Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File:                     leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier:          HNUIxpTrvedILHwrn3YjAUj5TTFprjb3GEqGaIwq9bc=
Subject key identifier:   D0:D7:EE:12:04:1E:A2:6B:C7:13:9A:D6:15:7E:56:81:EC:13:23:D5
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer:       /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial:       01962E9892BF0F6408943BA5BA4725539A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: hVlqEmd40TfjXCV89if4Y6aJxthueRWLSbwHqPyS+R8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:bf:0f:64:08:94:3b:a5:ba:47:25:53:9a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=d0d7ee12041ea26bc7139ad6157e5681ec1323d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:86:60:6e:95:49:6d:e0:5e:08:72:d3:3a:
                    a6:f7:45:6b:99:26:a1:10:8d:72:61:a2:fc:66:5d:
                    92:9d:bf:3d:0c:72:74:c5:8b:bd:4b:75:f5:ef:23:
                    6a:61:68:2f:a8:79:15:5a:6a:74:22:0f:85:b2:d4:
                    c0:6b:6a:74:ad:ec:ea:64:ba:1d:48:3d:a9:58:26:
                    41:03:32:03:ed:f3:d3:6b:2d:f0:41:9a:a0:69:cc:
                    7a:b5:c2:d5:58:f1:55:80:dd:f9:5e:08:2e:73:20:
                    98:9f:58:4d:d0:75:ab:ce:2d:5b:4b:12:ae:14:0b:
                    f0:3f:db:17:e7:ca:f7:fe:8a:f7:47:20:d7:f8:26:
                    41:c1:a6:91:0e:5b:be:68:60:39:cc:5b:16:14:ae:
                    93:f7:58:8d:80:39:4c:d7:c4:68:7e:11:4e:ab:ca:
                    d8:f7:0d:8a:59:12:44:10:2c:2b:b5:d0:34:d8:ae:
                    7a:9d:9e:7b:3a:61:6b:c9:92:11:3f:82:a0:43:82:
                    65:c4:dc:69:61:37:5b:dc:cf:e0:9d:d1:4b:82:ee:
                    d1:cc:6d:ee:8e:68:fd:4a:f4:47:f4:7d:fe:36:d9:
                    64:c3:03:e9:55:3b:4a:1e:2e:a6:af:da:1f:b9:89:
                    81:a3:25:b9:3c:51:ec:21:93:df:6b:2f:bc:b4:c8:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:EE:12:04:1E:A2:6B:C7:13:9A:D6:15:7E:56:81:EC:13:23:D5
            X509v3 Authority Key Identifier:
                keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:22:3e:45:cd:ee:14:bc:7f:3c:89:66:d7:8c:8e:c6:2d:
         91:53:bb:20:87:f7:ed:32:ec:91:ba:fc:9f:17:49:17:b9:37:
         55:f5:a5:07:91:6d:d9:9c:55:ff:c4:5b:15:fc:6b:0e:18:2b:
         38:d8:4d:e1:ce:e6:4f:ce:4b:bf:ba:a9:6f:02:56:b1:19:5d:
         be:03:8e:39:3b:ea:8c:f4:db:d1:28:bf:26:bd:b6:88:49:5a:
         7c:2c:46:48:88:c2:43:23:b1:16:ee:26:79:f9:73:91:a2:66:
         be:f2:96:27:9e:5b:7f:ce:85:c4:bd:b9:ea:3c:b2:91:50:2f:
         00:aa:9f:10:b7:32:c5:69:2c:6c:12:35:54:2e:61:76:a9:7a:
         21:2c:56:c9:50:4f:ca:55:e2:52:47:a3:2b:ae:b8:d0:b7:9c:
         e1:39:c5:11:50:c4:ed:59:42:91:7b:ad:9a:1e:7c:9e:22:f5:
         e0:2a:05:7d:9e:00:e6:0d:15:95:b0:f7:5d:1d:15:4a:85:af:
         a2:7b:11:a4:9e:86:93:0d:36:26:4c:3c:e2:42:f3:c2:31:fc:
         f0:a5:51:2a:45:f2:2a:b6:95:52:49:60:a2:94:cf:12:0e:4a:
         45:8d:14:80:51:98:af:c3:c6:d1:5b:fb:2a:d9:9d:49:10:c7:
         45:52:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----