Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File:                     D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier:          ajwF1F9YaFTfKZAqnehPd2A1jRojIB1EXSFZOl47Mnw=
Subject key identifier:   0D:C1:D4:11:C3:15:F3:A6:0D:C3:3B:02:CE:9B:CE:11:30:19:FC:81
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer:       /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial:       01962E9935DF86F3098BA2381783817F7944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number:          09F5
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: nZk4zYGgyGD1sqovIkWNJR8t1rQYOZb8wHT/TfFnmt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:df:86:f3:09:8b:a2:38:17:83:81:7f:79:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=0dc1d411c315f3a60dc33b02ce9bce113019fc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:0d:1b:56:9a:d5:f3:4e:75:ed:99:b6:04:
                    16:9b:2e:72:68:68:ce:d8:ad:35:1c:c5:c4:b6:39:
                    c7:14:3d:95:4d:fa:3a:e1:d3:ca:d1:e9:4f:34:21:
                    30:ea:11:46:b0:d5:06:37:fa:b6:a2:ca:59:3a:de:
                    92:31:af:aa:62:e0:49:4b:61:9b:1a:85:ce:56:4a:
                    31:64:df:5c:89:23:c8:36:76:64:59:55:62:54:35:
                    9e:ed:bc:e0:23:16:c3:ed:f0:96:48:da:14:16:e9:
                    08:dd:a8:a0:2a:ec:fe:d6:59:f6:69:85:e6:ee:6c:
                    17:23:3b:98:ca:13:be:30:9f:8e:b6:41:2e:ee:d8:
                    48:03:98:33:7e:8b:7b:71:ec:ea:3e:ca:fc:fe:cf:
                    5d:50:1b:f9:0a:70:a2:0f:a3:5e:ba:f9:90:0e:81:
                    1f:2a:5a:7b:d6:be:90:ff:0b:9f:e9:4f:72:42:cf:
                    47:b7:23:c2:f0:8d:fa:04:6f:12:aa:68:fe:b3:35:
                    dd:98:54:c9:74:e9:c9:f6:13:7f:c4:b2:0e:1e:9d:
                    22:55:ec:15:70:6e:44:78:d2:27:85:66:f5:39:db:
                    b1:5b:94:af:9a:e7:d0:16:cc:65:5f:d6:51:cb:68:
                    00:57:49:f2:c6:5d:ac:56:94:55:01:d7:49:78:a7:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:D4:11:C3:15:F3:A6:0D:C3:3B:02:CE:9B:CE:11:30:19:FC:81
            X509v3 Authority Key Identifier:
                keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:1c:07:cd:b7:ba:06:18:f2:81:e4:9d:8e:f4:f0:35:11:
         9d:ed:2f:b6:47:49:76:f5:3d:77:1f:76:47:7d:61:2e:3c:57:
         69:af:51:07:97:8a:01:ac:6c:47:6a:eb:79:0b:20:a0:ba:f9:
         df:42:eb:05:d6:40:c2:7c:7b:a6:f9:ff:21:77:61:78:51:c8:
         06:f0:fc:3f:f1:37:9b:20:fd:5b:73:36:82:76:4f:51:a9:5f:
         77:ce:0f:1e:a9:c5:5f:c8:07:98:88:91:1a:67:32:96:a3:0d:
         9c:62:0f:4f:3c:a6:fa:c0:a8:c3:fc:ab:e6:27:5c:e8:9b:ae:
         fd:93:e2:4d:6f:6d:4e:09:df:00:09:8d:76:ba:4d:dc:38:75:
         86:16:6e:a9:d0:01:f9:91:a9:4b:93:ca:53:6a:d4:6d:45:1b:
         aa:fa:11:51:f2:ff:bd:81:00:1d:ff:60:a3:4e:c1:21:38:16:
         83:5d:03:2c:b5:2c:51:83:56:34:de:d0:07:24:59:9a:20:69:
         d8:5f:eb:a0:54:32:ad:0a:b3:df:59:16:fb:e9:9d:be:26:7d:
         bf:19:c7:de:14:cf:9d:c7:0d:36:48:af:de:5a:79:c1:c8:2a:
         40:f1:86:95:7a:7d:2c:60:d7:5a:a8:7e:c6:15:94:50:f9:ba:
         7a:01:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----