Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File:                     qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier:          TtXrXQaWDGiIlW7SYmBzsLnajCPfMcY82+9cQK+rkmc=
Subject key identifier:   02:C0:B5:11:90:FA:C0:4E:74:93:B8:CB:2F:6B:7E:4F:60:CC:15:BC
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer:       /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial:       01962F3D783D93E85D8E0942934430FEFC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number:          051D
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: bUM5YmjUP31dkbfu3dqg8JVy3gV1oiBuOWoN1T0JmyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:78:3d:93:e8:5d:8e:09:42:93:44:30:fe:fc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=02c0b51190fac04e7493b8cb2f6b7e4f60cc15bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4e:c4:0a:92:c8:7d:4f:bc:9c:5d:85:90:7f:
                    ad:07:fc:5b:85:12:a9:bb:69:ee:b8:ce:d8:51:65:
                    41:fd:56:a8:68:84:41:17:be:f1:e4:a5:3a:f1:f0:
                    e7:7f:ac:f2:68:fc:1a:5b:0f:75:6b:65:f8:c2:3a:
                    1b:1e:50:4a:39:1c:ee:03:1b:8b:af:7f:07:6c:fe:
                    f6:17:a2:20:3e:38:d8:3e:ce:2a:d4:9a:6a:24:fa:
                    a1:db:8d:4e:d1:35:d0:f6:b4:6d:22:48:70:e2:f7:
                    d8:f5:11:40:f1:85:3c:2e:4b:ea:17:24:d2:13:75:
                    98:54:59:3e:e5:ec:19:96:f7:9f:56:60:54:9c:0f:
                    0b:b2:22:db:f6:6b:a9:3d:11:da:60:88:d3:17:2a:
                    a6:86:f4:9c:81:12:9a:ed:eb:90:d8:fc:63:15:f5:
                    e7:8b:7e:fa:38:98:a3:94:62:38:c1:43:1d:62:ab:
                    45:84:2f:7c:9c:8c:a0:ab:c2:ff:06:d2:f1:af:6f:
                    58:09:91:c2:f4:4b:bd:18:2b:9c:78:15:2b:28:99:
                    a4:a4:40:a1:13:8f:cc:97:17:dd:5a:e5:fd:78:f6:
                    6c:78:c1:c6:1f:f3:6b:26:1d:71:fc:af:b3:90:3a:
                    d1:13:32:97:b5:a8:4b:38:49:d0:f5:1d:a5:b6:6e:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C0:B5:11:90:FA:C0:4E:74:93:B8:CB:2F:6B:7E:4F:60:CC:15:BC
            X509v3 Authority Key Identifier:
                keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:51:15:02:72:eb:7d:a2:ee:87:8b:cd:be:12:b4:ed:1e:49:
         81:45:49:4e:e2:9e:ad:03:34:e4:e4:a0:ef:e7:a2:27:58:87:
         62:a0:e3:d5:c9:17:dd:c7:66:3d:5f:ef:82:5c:5f:eb:90:e6:
         55:ad:ae:33:64:fa:1d:b2:6f:0c:73:08:f6:16:d4:ae:d8:6f:
         e9:22:12:57:78:64:c6:a0:df:c1:4c:c9:ff:4d:b6:fc:79:23:
         65:37:7e:71:6c:a2:ec:a0:34:15:eb:69:d6:f3:93:7d:07:58:
         bb:f4:10:e2:29:0e:08:d7:d6:1e:1e:e2:26:bc:18:76:de:76:
         11:ef:52:cb:ef:61:c8:47:94:0c:c0:17:92:97:bc:b1:a8:60:
         70:ce:eb:b3:47:df:98:a4:d9:80:75:5d:83:9d:44:1f:79:85:
         cb:a5:59:0d:43:4e:69:56:ab:31:5e:c8:c8:44:de:9b:92:4c:
         26:be:23:85:13:b0:e4:95:2d:54:e3:bf:2d:36:cc:20:5a:4c:
         3d:a6:e8:dd:10:40:22:96:d3:e6:37:bd:9d:21:6c:81:82:6d:
         f8:e6:bb:f6:7d:e5:2b:d3:d9:9d:dc:ad:19:cd:2d:29:d1:24:
         d0:dd:2b:5b:dd:2c:d1:bc:f2:11:44:4e:f3:c4:2a:d8:33:5a:
         70:ae:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----