Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File:                     xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier:          Rg9LxydDuu9rEMV/ZAUgsQkiQJS0UhqiBxvLk0XUTqI=
Subject key identifier:   B7:DB:D4:03:AB:E5:D6:9F:F6:5E:AA:DD:95:D3:70:6F:C7:35:8A:82
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer:       /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial:       01962E96968A5EFD7341E3AA2D204ABD7BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number:          01
Signing time:             Sun 13 Apr 2025 09:59:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:59:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:59:02 +0000
Files and hashes:         1: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: OSI18KeXfu4HvKDrZNpz3lsN43W2H7MxXBQe142i1PQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:96:96:8a:5e:fd:73:41:e3:aa:2d:20:4a:bd:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
        Validity
            Not Before: Apr 13 09:59:02 2025 GMT
            Not After : Apr 14 09:59:02 2025 GMT
        Subject: CN=b7dbd403abe5d69ff65eaadd95d3706fc7358a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:09:0a:f5:21:f6:78:9f:bc:0a:5b:0a:73:
                    dd:d1:a9:8a:a3:ca:da:31:62:07:64:67:ff:9d:c1:
                    1e:ab:01:4e:24:cd:12:e1:35:40:f1:ee:39:d4:3f:
                    dc:76:13:ef:c3:7e:83:73:f1:d2:87:9e:ef:f5:08:
                    4f:06:c9:56:e3:1f:ba:6a:2b:99:76:80:d1:fa:73:
                    4d:01:8e:f5:e9:cd:48:14:fe:6d:3e:e8:46:f5:b2:
                    82:cd:e2:c4:7c:31:94:21:fd:a6:75:9e:e8:34:25:
                    11:2a:52:4e:4a:da:b5:9e:90:2b:7b:ab:d3:5e:67:
                    f6:73:13:23:18:4a:e9:b3:26:e5:10:f6:7b:0a:3e:
                    ad:3a:49:77:be:b7:37:bb:7d:20:70:c6:28:d2:63:
                    fe:76:17:c5:e1:b6:ac:81:58:10:44:5c:44:1d:d7:
                    1a:18:fa:23:03:71:cd:23:9a:8d:8a:79:46:27:7a:
                    6c:e2:59:52:e0:bb:21:1f:83:37:e5:2b:9f:45:4b:
                    37:33:c9:d5:54:de:66:50:74:91:f5:ca:d5:ff:b0:
                    54:55:e3:cc:e5:30:53:5a:42:21:aa:08:20:fe:a7:
                    5a:17:bd:4a:ef:43:e1:e0:bc:d2:5b:9c:c3:64:cb:
                    99:50:21:83:7b:eb:f9:e0:73:23:60:9a:d2:74:5f:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:D4:03:AB:E5:D6:9F:F6:5E:AA:DD:95:D3:70:6F:C7:35:8A:82
            X509v3 Authority Key Identifier:
                keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:55:b6:08:bf:f9:67:9a:24:a2:0e:80:d0:77:32:e7:b3:
         a5:05:92:cf:56:24:7a:65:1f:bb:37:ce:01:d7:72:0f:c7:25:
         33:c6:4b:ab:54:e0:e3:9d:96:98:01:bc:eb:7a:e5:5c:f9:29:
         77:17:15:5f:82:3e:15:54:0d:d7:72:ef:b9:99:78:ed:d9:24:
         41:15:7d:01:ea:50:e0:e9:65:a9:6c:de:82:6b:7d:d1:87:4a:
         2b:29:a9:5c:da:9c:48:c3:4a:69:60:81:26:22:25:c4:f6:53:
         3b:c0:27:e6:42:ae:e2:d1:0a:13:98:21:cb:2a:d5:79:53:af:
         5d:8b:e0:13:f2:a5:8b:25:75:90:76:e6:e0:ab:f6:05:57:61:
         5b:54:05:e1:39:6b:a7:45:60:c8:1e:6c:24:66:7e:01:f4:23:
         8a:cf:9c:91:33:04:ad:7f:16:08:95:06:ba:d1:74:43:3f:af:
         d8:54:b9:b6:ee:2b:46:40:88:9a:cc:9c:e3:4a:ad:c5:17:ad:
         4e:a1:d8:27:ff:e3:93:c2:d4:41:bf:dc:1b:04:86:e0:88:3e:
         6f:ea:90:68:ce:48:8b:19:2e:a6:e8:58:ee:9b:72:2b:90:45:
         f8:82:8e:20:9d:4d:de:80:e3:63:45:1f:2c:aa:69:92:33:f4:
         e4:5c:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----