Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File:                     5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier:          AikjYD26WWVANn1Xrp0RI5xJlSJ1OplwOsJRa1j/rFg=
Subject key identifier:   93:E0:86:4B:3B:8B:C3:55:04:DE:E5:DD:48:70:18:8C:1E:56:00:06
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer:       /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial:       01962E98E11EED331726A274EC365B2380A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number:          0E65
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: aCkuXwFE4MVN96lvZCkyRAmnT6g4M+exD9JTcwLRE2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e1:1e:ed:33:17:26:a2:74:ec:36:5b:23:80:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=93e0864b3b8bc35504dee5dd4870188c1e560006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:d6:ba:ad:e6:dc:91:a8:26:5d:20:35:3d:
                    37:2f:08:d2:29:f2:c9:44:90:aa:94:4d:a1:3d:30:
                    e2:59:45:0b:91:ad:8a:cb:20:08:e8:e3:d7:22:44:
                    c5:32:f6:d6:48:f9:60:7a:c9:8f:47:94:57:7b:c6:
                    93:4f:12:35:46:96:90:0d:96:4e:e4:a9:e3:5b:a5:
                    0d:98:dd:4a:9d:80:8c:2b:20:07:3c:1f:15:ae:bf:
                    bd:ef:ba:01:bb:78:77:4a:54:d2:a6:9e:a5:3f:ef:
                    73:1b:5a:0e:65:97:ee:52:25:67:09:ac:4a:2b:31:
                    0f:23:f8:10:1e:9f:ee:83:04:46:f6:b4:de:c2:8d:
                    fd:9f:1d:2e:06:50:ac:21:e2:7b:b4:78:3b:9e:b2:
                    17:68:d7:6a:1b:80:35:f5:09:ad:33:25:4a:bb:ae:
                    7b:be:ad:17:32:f0:71:a8:71:a2:fd:4d:d0:2e:02:
                    e9:70:b4:8b:f2:ef:cd:5a:97:bf:db:d0:9b:50:70:
                    b8:2e:e6:23:d7:82:8e:6e:3c:36:9b:24:f3:55:25:
                    96:ba:23:94:49:48:eb:83:13:d7:55:89:17:f0:b5:
                    03:5d:a0:ed:75:9f:26:dc:49:a0:69:a8:87:a1:1c:
                    8b:2b:06:06:65:0c:d1:70:f9:5c:30:fe:aa:97:b4:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:86:4B:3B:8B:C3:55:04:DE:E5:DD:48:70:18:8C:1E:56:00:06
            X509v3 Authority Key Identifier:
                keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:11:77:c2:0f:18:52:f2:72:bf:78:b5:cf:06:12:ed:69:
         bc:98:e7:a6:44:77:b5:cf:68:f2:b2:95:c8:11:71:95:fb:dd:
         ba:56:6b:91:03:d7:59:45:45:10:87:72:37:1d:b3:0a:4d:24:
         65:21:b7:ad:1a:c4:65:55:03:54:e6:f4:a4:bf:f6:7f:ca:45:
         54:3e:bc:31:f2:66:1c:dd:a8:9a:7b:da:6c:e6:96:c3:ea:b7:
         e4:25:34:37:eb:3b:95:fa:eb:97:1e:37:28:25:77:14:16:df:
         cd:58:bc:41:77:b1:a4:99:45:e7:0e:5b:42:d4:8d:11:99:92:
         05:b2:b8:7f:ed:7f:f4:67:72:54:f8:76:8d:88:13:69:cf:b3:
         c8:ea:52:11:07:b8:5b:14:ba:43:d1:74:50:82:73:d9:59:33:
         d1:39:10:c5:7a:6d:05:f4:63:92:75:2a:31:41:c2:2b:fc:c2:
         03:a1:13:6d:1a:14:34:e0:71:5c:60:52:b6:43:1f:ef:b9:b5:
         c2:9b:db:9f:a1:8d:85:71:22:70:8f:49:a3:55:f4:3c:c6:a5:
         07:d0:e5:48:a5:68:45:f7:31:fe:42:5d:6b:9c:05:9b:81:b1:
         99:43:e8:68:7b:32:17:f9:7f:2b:51:3d:2a:27:72:38:5e:83:
         94:2a:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----