Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
File:                     PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft (raw, json)
Hash identifier:          LcoShaVeo0oSQNJL6YSpKsql8o4ZniNFJ8opJ52K+sg=
Subject key identifier:   03:E5:C8:70:D4:FA:70:8A:8E:E3:5B:D5:DF:A0:EC:51:A4:36:40:72
Authority key identifier: 3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
Certificate issuer:       /CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Certificate serial:       01962E9948CF7F7E8442988EF879926A3B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
Manifest number:          026E
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl (hash: B592Nd5Urb/xJMPuS/q0WN9D+t5CwGAlU3xHMVu1tXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:cf:7f:7e:84:42:98:8e:f8:79:92:6a:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=03e5c870d4fa708a8ee35bd5dfa0ec51a4364072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:53:fb:be:8d:7d:3a:01:f5:15:ee:ef:80:
                    0f:5d:a4:99:60:bd:27:aa:14:94:f6:c7:e1:5f:9a:
                    de:27:f5:2a:9b:42:f2:50:91:8d:4e:a7:93:78:a9:
                    e3:43:b7:7e:86:33:de:68:30:5f:f0:6f:ef:34:00:
                    90:16:7b:21:c9:cb:21:8d:95:4d:00:91:d7:6e:4a:
                    cd:52:68:b0:98:e4:b6:3b:c0:ce:24:63:18:5a:df:
                    48:b6:46:13:68:f3:53:85:58:ab:e1:71:a6:a7:2d:
                    9d:c0:31:28:5a:7c:b7:20:a3:cf:8d:6c:ef:68:5b:
                    4e:35:ec:8c:d3:4d:19:47:54:24:63:33:5d:23:9c:
                    a0:a1:f0:2c:22:d3:b8:83:d0:90:13:67:d8:cf:cd:
                    78:5f:6f:37:ea:01:42:32:3a:a6:a7:86:5f:8e:d3:
                    36:e2:bf:24:78:49:5e:30:17:05:22:2c:b9:76:8d:
                    86:d4:e7:c1:3a:d3:c7:bf:85:cd:9b:a0:60:72:cf:
                    0b:24:8e:a0:3f:5b:72:ff:79:f6:3c:ce:22:a4:5e:
                    86:f2:5e:0b:e9:3b:e1:c5:7c:79:c6:35:3e:30:0f:
                    5f:54:01:e0:78:8e:2f:22:c5:46:7b:b2:ab:d7:28:
                    d4:3b:79:b2:df:d3:af:cc:8e:74:d0:f9:4e:de:23:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:C8:70:D4:FA:70:8A:8E:E3:5B:D5:DF:A0:EC:51:A4:36:40:72
            X509v3 Authority Key Identifier:
                keyid:3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:31:77:f5:8d:a4:83:30:f9:01:6a:37:c4:9b:a0:f4:97:
         f1:df:bb:80:b3:6e:12:c0:1e:bd:47:e9:39:27:1e:74:87:1c:
         90:dc:2a:3e:d9:15:f4:60:34:22:43:58:53:f4:28:a9:9e:bc:
         de:b0:da:0a:33:e5:76:7a:46:c1:49:81:d4:a7:9f:bf:d0:e8:
         87:3e:2a:7f:e6:23:a9:1a:e1:c4:b7:54:ea:22:0f:05:3f:4f:
         aa:04:68:89:8b:69:8d:c3:b4:5a:34:b6:50:62:c9:6c:5b:60:
         13:7c:1d:e2:c8:77:68:1b:84:2d:42:8b:0a:0d:fc:0d:70:14:
         46:51:ba:f8:ad:aa:9d:1c:a2:7b:c5:79:41:c4:29:c5:17:9c:
         89:67:4b:76:ba:23:6f:89:f6:a8:cb:7a:02:77:1c:3e:82:5e:
         91:0b:49:a6:c0:43:43:5e:ce:38:1c:a9:92:ab:f0:13:35:53:
         5c:aa:08:af:c0:89:a4:97:35:ce:ea:00:75:6d:f9:8b:ed:a1:
         05:32:d6:29:43:82:79:eb:32:3e:f5:5a:56:5b:4a:17:54:98:
         66:51:14:02:7e:18:a3:09:81:32:6b:b1:c1:d5:f0:57:36:e3:
         de:1f:81:4d:45:dd:eb:27:82:ee:46:89:ec:25:28:51:94:48:
         15:6e:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----