:3c:1d:98:
         0a:05:e8:39:88:53:43:4a:0b:cd:af:39:44:04:2e:99:5b:8e:
         d9:7f:23:a8:d9:b0:22:15:0b:c3:d6:73:f9:d0:4a:18:e0:fc:
         cf:a3:8f:b3:d9:7a:48:bf:2a:69:d6:37:5d:c5:c0:95:a6:d2:
         69:ed:7b:9e:42:5a:25:57:33:36:99:52:ac:3b:f2:25:14:14:
         9c:81:26:9c:78:76:83:b4:be:51:88:c4:46:4b:ee:d1:75:8a:
         eb:d8:62:58:73:80:60:bc:12:0f:e3:b1:25:6a:eb:16:ee:65:
         63:c8:04:1e:15:f7:2f:24:0c:0a:69:53:67:ad:ce:57:85:1b:
         20:b4:7d:09:f4:7d:46:d6:49:05:cb:49:04:9c:8e:3c:b8:46:
         d9:58:4e:d9:26:8b:89:eb:41:72:95:d1:26:21:a4:a1:25:f7:
         39:51:ba:59:f9:31:06:cb:4f:e5:86:1a:8d:79:64:ac:d7:12:
         e4:05:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----