Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File:                     4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier:          r59eO5C5mYRoHx4FaIOQHMVx2TjK5AyIff4zuft1Bfo=
Subject key identifier:   6B:25:F1:DD:13:70:7D:28:64:8E:D2:AF:5C:DF:78:DB:E9:D4:94:9F
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer:       /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial:       01962E98FB07DAA335C45CC6A83F38751E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: xCqLBrYsQ/NKt5PpH4PBZWgWfdCYpphSoca/r2zsNNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:07:da:a3:35:c4:5c:c6:a8:3f:38:75:1e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=6b25f1dd13707d28648ed2af5cdf78dbe9d4949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:37:02:79:1f:0f:5b:64:f5:ec:7f:45:58:50:
                    a2:fb:13:1a:46:bd:a2:5e:07:58:37:8b:a0:92:eb:
                    a8:f6:92:34:f9:0f:c5:82:30:8d:04:52:5e:96:43:
                    72:53:eb:1f:47:30:af:37:a8:85:37:82:ad:34:0d:
                    32:f9:1c:70:e6:27:47:cb:84:80:ac:00:fc:d1:6b:
                    2f:dd:4c:bf:4b:ba:e7:5d:1d:53:35:48:b5:b4:03:
                    e4:b6:11:9a:bd:6c:7d:fc:6b:4b:53:1a:b8:4f:af:
                    52:c0:77:c3:1b:a9:c1:6d:89:98:d0:0c:bd:af:15:
                    d0:92:17:b8:44:d6:4f:b6:77:8f:14:62:8e:01:90:
                    71:be:ee:b4:6a:7a:d6:54:9b:22:1c:39:2b:96:7c:
                    24:44:53:78:4d:dd:4d:b7:a2:b1:fd:d2:98:f4:1e:
                    f6:88:f8:94:2a:89:1e:dd:30:af:23:8c:e6:c2:f1:
                    9c:33:0d:66:98:d8:72:56:3f:24:e4:dd:ab:48:cd:
                    e6:a8:cd:31:30:fe:52:45:ae:9c:a2:d2:ee:32:74:
                    45:63:68:7d:83:b1:f7:96:c7:c5:f7:a5:2d:fb:79:
                    3f:c9:d5:e5:11:08:78:94:ac:91:d7:5e:ee:c4:21:
                    2a:c4:90:0f:ca:5a:52:89:5f:1f:95:39:1b:d4:fa:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:F1:DD:13:70:7D:28:64:8E:D2:AF:5C:DF:78:DB:E9:D4:94:9F
            X509v3 Authority Key Identifier:
                keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:fd:d7:7c:00:1a:8a:ad:67:44:5e:45:ab:fa:a1:27:97:
         fc:96:f5:af:6a:ca:6d:94:68:5c:e2:bc:ea:cc:0c:25:c0:67:
         81:17:09:e2:8c:5e:32:0b:a6:02:d1:85:39:75:b2:8c:5e:da:
         75:12:74:f3:b0:85:d4:4a:12:7e:dd:3d:6a:9a:c2:d9:16:98:
         91:f8:55:13:f9:5c:4d:c7:56:16:2d:57:38:95:43:63:9b:7c:
         6a:26:75:fb:ad:56:8e:9d:d1:89:cb:0a:cb:c7:24:ef:fb:09:
         35:6c:52:40:cd:d0:27:20:3e:e9:03:d6:f7:aa:1a:b5:51:a7:
         54:3f:e6:de:2d:74:37:be:0b:f9:f6:0c:9a:68:6e:a5:34:eb:
         24:5e:4e:e9:79:88:31:df:f2:4f:e0:2d:cd:85:24:9f:c4:39:
         46:2e:d9:ed:fe:71:fb:40:52:4f:18:5f:4e:ec:c4:74:55:64:
         22:50:19:2f:02:c9:54:10:02:21:3a:da:35:2b:99:e0:11:54:
         2b:dc:fd:aa:a0:3a:66:67:0b:a0:74:4e:5d:5c:44:53:f7:c9:
         3c:a7:08:26:50:80:d9:d2:00:6e:4d:74:65:69:9f:4f:e9:86:
         b5:b4:3c:a2:de:37:2e:f9:b3:9b:49:2e:47:fe:02:98:f2:c0:
         ed:48:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----