Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File:                     4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier:          eYRuTLSEPObQK27ppltg+i3+5zGJ76tna/AE/i2i9vE=
Subject key identifier:   41:D4:28:1D:96:44:A8:F5:8F:E6:4D:E0:07:1F:7D:E7:53:58:A4:EF
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer:       /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial:       01962F07081AD700B6780CBF8BEE46AD81CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: qYEjEaHKp91OX0UQSb1t9SCY5IvXNgz42ZVlqoBHQRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:08:1a:d7:00:b6:78:0c:bf:8b:ee:46:ad:81:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=41d4281d9644a8f58fe64de0071f7de75358a4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:ec:89:7e:10:8f:66:1b:0f:74:c3:02:a1:
                    29:0c:4b:9b:07:7e:d4:7e:bf:53:5b:f8:95:73:27:
                    b7:b3:cf:7a:d3:82:9e:c2:43:25:5a:83:cb:2e:27:
                    7d:20:c0:9a:78:87:2a:9d:13:d5:da:b6:e4:d1:27:
                    e6:ca:c3:e2:1e:27:a5:2f:da:00:48:13:01:71:25:
                    07:07:0c:d1:87:56:5c:d6:d2:67:12:da:95:3f:8d:
                    7a:22:55:3e:8c:ee:89:c5:20:ec:07:48:5d:dd:ef:
                    4a:0c:68:fe:fd:51:70:6b:8f:b5:33:80:f5:ed:ce:
                    08:a0:75:d4:9e:d7:0c:7e:70:93:62:97:ae:3c:39:
                    d4:09:e2:67:bd:8e:0a:a5:b6:15:67:1f:2c:9b:3a:
                    39:1d:87:b1:4e:de:18:e2:49:27:19:2d:aa:d9:62:
                    3f:16:3f:1f:8c:94:62:85:d9:31:d1:c3:94:54:fd:
                    cf:06:a1:0e:22:50:b3:05:7b:18:c2:4c:b5:48:95:
                    a0:eb:77:07:6c:c0:f6:50:ae:77:45:f5:f9:f5:05:
                    f5:60:1e:07:a4:ec:a7:20:03:02:b5:e6:77:9a:d4:
                    72:f3:8a:fd:37:ab:38:b3:81:66:0f:eb:3d:00:78:
                    fd:f2:d4:a3:5b:48:29:12:c4:8d:b4:63:74:38:c3:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:28:1D:96:44:A8:F5:8F:E6:4D:E0:07:1F:7D:E7:53:58:A4:EF
            X509v3 Authority Key Identifier:
                keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:ce:b8:43:87:dc:a3:67:d0:71:30:02:30:22:70:b9:bd:
         49:3a:57:cc:6e:f5:84:8b:7f:ee:47:e6:9d:7e:0a:33:33:3b:
         e9:0c:d1:36:0e:0c:20:70:41:57:8f:7d:60:b4:5e:a5:b1:d0:
         9d:17:77:ee:72:6b:6c:37:78:a5:c0:f0:b1:d7:ff:50:3a:77:
         d2:60:5c:8c:69:45:c0:c1:00:3e:e2:78:9f:f6:73:28:56:cf:
         48:7c:aa:ed:b0:1c:b1:b4:c8:4e:2c:f5:09:2b:66:a9:0e:c9:
         32:34:65:08:f4:dd:27:67:32:4f:ce:69:c8:a3:d9:62:93:f7:
         8c:bf:49:cc:df:81:e5:29:b4:fc:6d:58:6f:88:8f:bd:8a:2c:
         10:48:b0:3b:62:08:84:0d:6e:31:65:57:c7:58:c0:4e:0e:0f:
         58:bc:7a:2a:8b:0d:4d:7f:e6:4a:eb:14:86:b1:93:5b:ee:a7:
         b0:8b:a6:02:8e:52:01:cc:82:88:7a:8c:44:2a:cf:0d:2e:1e:
         75:43:f5:12:f3:bf:55:cc:50:db:d5:c5:39:84:5f:01:a8:90:
         53:8e:e6:17:f2:ec:6a:9a:22:d3:b1:a5:88:35:65:c9:47:3c:
         41:5f:78:9a:fd:32:ca:66:a9:df:b6:fb:ad:d6:2c:cb:cd:d4:
         c4:21:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----