Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          rtp9VPS1MbnFpk9EpCrDNIYR/ATj8uI4NoIuNsLEHtQ=
Subject key identifier:   A0:44:FE:44:57:10:11:93:83:FC:8B:D0:E5:2A:81:4C:2F:E2:11:4E
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       01962E99B1689B7710D9E51D16818D083EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: NeMDCxPm9pi4su5v0oIBNt/AVi6HTQeoYbGFY2+/ErI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b1:68:9b:77:10:d9:e5:1d:16:81:8d:08:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=a044fe445710119383fc8bd0e52a814c2fe2114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:e9:72:8b:a2:53:50:0f:d6:a5:1f:84:c8:
                    ab:97:06:d1:af:e0:ab:37:7f:af:db:59:f3:25:15:
                    6a:2c:c3:e7:80:37:48:f0:a4:c0:ea:95:eb:8d:cd:
                    56:9d:eb:fd:d6:6a:79:da:3f:4d:f7:67:d7:2e:31:
                    17:45:e7:cf:f2:2f:bb:28:24:70:94:e0:6b:42:32:
                    13:f5:41:ce:96:50:44:f6:30:9e:ae:59:d7:70:4e:
                    21:ad:27:ee:64:15:d2:6f:f3:1e:7b:b2:5b:5e:36:
                    61:de:d3:75:aa:0d:10:54:bd:3a:48:07:19:07:0a:
                    1b:53:0d:dd:52:2a:15:e6:40:76:d5:3b:a7:4d:87:
                    3a:1f:9c:e3:8a:1e:66:55:ff:89:32:08:2b:63:34:
                    5a:50:e4:b3:ea:44:26:1b:a5:58:e4:e9:cd:98:3b:
                    82:22:91:c2:1b:2f:24:37:86:3f:e8:0f:10:cf:e0:
                    b7:52:34:e8:3f:a0:66:aa:6a:6d:46:e4:52:99:57:
                    0c:17:8e:ff:d7:8e:e8:5e:56:76:3b:32:09:b0:87:
                    78:f6:a1:07:a4:dd:de:5f:65:c1:db:72:e9:85:3e:
                    e5:b0:98:10:8d:02:a9:9e:04:7e:89:c1:b1:57:8d:
                    32:5a:d8:0d:fd:1e:a6:ae:bf:62:92:a2:af:2b:d7:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:FE:44:57:10:11:93:83:FC:8B:D0:E5:2A:81:4C:2F:E2:11:4E
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:c7:82:c0:1d:6e:84:05:b5:bf:6e:39:3e:f6:f7:9f:ca:
         4f:ed:8e:96:ee:9f:fd:42:38:84:ff:b9:ae:fe:f1:a3:17:e3:
         e8:20:d1:67:07:40:4a:33:55:80:13:48:72:97:69:fa:74:50:
         d6:cd:66:6c:e7:39:98:46:a2:96:d4:37:47:04:3a:ba:95:24:
         24:2d:ce:4a:a8:01:a0:f5:e9:68:d6:21:3d:41:13:87:41:d9:
         52:fc:1b:1d:3c:6c:5a:84:95:cc:d7:cf:1a:d3:aa:86:62:e9:
         54:5b:d1:f2:0d:17:2f:ec:2e:32:20:ca:64:45:f6:5a:c8:7b:
         02:6c:b6:a8:d9:25:ec:4c:18:cf:cc:cb:e4:e9:ca:ea:f0:a8:
         05:d9:fa:55:a8:f6:c6:de:4f:18:48:55:7f:96:ab:e8:91:2b:
         9d:f4:c9:f2:d7:04:9e:5c:ec:f6:dd:6d:a0:e6:e8:87:d4:6b:
         1f:ea:ed:ac:ce:87:9b:1e:2d:ae:ce:5f:bf:43:0f:a2:eb:f0:
         b2:e2:4b:c1:54:2c:02:00:32:42:9e:56:75:bd:c2:97:ee:9a:
         92:54:2c:50:f8:85:05:56:21:9c:9f:84:d5:36:b7:c0:d1:f5:
         2b:bc:43:a3:ce:5e:d3:00:73:8d:5f:8a:57:98:e9:03:45:0e:
         a7:af:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----