Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File:                     4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier:          pAauhan++S/E6EQcS04e2Jm9tjjDbBGXXyis4LgYY9o=
Subject key identifier:   32:45:49:70:A8:7F:13:A6:05:00:DB:39:70:FC:E1:CB:3C:BD:15:BB
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer:       /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial:       01962DF3AC24695CD1E30289DC4B3A863F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number:          0363
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: 5/fvd1GfUaFXqXxcyxrnv+lBBtJ8AM0K4IXOsiSGwtY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:24:69:5c:d1:e3:02:89:dc:4b:3a:86:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=32454970a87f13a60500db3970fce1cb3cbd15bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:41:fb:d9:44:88:e0:63:66:e1:e4:c5:21:
                    20:c1:87:10:3c:09:d3:b9:03:36:78:22:e5:de:ea:
                    7a:ab:1f:1c:85:ac:0d:96:0c:a5:fa:a7:88:8c:69:
                    00:0c:c4:62:ff:84:ed:77:f8:d6:f9:19:d8:22:11:
                    1f:c7:21:cf:22:aa:ea:ca:ca:21:07:e7:07:7e:11:
                    f3:3b:0b:4e:fa:76:a5:c1:05:5d:64:ac:ca:b1:e6:
                    1c:84:54:c8:c6:44:d0:0e:bd:33:56:1f:f4:3d:b1:
                    16:01:e0:64:49:8a:60:56:e6:b2:91:99:d0:e3:00:
                    c6:87:74:cc:52:9c:a0:7c:ea:3a:4b:6e:57:51:19:
                    51:a9:c6:0e:4c:0c:83:38:05:d1:12:55:ad:de:98:
                    a3:1f:2c:a5:09:3c:b7:7b:65:e9:ac:19:65:94:e9:
                    80:7c:f4:7a:c8:fd:dc:26:e8:6e:4c:ca:2d:87:c0:
                    18:02:d8:b5:34:7d:3f:42:74:21:fd:ce:5a:00:64:
                    cc:28:c9:c2:85:de:c6:fc:34:6c:d3:27:4c:b1:9b:
                    70:bf:6c:1d:e9:76:e5:55:85:7b:e6:2c:80:aa:3f:
                    7a:28:47:c8:fa:0d:c9:c1:b3:40:d2:cc:21:be:e9:
                    af:6f:0b:47:0e:74:49:aa:ce:84:e2:03:ee:ca:b2:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:49:70:A8:7F:13:A6:05:00:DB:39:70:FC:E1:CB:3C:BD:15:BB
            X509v3 Authority Key Identifier:
                keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:2f:ba:89:45:e3:e0:f5:dc:1b:62:f9:ab:37:9c:45:a8:
         b6:8a:85:b6:eb:30:22:c5:1d:c1:a3:89:a1:0d:fd:0c:8a:ba:
         b1:6b:79:27:22:4d:2b:3c:74:f3:65:3d:cc:5e:e5:26:c7:49:
         c7:28:f2:30:47:d4:d6:49:fc:c6:75:a8:0d:19:5c:d0:c8:b7:
         a6:93:fe:e7:37:4c:8b:55:4b:fb:f5:85:88:29:39:4a:41:b7:
         73:ce:08:f0:8d:ac:ea:33:76:f9:cf:58:49:61:0a:25:07:0d:
         f7:ef:fe:b2:38:bf:5d:d6:a3:cb:67:63:02:38:4c:8a:a9:00:
         4e:c5:c6:e7:c7:cf:d8:22:05:80:fe:be:bf:84:4e:d2:9b:28:
         1e:d8:5b:6a:2a:fa:f3:30:f4:59:91:2e:ba:bd:43:0a:f1:69:
         5e:5c:52:a5:bc:3a:b5:6c:ad:af:10:b9:12:7b:57:81:df:ad:
         e6:aa:dc:a8:d6:9b:76:87:c7:fb:75:a9:b5:5c:05:ad:04:26:
         9b:93:b9:39:c8:eb:12:cc:f3:13:52:a9:23:5a:c3:19:c3:90:
         ce:b3:0d:64:bb:c9:0b:ac:79:ed:bb:45:3b:a8:a0:0f:dd:98:
         3e:b1:fc:49:72:1f:a6:85:52:98:30:1f:a9:b3:ad:96:e3:5b:
         0b:09:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----