Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File:                     4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier:          xZNbwwicCSjnjqkVKGOQuSebMA8z/oDZE0pBMfF6SY0=
Subject key identifier:   E3:5A:2E:D8:C8:BC:D3:A0:98:D1:64:32:97:96:95:48:38:67:F6:D8
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer:       /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial:       01962DF44B70212A5B48026D97C0D5E7AF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number:          0E1B
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: MXEQx1szrNrCc/TO5jcYbarlLhTt+22DCB1l/cvqTX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:70:21:2a:5b:48:02:6d:97:c0:d5:e7:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=e35a2ed8c8bcd3a098d16432979695483867f6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:e9:d4:ce:c8:60:47:98:00:85:73:7c:06:
                    38:aa:2a:fb:2f:71:49:d7:c0:f6:89:8b:0a:dc:43:
                    8e:4e:3c:3f:13:28:e2:9c:3b:0c:d4:a8:b5:4f:82:
                    ea:69:fb:6e:40:d7:6a:ef:5f:27:71:ac:81:22:fe:
                    38:5a:15:b8:de:60:33:b9:e2:30:3d:1d:3e:7b:80:
                    45:a1:47:e8:4d:e8:6f:6e:2d:8c:10:af:75:91:7a:
                    94:1c:e9:88:fe:03:6f:0b:9a:95:f1:e3:9b:15:80:
                    61:25:08:cb:8d:c4:02:e5:a8:7c:95:be:d0:ec:30:
                    c7:a5:d8:f4:db:af:03:39:4e:41:d9:47:e6:c6:bb:
                    7e:b6:ae:8b:bf:b4:10:cf:2d:e6:8d:d7:c5:7f:a3:
                    de:b2:2f:ec:76:d2:d9:3d:34:92:7e:d0:14:f0:6a:
                    a7:00:04:38:75:7f:a7:eb:d2:01:64:6b:2a:f4:46:
                    45:1f:80:2d:33:38:a9:b9:83:9f:b7:05:6b:fa:69:
                    01:4f:aa:34:72:35:ad:a1:ad:3e:72:2d:59:67:22:
                    7e:4e:46:60:a1:91:45:c0:87:e8:e0:70:f6:b7:9f:
                    9f:26:a5:b3:d9:8f:ee:8b:82:4e:90:81:70:1d:41:
                    db:6e:20:51:d0:61:77:6c:3c:d5:2e:06:56:09:72:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:2E:D8:C8:BC:D3:A0:98:D1:64:32:97:96:95:48:38:67:F6:D8
            X509v3 Authority Key Identifier:
                keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:44:7b:8d:ee:98:f0:62:55:dc:af:a9:b8:db:85:68:c0:6f:
         9a:ac:2a:b0:a1:c9:45:e2:a9:b7:5b:08:d3:7d:f5:2d:6b:c8:
         a8:60:fd:b9:82:b3:f1:e4:f5:a9:68:d2:a1:56:be:e0:0e:d2:
         54:57:b7:28:f6:47:6b:d3:28:c7:78:b2:9b:1a:dc:fa:7a:d6:
         34:6d:7b:6a:3d:fc:16:9d:e8:d9:10:7f:88:28:57:8e:2b:52:
         95:92:3a:c1:b1:8b:49:9f:07:d9:db:82:1c:6c:80:31:87:e3:
         6a:4e:63:10:d0:5d:c5:ad:e8:73:cb:41:b4:22:2b:a4:bd:99:
         b3:99:26:bb:cc:df:2d:b0:f6:b1:f7:7a:87:37:e6:60:51:1e:
         c3:0b:d3:df:0b:13:ec:1e:61:c3:43:ef:53:25:1b:0a:06:f7:
         9b:3d:d9:1d:69:e7:a2:50:15:d0:5f:98:1d:2b:16:b3:1c:c3:
         b7:51:5d:31:ff:c9:8b:60:d8:a5:0d:95:65:fc:35:08:e1:11:
         63:cd:49:54:8c:bd:14:43:5f:08:8b:e8:53:a6:44:c6:eb:18:
         c3:b0:e1:7f:f5:9a:48:74:f8:ae:3a:53:40:75:08:bd:4c:61:
         54:e8:c6:15:9a:38:44:29:4c:16:60:31:12:72:c7:7d:b6:24:
         ba:d2:c6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----