Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File:                     xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier:          K9KrVMjzZbI9JCBgYS3URb1E+PJisZf+3NHVJM9+W5k=
Subject key identifier:   46:38:FE:C2:B7:A7:69:16:88:5B:9C:52:4B:CF:80:5C:A1:F5:29:7F
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer:       /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial:       01962E9934290162826F9BF7DCBD46655B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: iGGzSO/KnCbUGym+8Sh7OprVsUBH9683JxpxZFiAABg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:29:01:62:82:6f:9b:f7:dc:bd:46:65:5b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=4638fec2b7a76916885b9c524bcf805ca1f5297f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:8f:24:5d:06:18:41:60:bf:d1:b9:13:fd:
                    e2:b3:ed:77:ba:52:85:ed:a1:93:51:68:20:37:c5:
                    7d:4a:98:7f:d9:80:65:da:9e:15:3a:11:62:90:2d:
                    4f:39:b7:be:ed:44:5f:79:3f:70:1a:ac:13:2c:1a:
                    98:28:8b:21:cf:17:5f:dc:a4:60:8f:0a:57:0b:ab:
                    99:c5:b8:4b:62:de:44:6d:79:b0:dc:05:c0:1f:bd:
                    64:86:71:7d:bf:06:63:40:83:74:6f:96:5b:ba:36:
                    6d:fb:e8:fd:b1:c7:a8:31:3e:98:f1:f4:97:2f:68:
                    32:93:36:22:f2:eb:1f:d1:fa:93:73:59:d4:d5:c1:
                    1d:9b:c1:d4:13:dd:d8:c1:d1:71:ab:45:22:2f:60:
                    b0:9f:0d:b6:94:28:5c:9c:fd:d9:6d:16:6d:a0:cb:
                    4a:01:54:df:10:b9:06:2e:77:d0:59:4b:43:12:04:
                    51:38:de:f2:19:85:86:ed:cc:91:ba:4a:d4:61:0f:
                    69:5a:55:95:c9:0a:81:34:92:f1:89:8b:94:19:a3:
                    b9:56:0f:56:a5:72:79:0d:b9:2b:22:47:2e:ea:95:
                    92:22:90:a6:e1:ca:59:e3:e5:e9:75:57:db:26:8d:
                    6e:5c:bb:9c:2b:12:e8:3e:a3:1b:f2:b7:14:bd:13:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:38:FE:C2:B7:A7:69:16:88:5B:9C:52:4B:CF:80:5C:A1:F5:29:7F
            X509v3 Authority Key Identifier:
                keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:8e:25:b9:36:e2:3e:54:41:13:a0:7f:3e:29:68:03:a4:
         97:c6:05:b8:5a:17:fe:28:37:7d:4a:47:3c:c5:c6:16:3e:d6:
         f1:e2:5b:ac:4d:64:20:9e:7b:71:64:5f:64:cd:60:a3:20:4d:
         19:57:73:ea:d4:59:40:4f:bb:eb:a6:d8:d2:f8:bb:f5:e9:1c:
         a6:03:fb:80:c9:8d:af:5f:df:5b:0b:5c:91:d1:9d:f5:77:be:
         41:6e:4b:94:76:e7:1b:59:f7:b7:92:3c:a5:7a:f0:76:34:52:
         f0:5c:1f:f5:80:a2:69:ae:bf:b4:3e:6b:96:77:cb:00:21:dc:
         05:44:57:be:c3:f5:8e:58:c6:aa:7b:fe:82:32:d5:70:f4:51:
         c0:ef:78:28:1b:75:a2:06:22:3b:9b:e4:69:9d:91:d7:2b:e2:
         27:d0:e7:43:c9:69:c8:30:d6:b1:5c:39:09:ec:cb:0b:46:64:
         32:db:bd:29:22:80:e9:66:b1:72:37:02:33:29:98:04:7a:15:
         f6:b7:b3:6c:aa:1b:dc:ed:37:2f:81:cb:81:63:95:b9:8e:f0:
         9b:d2:31:4a:1f:0b:d7:39:2b:e5:e6:90:78:ab:41:8c:d2:df:
         56:0a:b2:23:b9:fc:d2:5c:d5:62:47:78:80:8f:c3:bb:1e:f8:
         55:5d:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----