Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File:                     me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier:          tAXkSKIBXCrFQGc9uSIYs4+SKXPDJEBHk/RtcvAgjhc=
Subject key identifier:   A7:67:5E:2D:DD:2B:C1:8F:AE:E5:55:37:DF:76:3A:44:82:B0:11:F1
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer:       /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial:       01962DF3F83C27002577CB179CE3771CCDD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: DM0qtxgrPTN9v1Ynbqq6RWSZdQxWBlsvppSux7WAru4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f8:3c:27:00:25:77:cb:17:9c:e3:77:1c:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=a7675e2ddd2bc18faee55537df763a4482b011f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:61:b1:f0:6f:db:f4:62:af:c0:65:1e:61:
                    08:09:b2:cc:b8:37:cb:86:ee:9d:16:28:2f:fd:ea:
                    ea:ee:ab:0b:b8:77:fd:44:3a:8e:9f:b3:f0:4c:28:
                    ee:d7:fd:6c:fa:0a:62:a0:47:30:c1:5d:1b:9e:ad:
                    40:cd:01:83:52:6c:4c:33:b0:e8:da:52:1d:ab:82:
                    e4:b3:4e:e9:88:a4:b6:9b:64:57:d5:df:1a:aa:72:
                    df:7d:97:f3:5b:33:43:5a:76:8a:0e:ff:26:8d:f4:
                    88:d3:55:46:01:f1:24:fe:33:98:10:b7:0d:54:6f:
                    15:6a:48:18:35:1c:d1:6a:e7:71:84:56:da:94:60:
                    d5:35:97:b3:df:68:ce:37:33:38:1a:a5:e6:92:7b:
                    75:11:84:95:8c:00:2b:24:cf:54:70:5c:2b:fc:94:
                    8a:55:a7:f8:33:2e:b2:19:24:eb:bc:90:87:d6:5a:
                    7c:53:14:be:ef:21:0c:eb:11:29:ff:d2:b0:b5:ad:
                    7d:f2:c7:95:5a:73:bf:79:40:aa:1d:95:df:15:33:
                    aa:88:13:f5:5c:f8:92:e6:41:7e:0a:70:5c:5f:59:
                    27:d5:b7:fa:c2:e4:5e:99:56:66:4b:8b:62:a2:e3:
                    28:5d:01:4d:08:81:d1:62:2e:03:e0:7a:32:27:a1:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:67:5E:2D:DD:2B:C1:8F:AE:E5:55:37:DF:76:3A:44:82:B0:11:F1
            X509v3 Authority Key Identifier:
                keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:98:d2:bd:c6:45:c7:89:92:ab:c6:91:9c:e0:eb:52:9b:
         46:4c:c9:35:74:2a:0f:b0:4d:ef:80:83:4a:00:04:6d:c9:c5:
         64:f1:2a:cd:18:85:ba:d4:91:af:9f:7a:f0:64:86:45:99:7e:
         7e:6e:aa:c1:76:61:a6:c2:fd:59:ad:bb:17:93:ee:47:10:01:
         21:a6:60:4b:16:db:bf:16:14:e8:3c:e9:0c:ae:88:c4:d4:c7:
         4b:6c:45:77:ca:ed:57:2e:13:0d:4c:2c:8c:61:30:9b:30:ee:
         6c:f3:f5:44:8d:1b:b9:9d:ce:be:1a:f8:78:5c:ee:cb:67:f7:
         c8:06:8d:86:65:8d:d0:47:00:e0:e2:b0:e6:64:a3:06:ef:da:
         b2:5a:e3:1c:e4:c2:ca:9b:f6:12:b7:6c:94:4c:20:5f:d7:b9:
         8b:df:2d:d8:0f:16:60:9a:2b:63:34:34:54:76:ab:cd:b6:bd:
         da:23:68:f3:1e:fb:5f:e8:de:05:d8:e2:ff:3f:0d:f7:b1:9c:
         4b:e7:cd:3a:e2:4c:8e:51:64:49:c5:f0:d1:32:2f:f6:e3:03:
         fb:7e:fd:3b:e9:27:63:49:f0:d7:6f:4f:88:d3:9d:ea:d9:b4:
         95:0f:d9:2f:33:e6:98:ae:1a:47:aa:42:f0:c6:4e:28:34:d1:
         f6:bd:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----