Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File:                     XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier:          0+4s0+GCCrL6wPUJAbOFHAtPTelfXao6Wn9EXpSHT/k=
Subject key identifier:   B1:A0:49:2C:FB:43:C4:4A:8B:F3:DA:D9:6C:7C:A0:21:C1:05:A3:09
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer:       /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial:       01962F06B10C2FA691C40AEC74FCEFEF1393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: +s/UFqM1LEyjMGtmel6dCPsvXhblc5Jg/SsVmZRixFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:0c:2f:a6:91:c4:0a:ec:74:fc:ef:ef:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=b1a0492cfb43c44a8bf3dad96c7ca021c105a309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:02:5c:d3:da:cf:08:c1:38:c0:b6:49:f7:
                    43:7c:cf:f6:b2:a9:5b:6f:2a:ba:57:8b:aa:49:c6:
                    11:2e:bc:2b:42:c4:fb:78:10:45:4c:0a:71:5e:48:
                    39:ea:5a:04:e8:87:d4:bd:c1:38:39:88:a9:c5:b3:
                    04:d6:29:09:d2:e8:5e:b2:7e:83:0c:ca:80:db:c9:
                    2e:fd:75:fd:e3:92:99:87:99:ca:84:0d:18:a3:f7:
                    24:54:32:3c:51:94:f3:03:c3:1b:ba:f3:dc:d0:fa:
                    e6:57:9f:96:5a:41:ab:6f:03:e4:bc:cb:5a:ec:96:
                    4d:ad:df:86:cc:71:b7:97:08:08:d2:43:36:8e:9f:
                    19:05:a1:a2:73:eb:28:4c:f6:49:49:ea:55:6e:38:
                    4d:29:2a:76:c0:38:57:28:f2:60:b0:86:0d:0c:bb:
                    41:99:79:df:bf:8f:61:58:70:d2:0d:30:01:a7:e4:
                    24:3b:44:48:91:5b:70:76:98:f7:79:1b:58:38:f6:
                    78:91:58:21:f2:7f:c7:d0:51:4a:80:02:07:63:61:
                    aa:a5:45:84:f4:2f:dd:36:de:e6:6e:a1:68:30:e5:
                    46:8d:5a:6b:6e:96:df:11:11:3b:af:4c:24:1e:21:
                    9e:54:32:d4:64:70:2a:dd:fc:5f:40:ca:d3:35:21:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:49:2C:FB:43:C4:4A:8B:F3:DA:D9:6C:7C:A0:21:C1:05:A3:09
            X509v3 Authority Key Identifier:
                keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3e:02:e0:79:71:63:b4:41:5f:23:1b:dc:0e:63:0c:e0:3a:
         45:c8:e7:ea:47:05:9a:4d:e6:91:b0:aa:95:97:92:f5:28:f6:
         c8:47:7b:be:c1:1b:2b:b4:82:5b:3f:b4:37:7d:b6:b8:93:30:
         24:56:7e:b9:e6:8c:d7:7e:b2:de:f9:c7:de:7e:ab:c6:81:be:
         19:66:d2:1a:c6:bd:a2:b5:ce:99:da:23:43:fd:56:d9:84:16:
         d9:87:f1:27:e8:8e:24:1f:01:b9:0c:da:43:56:b1:5d:3d:ca:
         30:b5:e1:f7:c8:ad:3d:17:55:76:a0:75:a6:0d:61:03:6c:01:
         cb:49:9c:d8:84:ff:b0:86:31:fd:19:52:eb:5d:a5:51:2d:b7:
         91:20:9e:95:22:82:b1:52:42:78:9d:1c:52:be:cd:5e:84:78:
         ad:e5:6c:70:d0:0f:f9:58:0f:32:b1:92:b5:d9:cf:8d:77:10:
         19:78:df:f2:19:4e:fc:55:6a:f7:ad:49:c4:47:40:34:7c:6a:
         1d:0b:1f:25:db:33:b9:f7:8a:8f:69:fc:66:14:5d:cc:44:fd:
         0f:28:06:a0:f9:28:92:c1:fa:ea:b8:ec:c4:f3:f3:3f:ee:c8:
         a7:8c:e8:48:94:8a:42:40:5f:e0:f6:75:05:33:1c:a3:aa:2b:
         b1:84:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----