Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          iItS2fZ70ZcXR4kJcDc8+YmV8VsY8ZF8gTlvxKMHXjY=
Subject key identifier:   07:C3:7D:94:48:DD:56:1E:FC:8B:6C:A3:90:C6:35:56:E8:B4:FF:91
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       01962F74D8915E43C7457FFEC26F24CF6F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: 7L92J8G7VtWmnEs5fJ9+yLlbwKC+HMEgeJtXxhjTKsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d8:91:5e:43:c7:45:7f:fe:c2:6f:24:cf:6f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=07c37d9448dd561efc8b6ca390c63556e8b4ff91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:07:92:d0:22:88:61:cd:af:81:01:12:be:
                    3f:aa:0d:07:88:fe:ab:f0:fc:d8:25:b8:c9:61:d9:
                    6d:86:d2:19:88:37:f0:bf:9c:b0:c1:1a:8c:2f:ee:
                    95:3c:f0:d6:23:e5:0f:1c:7b:6c:b5:df:cc:9c:01:
                    e5:0a:ff:2a:27:7c:e7:43:54:b1:e6:85:9d:a7:23:
                    d3:8c:b6:19:87:f1:99:cf:87:ff:a4:73:7d:74:d9:
                    e0:47:1e:a3:7b:d8:1a:13:03:82:22:25:0b:5d:61:
                    99:a5:c2:25:5d:90:25:83:8f:87:18:67:2a:88:be:
                    16:a5:8f:ab:27:cd:63:8f:71:1b:9f:15:06:b1:6b:
                    e1:7e:13:a7:55:55:b7:f5:4a:89:47:1e:73:78:0f:
                    6f:57:81:c9:2a:6d:e7:4c:4b:8a:c3:c1:bb:58:4e:
                    a6:f7:92:7d:d7:12:3a:57:c7:eb:3b:88:89:e5:02:
                    72:a8:fb:4b:6e:a6:39:23:63:74:1f:89:fb:15:c5:
                    08:9a:56:ac:b1:14:f0:a9:41:da:cc:f5:b7:09:3e:
                    a3:2c:2a:51:6f:c4:20:82:37:dd:cd:8d:59:e8:63:
                    ba:07:2e:38:7f:04:00:64:f2:d9:52:43:50:49:89:
                    ec:ad:34:5b:ba:f3:5b:52:68:ae:98:b9:c4:77:52:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:7D:94:48:DD:56:1E:FC:8B:6C:A3:90:C6:35:56:E8:B4:FF:91
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:55:ca:b2:b7:8b:af:dd:e7:36:06:a9:e2:56:7b:d6:20:
         59:2d:cd:7b:23:51:e2:15:ee:b2:ce:75:ff:ce:1d:5e:1f:2b:
         90:ae:7b:d7:43:a3:2e:58:c6:5d:0e:c3:e9:06:78:68:83:95:
         8c:29:ba:9f:96:d1:48:f1:ae:88:6d:35:0c:51:6d:42:8b:dc:
         64:4a:ee:c3:78:8f:60:2b:a8:d1:0e:c2:d8:aa:56:f8:e9:89:
         8d:84:af:f4:d0:5c:03:11:70:24:1d:ea:5e:81:b2:74:59:24:
         29:5e:c3:6c:15:71:2a:f1:22:41:a2:c4:97:45:a5:3d:ab:d5:
         7d:cc:ef:7e:3c:f2:51:e2:95:24:7e:bd:bd:3d:61:cc:ca:d8:
         8c:b4:e5:0b:12:9f:22:23:ff:6e:85:de:77:59:06:a8:6c:34:
         10:87:a4:ab:71:e2:4c:1b:76:83:85:ba:53:1d:47:25:09:90:
         aa:d1:c5:64:0e:5f:e4:70:b4:fc:56:bd:96:33:02:c8:bf:a1:
         bd:ca:97:0a:6a:89:45:ab:ae:60:d4:bd:ae:97:f2:22:ea:84:
         1d:3a:39:76:5d:a5:9e:40:fa:21:b1:4f:75:71:ef:07:89:28:
         4e:56:d3:c6:83:05:4d:ce:73:3b:6c:72:8e:08:c3:68:0d:5c:
         b1:4a:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----