Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File:                     dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier:          hIQACKNdQf6ZBCmra2Nw5MqeFTaSSkhkzhS+HM7mZXc=
Subject key identifier:   35:99:8D:E8:AD:BE:31:79:8E:30:CF:7A:A6:08:1B:03:E4:28:D4:8D
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer:       /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial:       01962F0653F4435B63C97F9226AE2D9D6538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number:          0AEA
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: e8J+9jKM/hBGR09NW4feNYHhpdUR8WCTXHm4zCYlbaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:53:f4:43:5b:63:c9:7f:92:26:ae:2d:9d:65:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=35998de8adbe31798e30cf7aa6081b03e428d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:d6:55:a6:07:26:5c:6d:81:2d:24:9c:0a:
                    48:0c:04:f8:d4:b8:7f:33:26:77:e1:e8:9d:69:cd:
                    8f:f7:24:23:a2:2a:94:1b:bf:55:cc:3b:55:0c:e6:
                    d0:df:bb:b8:12:36:b3:d7:c0:fe:54:44:1c:56:83:
                    0f:f0:19:d9:89:e3:c5:f3:91:62:7f:f8:24:f8:45:
                    ad:54:ef:08:3f:9f:ab:fb:15:bf:13:6c:a1:ad:2e:
                    ab:a7:85:d0:7b:63:ce:45:01:80:e2:07:70:5c:7e:
                    a4:4c:3c:80:06:85:c7:b1:65:fd:4e:5c:02:ae:3d:
                    c8:d0:1a:ba:84:80:02:29:7a:e5:99:bb:da:41:ad:
                    f6:6c:d4:fd:d6:d6:a4:23:03:b5:15:c1:ab:0a:87:
                    ef:04:0d:c6:b5:fd:1d:39:dd:e6:57:75:74:a9:65:
                    4d:56:9d:22:a4:27:2f:67:6b:04:09:39:2a:80:0d:
                    b9:92:08:e5:7c:11:9b:44:b9:49:d1:1c:28:1f:52:
                    8a:ea:d0:6c:7d:19:8e:a4:dc:0b:0b:ef:3a:11:35:
                    3e:c2:49:5c:4a:a8:61:7e:a1:fe:47:9a:14:d3:03:
                    5a:dd:8e:f6:25:80:33:30:e0:02:f2:8c:ed:e1:04:
                    85:c0:37:56:6b:70:b6:11:2b:b5:55:3c:cb:a0:0a:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:8D:E8:AD:BE:31:79:8E:30:CF:7A:A6:08:1B:03:E4:28:D4:8D
            X509v3 Authority Key Identifier:
                keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:0d:38:fd:eb:b3:c9:f2:de:56:21:52:73:a2:a7:03:25:
         24:22:d3:49:69:44:96:66:47:ac:c9:2a:ae:bb:57:da:8b:a7:
         21:00:5c:83:04:87:71:57:b4:9f:1f:e5:ad:96:c2:42:86:08:
         9a:20:a8:2d:95:9c:3f:5b:36:e2:4a:8d:38:74:7c:88:bd:56:
         03:d0:e5:11:4e:8c:dd:32:36:f5:74:8c:bb:c3:3e:12:cf:e4:
         92:8b:55:45:f9:4b:ec:6c:27:c2:8a:fe:4b:ba:9a:1b:f8:14:
         0f:6e:b6:b0:94:24:68:9d:46:93:9a:b3:6a:0d:ec:86:d9:67:
         a9:18:5f:ec:7e:10:2e:1c:7d:0d:49:38:c0:7b:3b:04:61:32:
         e6:b1:e3:14:88:c0:12:c1:dd:62:70:a1:7a:60:72:09:f6:88:
         db:80:f7:27:b5:70:e7:74:06:74:fa:5d:0f:41:29:94:2c:f6:
         be:ec:ce:ca:e2:26:41:df:e6:72:da:ff:c0:93:9a:2b:19:2a:
         60:a9:6c:b8:8f:f1:f0:c5:5a:95:24:d7:58:b3:5f:fa:db:5c:
         7e:72:c5:31:af:ff:8d:48:4e:13:2b:ff:ed:66:61:4a:17:d4:
         87:6e:76:46:32:3b:b8:80:e7:ec:67:3e:2c:03:0c:67:70:87:
         a4:3a:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----