Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File:                     _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier:          IK7bdBxAUi49dQj5VrUxXNXvs9JHaVFkm1XduCXfB1E=
Subject key identifier:   C4:7E:98:AC:7E:C5:1F:D4:1E:94:00:4D:35:01:C5:3D:71:E5:16:C0
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer:       /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial:       01962F0736DBAB4EE9DB6BDB90DD58D92B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number:          13EC
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: zGSp1U068DgTeKScZdm17FWBoUMKwvqVa0fPLO4PWqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:db:ab:4e:e9:db:6b:db:90:dd:58:d9:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=c47e98ac7ec51fd41e94004d3501c53d71e516c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:1d:ff:1f:17:e9:e9:2f:c0:6e:13:0e:25:
                    bd:ba:75:96:1b:b5:0a:bf:b0:d6:f6:3c:86:1a:bb:
                    41:9e:cd:0d:ff:06:a4:21:e8:d5:a4:a5:ee:f9:f0:
                    0e:a5:45:9a:de:fd:2e:c8:1d:0a:99:33:99:f4:3f:
                    d7:6d:f8:e7:2a:3c:82:d7:84:a9:9d:f1:2c:a5:c2:
                    97:27:3a:8c:6b:e8:e2:ae:23:b4:f3:3e:f5:c7:7a:
                    48:b1:b0:e5:d9:cf:56:41:62:60:ff:1f:aa:cc:16:
                    c0:42:fa:f0:20:bf:1d:43:e1:2c:0b:29:41:f0:31:
                    ca:f6:92:f7:50:2f:5a:2b:c0:19:62:c6:13:9f:b1:
                    1c:04:50:13:64:56:c3:1a:9b:62:6a:a2:5e:d8:29:
                    24:32:7b:98:45:0e:d0:a6:32:49:76:f5:07:df:49:
                    0f:ff:2d:15:6a:d7:e9:4e:26:82:42:64:b4:e6:14:
                    32:14:b2:64:c5:8c:51:69:1f:16:e8:9e:b0:d0:a9:
                    7f:a8:c9:c8:f0:2a:10:0b:4b:d1:2f:0e:fa:50:03:
                    f6:cf:e1:f8:59:c9:5a:be:02:b1:78:2b:17:c4:95:
                    ad:6b:ee:36:60:94:a0:67:de:86:80:47:ec:83:7a:
                    dd:3e:a8:28:0c:81:92:31:8c:88:62:ea:fa:9f:6b:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7E:98:AC:7E:C5:1F:D4:1E:94:00:4D:35:01:C5:3D:71:E5:16:C0
            X509v3 Authority Key Identifier:
                keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:80:4d:b1:f5:e9:01:dc:96:64:ee:18:a6:0c:d6:37:67:16:
         fa:f7:cb:e3:6e:c9:8d:e3:3d:15:78:67:c1:26:e5:27:cc:69:
         12:b0:48:ed:62:a9:d8:b5:aa:91:46:62:88:a4:eb:c2:3a:f4:
         e4:e1:8e:cb:68:e2:a2:26:50:b8:9e:23:7e:7b:0e:66:d7:4e:
         dc:44:50:b5:00:92:28:a4:ed:1d:0d:82:0e:7b:4d:dc:57:9f:
         96:a6:12:b4:2d:2c:11:8e:59:92:d9:74:3f:41:ae:26:a9:46:
         ea:5b:be:8d:d5:0b:4d:78:21:da:b3:74:83:e6:bd:9c:c7:02:
         8f:c6:e0:58:a3:99:e9:d2:50:6c:d6:23:7f:1d:ec:e0:a6:e8:
         91:d7:21:01:03:15:66:be:c8:8b:29:c7:9d:43:c7:5b:b8:1d:
         bc:91:f1:36:b4:7d:f9:e5:ff:99:0d:f9:dd:ef:6f:a7:7d:03:
         cb:4c:4f:e8:c6:93:12:3f:c0:c6:8c:ff:a6:0f:ea:51:8d:97:
         3e:05:8f:2c:18:8a:27:6a:0e:38:a3:bd:92:c8:7b:06:50:96:
         4a:3e:27:7e:b8:73:61:79:d1:14:63:9e:fd:54:fc:11:cc:2c:
         1f:4b:f4:80:4b:88:39:c4:e0:4f:d5:41:45:fe:84:24:57:a9:
         9a:d7:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----