Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File:                     E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier:          i+VzGHi0QZpaC/i9cq6barh2D4pyOby80EVmCQbZdKY=
Subject key identifier:   FE:74:52:6B:6F:80:C3:54:30:63:BA:41:1C:4C:B4:39:70:43:8F:1C
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer:       /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial:       01962F74B339591557F84CAF356D446A9394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number:          0136
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: NfoXR4xNXLAfaN3ewq0hGJIXHlBWr0Ay2x0bfsTOjrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b3:39:59:15:57:f8:4c:af:35:6d:44:6a:93:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=fe74526b6f80c3543063ba411c4cb43970438f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:1a:1d:7b:ed:23:d8:e6:15:2a:c4:bf:b7:
                    46:d1:45:8e:15:07:14:4b:8f:56:f4:72:19:be:ad:
                    09:96:25:23:1b:ae:7f:9e:45:99:c6:83:d6:23:cc:
                    b6:52:e5:f9:ef:6b:ec:ba:fb:94:d9:52:73:11:45:
                    b8:a7:3b:79:15:04:2c:f9:3f:35:07:e9:e3:b8:fc:
                    c7:09:c0:39:71:95:84:e1:c5:18:c3:4e:2e:e9:81:
                    36:f9:7a:b1:db:2d:dc:44:21:6a:11:8d:a2:04:9e:
                    c5:1a:8a:23:84:be:b0:36:24:fc:74:76:ab:4a:60:
                    e9:5b:6d:c6:0f:6e:89:27:d4:f8:c1:a5:a0:49:c1:
                    be:0d:e8:f9:ed:f1:48:1d:bc:52:76:e3:5f:56:27:
                    e1:48:e7:7f:93:bf:f0:bb:77:4d:26:8b:85:da:8a:
                    98:de:94:6f:d1:b1:a0:17:af:96:81:6e:90:e4:89:
                    ab:94:d9:82:f1:75:49:56:ec:13:e3:fd:a0:fb:b8:
                    6c:4d:d6:d4:db:da:9f:b9:fd:52:f6:ea:4b:86:af:
                    1a:e1:ac:ba:89:b3:55:72:1d:30:0d:72:6d:3c:ed:
                    51:fb:68:01:8b:dc:cb:9f:42:af:88:e3:c3:d4:26:
                    d4:60:14:c2:93:6d:da:f1:63:63:f4:39:a7:f7:f7:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:52:6B:6F:80:C3:54:30:63:BA:41:1C:4C:B4:39:70:43:8F:1C
            X509v3 Authority Key Identifier:
                keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:96:82:8b:7b:ca:aa:4d:86:2b:4b:96:93:df:10:52:8c:
         64:9a:4c:25:94:38:9d:8f:a0:90:82:a6:f5:16:45:6d:ea:e6:
         f6:f4:fd:80:32:6a:43:6c:22:22:4a:c6:67:aa:e9:4d:d1:b2:
         49:8b:44:cf:8e:e4:75:b2:f2:96:36:18:79:b6:2a:07:4b:78:
         f3:2e:93:54:2e:b0:c9:05:25:98:55:1b:d7:e1:1b:a3:e2:a7:
         e9:93:65:d5:45:71:25:94:3b:e7:93:0f:31:bc:a6:2d:2f:bf:
         79:2d:30:30:50:2d:34:0e:34:86:ad:d7:d2:30:8a:30:3c:2e:
         5b:3f:62:e9:07:0f:07:94:42:3b:fb:54:29:21:5b:01:00:1b:
         61:80:bc:32:3e:f0:48:da:1a:a4:3c:98:67:f8:6f:a5:cd:e9:
         c0:aa:ab:f6:5a:c0:2f:1f:1b:1e:6a:5b:bf:f2:6a:1c:8d:f5:
         a3:09:23:ad:8b:77:ad:93:30:11:b1:d7:6f:85:68:eb:ee:9e:
         19:2f:f0:5f:00:cb:f5:a3:00:0d:d1:df:4c:f4:e8:1c:4a:f6:
         c2:10:88:fa:69:74:fd:f2:e5:28:07:f4:56:78:df:3b:65:a4:
         4a:f4:b5:cc:62:4f:01:50:74:1c:47:01:e0:12:16:3d:98:f0:
         50:0d:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----