Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File:                     mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier:          7JGNjfm5+NUoKxUxiCJCuyZnHMde143FuuILj120Rlg=
Subject key identifier:   96:5D:06:B1:F3:8D:44:49:AF:DC:4E:D5:AA:4D:DA:E8:7E:18:8C:B0
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer:       /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial:       01962DF42E789D09B907E510E7B4FC8147C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number:          040E
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: Hq06si/WEHK3e4k4USn6A3u0hSsWPJNg2qqXKviaSio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:78:9d:09:b9:07:e5:10:e7:b4:fc:81:47:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=965d06b1f38d4449afdc4ed5aa4ddae87e188cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:14:dd:6e:b5:cf:7e:a9:cf:f0:e8:40:6b:
                    08:91:d6:82:6f:d4:6f:bd:66:8e:28:68:50:74:7d:
                    1c:2c:67:ec:32:0c:53:73:5b:fc:47:ba:6e:5d:97:
                    ad:b6:29:7c:ed:55:00:e4:e0:48:5d:b7:ee:04:0f:
                    35:1b:36:6e:72:c0:bd:49:cd:a5:45:50:8f:74:6e:
                    6a:ec:13:52:a6:8a:54:09:80:bc:fa:60:14:8c:18:
                    04:b9:cf:9e:01:32:77:22:e1:4e:ae:62:17:52:c9:
                    aa:d0:d9:6b:a2:23:6b:6a:9c:2e:86:6e:c7:de:f3:
                    50:af:d8:14:33:3b:53:6d:26:22:1e:45:36:c3:22:
                    f7:35:d5:7c:fc:63:31:32:45:9b:b3:52:75:d2:d6:
                    cc:77:f1:05:bd:a4:5f:aa:48:28:02:62:12:66:45:
                    a8:a6:af:82:75:43:8c:1b:ee:45:4e:ad:20:0d:50:
                    c9:d8:9e:1b:60:2e:7f:55:d9:64:f0:a0:51:a0:8b:
                    dd:69:a3:0e:e5:91:d4:da:b4:28:57:6e:a0:6f:25:
                    c6:90:66:cf:ad:4f:6a:aa:ec:a5:dd:2f:09:bc:91:
                    dd:d3:ff:99:6f:4c:b0:51:48:4a:a7:b0:03:9e:84:
                    26:b6:e3:ac:8c:9a:6c:81:1a:2b:76:d7:34:fe:fe:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:06:B1:F3:8D:44:49:AF:DC:4E:D5:AA:4D:DA:E8:7E:18:8C:B0
            X509v3 Authority Key Identifier:
                keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:f3:37:a1:5e:b1:db:43:ac:d9:f6:5f:0e:9e:5c:94:fa:
         01:ee:e7:f8:87:c2:22:97:92:e4:e9:59:48:c4:44:6b:11:7a:
         b3:1f:0e:30:46:10:d2:fa:54:9a:1b:b2:3e:b7:8b:d2:64:9b:
         bd:8e:d5:75:f6:f6:77:f0:ce:6a:b1:28:e9:38:eb:57:00:fc:
         9b:0e:14:e7:47:aa:3a:25:44:44:6f:13:d2:b5:8b:30:81:18:
         0d:c1:61:79:4e:4d:99:3f:99:4a:d1:a7:59:15:c1:22:d4:e5:
         45:ac:72:e5:46:4b:e9:5b:65:bf:8e:75:ad:19:d1:06:a9:17:
         06:88:26:1b:e0:0a:8f:0c:bb:f2:cb:c8:84:42:01:4c:b3:ae:
         d6:99:ea:0c:bd:11:c6:27:75:08:5e:35:6a:4d:ee:9b:0e:93:
         80:0a:e3:91:ad:25:45:42:75:60:f9:6e:96:28:08:36:13:60:
         b3:c1:18:c1:23:1e:27:e2:46:64:61:2e:64:52:a0:88:89:78:
         4d:79:76:71:90:a2:48:94:8a:43:55:18:99:b1:e2:58:57:10:
         c2:47:1c:f1:98:c8:0b:c5:d4:ab:2d:95:82:0d:d6:56:c3:57:
         23:a7:03:09:4e:11:e3:e5:dc:ff:17:13:4a:00:e7:9d:5b:b6:
         52:28:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----