Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File:                     IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier:          Y1ZVgu/IN9aCLU1vzAfrUcxWA2c+0rmcip5zepzs4QM=
Subject key identifier:   44:F4:F0:73:84:E8:7C:4C:53:73:59:41:42:B5:B5:4D:2E:3E:18:4D
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer:       /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial:       01962FAB800796F628010697ACD9E35F5E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number:          053F
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: qcmah9n3eYLMGgbVfA1iKEJMDcItBxuMbSv8FRXvbXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:80:07:96:f6:28:01:06:97:ac:d9:e3:5f:5e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=44f4f07384e87c4c5373594142b5b54d2e3e184d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:b3:f2:dd:b7:e6:5f:99:c2:8c:76:44:12:
                    e9:2d:47:37:4e:52:de:f6:ee:d6:e7:79:14:66:3e:
                    b1:b4:d4:53:b4:f4:a5:19:61:09:55:4e:18:1e:b1:
                    34:61:37:e2:38:49:d2:3b:aa:16:55:b5:53:11:16:
                    41:7a:76:31:6a:de:b0:9d:f6:68:91:fa:3a:36:df:
                    4d:c8:19:9b:31:b1:fb:8a:46:88:d8:70:14:3e:02:
                    2c:02:42:58:ac:6e:39:b7:e3:d3:22:48:41:35:e0:
                    e6:11:fc:e1:41:df:a9:01:ee:e7:df:f3:53:54:59:
                    06:4d:57:e0:5b:50:5b:7b:3b:9e:78:12:11:df:9f:
                    ee:a6:b6:b1:f4:93:92:4f:68:72:ac:23:7e:9e:ac:
                    8c:d3:5f:2c:bc:91:78:51:9e:27:63:41:30:e1:0d:
                    85:0c:b6:86:27:e0:1f:c8:f1:83:41:ac:91:62:53:
                    28:e7:e2:39:22:f8:cf:70:53:79:96:0d:2b:1c:22:
                    22:d0:8e:f3:6d:b1:d9:c2:3f:2d:32:8f:f6:78:be:
                    40:5e:c5:1f:2e:12:ab:95:d3:fe:ee:8a:59:8f:0d:
                    2a:0d:57:0e:46:03:75:6b:c6:d6:20:ee:d7:e9:c7:
                    d3:32:e7:2d:b3:36:51:e7:d9:6b:fa:54:b5:a6:67:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:F0:73:84:E8:7C:4C:53:73:59:41:42:B5:B5:4D:2E:3E:18:4D
            X509v3 Authority Key Identifier:
                keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:0c:bf:36:1a:c5:3e:c0:25:22:60:c3:44:0d:d5:f1:16:
         11:e4:d2:fc:f4:a1:9c:5f:0c:c5:5c:b5:e8:bf:bd:5e:ae:cb:
         bc:4d:b7:61:ca:26:bb:5a:a2:74:f5:d8:18:05:d7:00:26:3c:
         47:03:5d:c3:0a:bf:c6:ca:cb:20:c1:96:5f:6c:c6:26:1e:03:
         f6:ea:00:2b:14:db:5d:26:c0:90:cc:2e:74:84:61:45:b7:dd:
         df:a8:58:f6:05:d1:23:bd:b9:b4:22:8a:bc:ce:7b:40:12:08:
         75:8c:8e:be:07:eb:a3:54:9b:c2:31:61:6c:ba:4d:ca:a1:e6:
         89:05:99:3d:5f:0e:fd:0e:ea:86:c3:59:3b:92:9b:21:af:06:
         a6:82:01:51:ac:37:0d:d1:56:7b:3c:a4:8b:ff:69:ef:ef:b5:
         e2:75:7b:71:32:8f:30:09:c7:4d:1e:44:2d:a7:b6:0e:4b:43:
         86:42:12:2f:d7:01:c2:be:ea:15:2c:99:38:70:cb:eb:9a:3d:
         2d:50:22:e5:62:7c:d2:94:91:2a:09:fc:f1:9b:fc:b5:19:fd:
         41:a5:41:da:a9:e5:18:80:b1:b9:97:bd:14:90:e8:66:69:a7:
         15:41:b6:42:d5:ff:be:03:9a:8c:26:ea:e6:42:f7:5b:bb:0d:
         da:35:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----