Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File:                     8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier:          GcY+UjhCBYJU41fkuQcPMgXpfx/0epRVGAY6gWbNARY=
Subject key identifier:   79:5F:FA:AE:00:2B:85:D9:84:D6:FB:E1:E7:47:37:AA:60:F2:8C:57
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer:       /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial:       01962F069F7CB4E19D5E75B0EEEB64E8A927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number:          11E3
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: sUdYLO28ccQ+7lfiAfM6C0u9PL5vM1Y0Tkj+aI3b2Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:7c:b4:e1:9d:5e:75:b0:ee:eb:64:e8:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=795ffaae002b85d984d6fbe1e74737aa60f28c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:30:6d:42:ab:d1:db:e4:35:fa:ec:0a:3c:
                    ba:03:f0:e4:b4:3c:f5:8c:1c:38:7b:b8:71:a6:04:
                    3c:f0:22:12:35:af:d2:b8:75:a9:45:92:84:4c:58:
                    47:d8:68:5b:64:1d:27:04:ad:c4:29:80:b6:05:2d:
                    3e:40:8a:57:b4:0d:81:48:1d:02:8c:11:c4:0f:62:
                    73:16:2c:60:26:2d:cd:a9:7f:d3:a7:ce:0a:5b:80:
                    4d:2d:45:3a:38:ab:c3:19:87:4e:8b:d2:6a:44:1e:
                    37:d3:3f:35:64:7d:b6:8e:60:3c:4d:17:65:10:f2:
                    9a:e7:c6:50:4a:58:bc:03:3f:02:6e:86:6d:21:39:
                    e3:1d:c1:66:cb:bc:4e:cb:a6:59:0a:1d:b9:56:52:
                    dd:4b:1d:43:81:f1:aa:f0:c4:48:1b:e4:17:7e:d1:
                    ba:60:38:d6:e0:53:b3:f1:67:d8:ff:b9:bd:b7:bb:
                    7b:f8:b3:9b:5d:74:b4:2b:dd:f3:0a:b3:a4:55:ea:
                    c3:27:42:ef:ef:09:cb:99:48:9b:dc:d3:2b:a5:d3:
                    e3:8f:6f:b1:55:48:e1:35:e6:74:56:77:44:aa:df:
                    05:43:28:30:88:a0:51:1e:14:9c:eb:6e:db:25:d7:
                    f6:38:cf:74:5f:ba:db:07:4f:51:8e:72:16:0a:79:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:FA:AE:00:2B:85:D9:84:D6:FB:E1:E7:47:37:AA:60:F2:8C:57
            X509v3 Authority Key Identifier:
                keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:81:a8:3f:ee:4a:74:02:74:2d:c3:a0:50:69:b2:dd:d6:31:
         36:88:91:4e:4c:ae:b3:df:e8:29:32:e5:dc:56:3f:b8:f1:53:
         46:3f:0d:d7:38:62:7c:33:8a:85:1c:09:d7:aa:80:a6:71:aa:
         6c:2a:c5:e0:64:6e:02:54:c7:10:80:52:2e:68:e1:78:19:55:
         0b:a3:d4:88:4b:de:fb:3e:d6:23:d3:4b:23:40:81:d8:c1:20:
         04:bc:f0:50:b1:21:40:6b:5c:c2:cc:31:03:a0:08:4e:70:c8:
         74:23:4b:1e:fa:3f:dc:c1:9a:76:89:45:42:77:e3:30:52:42:
         9d:43:0d:94:53:27:78:74:12:13:78:ac:d2:7b:fe:2d:f9:3a:
         7b:a9:0a:5a:04:86:45:15:e6:18:b7:7c:97:df:f0:be:b2:b3:
         5a:a4:de:6c:74:27:4c:37:c5:d9:64:29:be:3f:9c:dd:21:60:
         37:25:3f:d7:f0:9d:c5:7c:4c:ec:5a:f6:a9:92:fd:b4:4b:ee:
         ab:1d:82:5c:ba:8b:12:0f:df:02:f2:72:9d:6f:0e:5f:0f:17:
         e4:96:cd:52:39:3f:a5:61:6d:3c:ee:f4:81:c4:19:b8:40:a6:
         7f:4a:e9:47:93:29:4c:ce:cd:84:91:ef:65:9d:84:03:3c:84:
         37:60:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----