Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File:                     kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier:          bAUZfuDKjNSj6WDNzRhkll1D1dI9gOJAuP79yjLqYxQ=
Subject key identifier:   52:45:F4:12:7C:D5:0D:F1:F0:D6:92:C6:AE:88:E9:21:02:E7:64:E9
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer:       /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial:       01962DF3ED94F2AB0477DC29CD53E3B8D335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: /jsYFzxbb7j5clBmclQCtwLG1p4dy7JtwbDFZ7zWHQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:94:f2:ab:04:77:dc:29:cd:53:e3:b8:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=5245f4127cd50df1f0d692c6ae88e92102e764e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:0f:17:53:17:90:c8:47:f7:5c:e4:6a:c8:
                    8a:53:ea:fb:6b:86:a8:fd:da:47:10:6e:62:44:e0:
                    5d:86:93:35:f1:8d:26:52:55:96:cd:cf:84:0b:51:
                    66:66:89:24:61:7d:3b:b7:48:06:60:f6:ef:e9:ad:
                    6a:da:44:a0:c9:72:32:e9:10:d9:c7:ae:4c:60:6a:
                    b9:8a:83:60:b6:39:ca:d5:b7:9a:c5:66:f8:86:1e:
                    d6:75:f1:54:53:79:dc:a1:d4:63:06:c2:61:c3:10:
                    82:67:1f:4c:41:c7:e6:79:be:86:f5:3a:63:07:07:
                    dc:f1:2f:a0:b0:56:21:96:78:f6:53:9a:3c:f6:f6:
                    78:c6:4a:db:6c:9f:99:c1:c0:c1:42:c0:91:25:90:
                    4e:ec:79:bf:84:d5:35:92:74:c8:90:e3:23:4b:58:
                    37:7e:2c:d0:18:e1:c2:8c:8b:51:8a:d8:01:b7:d1:
                    76:ff:05:cb:39:c5:04:17:8d:96:e3:e9:d5:e0:4c:
                    2c:ed:19:67:65:b8:dd:79:62:31:65:49:c0:33:ac:
                    73:c3:37:97:c5:da:ed:3a:cb:ea:fe:ea:a0:a2:8d:
                    7d:d6:29:1b:9f:1a:81:90:94:ad:66:24:88:a2:a9:
                    35:dd:57:83:c3:72:b5:1e:6c:34:2b:a6:24:15:23:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:F4:12:7C:D5:0D:F1:F0:D6:92:C6:AE:88:E9:21:02:E7:64:E9
            X509v3 Authority Key Identifier:
                keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:1c:45:82:d1:8a:9f:9f:65:71:ea:c6:80:37:fa:fc:c6:
         65:86:09:5a:06:1b:69:63:2f:9c:45:ea:a6:3f:7a:4a:bd:11:
         8d:a2:24:97:4a:5c:41:53:d7:b0:f1:73:74:5d:0d:6b:89:9a:
         bf:b7:b8:65:87:e7:64:4e:06:66:f6:2e:1d:13:da:a6:02:1c:
         ee:cc:a0:b2:d6:de:a8:ed:0c:85:3d:af:89:d9:2d:c0:c1:c3:
         cb:44:bf:8b:4a:45:1d:26:74:e3:dc:10:6a:d5:66:38:97:a4:
         bd:d8:ee:8d:74:53:e8:16:f4:1d:c7:b6:dd:31:92:ea:61:2a:
         9f:35:55:69:d4:e9:2f:c3:cd:00:bd:cd:b9:d0:76:8c:1e:33:
         67:9f:2f:6a:cf:77:29:29:52:da:0b:df:e6:65:81:cc:a0:b4:
         d6:96:60:36:1d:9a:13:c9:88:4e:e2:b4:fb:b0:05:bb:fd:a1:
         68:5c:8e:4a:0e:3f:c0:f3:a4:f4:27:84:35:b5:b0:6c:f3:1c:
         33:db:6c:fb:6e:ba:ce:c2:07:5e:dd:52:a1:99:13:73:bf:27:
         08:ba:f1:06:f6:77:d6:7f:40:a9:79:e7:36:5d:66:7c:51:cd:
         ef:c3:e1:6e:a2:51:98:cd:f0:25:f0:80:fd:4a:64:8f:c5:05:
         e7:dd:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----