Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.mft
File:                     EST0oQ141Lq7esUlnCG3Pv5XetA.mft (raw, json)
Hash identifier:          Ezn0i0CzLPTHhOD+AOGvPFZ6lGkNMtkgFSkQNGk/LQA=
Subject key identifier:   90:03:17:62:AD:AF:27:93:2B:F0:7C:64:8D:3A:F8:BA:7F:1F:B3:95
Authority key identifier: 11:24:F4:A1:0D:78:D4:BA:BB:7A:C5:25:9C:21:B7:3E:FE:57:7A:D0
Certificate issuer:       /CN=1124f4a10d78d4babb7ac5259c21b73efe577ad0
Certificate serial:       01962FAB63A55D79142AB81A853B881F353D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EST0oQ141Lq7esUlnCG3Pv5XetA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.mft
Manifest number:          01A9
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: EST0oQ141Lq7esUlnCG3Pv5XetA.crl (hash: +QWKbqLdVhqQKNhv9tH6rbVZ+MeaDYhLxeOfgnZDlwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:a5:5d:79:14:2a:b8:1a:85:3b:88:1f:35:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1124f4a10d78d4babb7ac5259c21b73efe577ad0
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=90031762adaf27932bf07c648d3af8ba7f1fb395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:1b:51:bf:9e:46:d0:6c:a5:7b:75:4e:de:
                    ad:57:0e:e9:e7:bc:a2:6f:7b:e8:e9:ea:85:16:d4:
                    c5:2e:49:76:49:2a:e3:cf:f3:aa:c9:f9:81:c9:a7:
                    13:0f:4d:39:43:cf:fd:33:21:3b:9f:ac:92:9e:38:
                    a4:32:d2:ce:c5:75:1e:47:ab:9d:35:00:3b:e5:c8:
                    c3:55:ae:45:2b:fc:95:dc:fd:3c:e3:87:4d:41:5a:
                    12:d1:2f:94:8a:36:95:cf:80:86:88:d2:4f:9b:64:
                    e7:46:2b:33:0d:0a:59:a0:f4:53:2f:b8:16:37:fb:
                    48:77:cb:5c:9a:51:3d:10:4e:3b:a3:78:37:6d:66:
                    8e:57:40:03:1a:40:47:c3:d6:08:c4:64:59:b8:54:
                    29:c0:ec:50:e0:8e:e1:93:6a:9a:08:f6:6a:6f:19:
                    08:de:a9:16:6d:fb:df:65:6d:f6:19:c7:e5:07:79:
                    94:6c:be:a8:ed:20:aa:4a:92:be:03:d6:e8:12:89:
                    4e:a4:89:5d:d8:96:50:08:fc:b0:7b:69:d9:53:57:
                    67:be:e8:56:f3:9e:a9:5d:00:bb:9c:24:6c:ce:9f:
                    94:0e:61:8c:79:05:47:90:4b:df:8d:07:61:02:9f:
                    68:1e:79:22:32:09:7a:77:e6:3e:eb:b7:e4:e1:44:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:03:17:62:AD:AF:27:93:2B:F0:7C:64:8D:3A:F8:BA:7F:1F:B3:95
            X509v3 Authority Key Identifier:
                keyid:11:24:F4:A1:0D:78:D4:BA:BB:7A:C5:25:9C:21:B7:3E:FE:57:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EST0oQ141Lq7esUlnCG3Pv5XetA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:69:fa:02:ba:ef:55:8a:0a:5d:2d:11:2c:1e:52:ac:5c:
         6d:1c:97:de:24:fc:9a:94:1b:0b:73:03:73:52:e9:be:1e:d9:
         cb:20:2d:9b:50:b2:f7:7a:b5:39:a2:ef:42:09:89:d6:79:1a:
         38:a3:f0:35:e3:73:d5:f4:70:b8:ce:32:42:d9:18:ba:ed:ff:
         d1:88:b2:f1:51:a4:16:34:d4:4f:04:8b:58:e8:7c:e1:c8:9e:
         12:7b:09:f5:15:c0:74:a9:95:91:51:58:3a:76:4e:f6:2b:f1:
         da:63:19:37:8e:6f:d7:63:59:37:f6:2d:58:72:15:3c:3d:d1:
         39:4b:72:73:b8:ff:87:42:a8:5e:2f:6c:f3:e7:e5:d2:47:2d:
         95:58:0f:73:ed:dd:1a:af:a9:d1:d3:4c:f2:cc:08:1a:9b:29:
         02:06:90:02:80:1a:44:3d:b8:76:ae:8d:33:ed:69:b9:e5:63:
         81:43:bd:1d:b4:09:07:9a:72:02:49:e6:ad:db:88:71:24:92:
         47:94:58:1d:96:2b:e0:94:3b:c1:51:02:d0:c4:aa:9f:ec:91:
         c5:ac:82:94:b5:65:02:59:05:65:9b:41:31:69:01:71:44:0c:
         73:38:df:24:b2:00:41:6f:00:bb:f9:99:9e:f0:2d:f1:ab:ca:
         df:6d:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----