Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File:                     RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier:          oqxzM6YthlQvFYZIiLKxzRTSbgf03fJ94InYZvXDkqM=
Subject key identifier:   75:11:B3:EC:33:35:A8:F9:24:61:84:46:5B:74:D6:48:13:1B:42:59
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer:       /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial:       01962E98B0538F2357D919D45CBE926CE47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: gp8Lg7SWTP+aRCZ3Yw2V1aRzKBHjfaBRCDHRtv8cMlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b0:53:8f:23:57:d9:19:d4:5c:be:92:6c:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=7511b3ec3335a8f9246184465b74d648131b4259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:f8:cb:c9:ea:80:2b:fc:ab:af:cc:03:8c:
                    cf:5c:d0:4e:29:13:0f:77:bd:c3:74:41:62:ff:de:
                    7c:18:dd:3e:52:5a:f3:3d:0f:97:cc:4c:c8:f3:b6:
                    85:23:24:fb:35:60:1f:f8:b3:9f:d9:ea:39:bd:28:
                    d8:92:92:87:f6:7e:b8:9f:d0:ca:f5:d8:65:6c:59:
                    fd:04:83:40:ce:fe:9f:91:e7:87:c4:f2:8d:1d:0b:
                    4b:ac:ad:ba:9d:90:81:45:f9:a5:35:c8:36:76:d1:
                    42:6a:80:33:c1:b1:8d:9f:e4:d4:c7:c3:34:29:f0:
                    11:2d:34:f1:70:e6:40:0d:63:5e:71:71:02:1d:6f:
                    25:66:32:1c:82:b9:2f:f3:a0:ca:eb:90:1c:f5:83:
                    04:7b:f2:b7:99:2a:09:87:01:51:f2:84:c0:27:57:
                    28:2b:81:ac:7c:30:9f:9e:a9:ec:19:2f:d6:54:48:
                    bc:88:0e:5f:d1:79:b4:2e:01:60:8e:3a:0e:16:ac:
                    ef:22:2a:b8:de:45:1c:3b:27:96:87:08:c2:fe:9b:
                    e8:df:86:fe:ce:a9:f5:1c:f8:56:17:2d:82:e2:42:
                    3b:73:ad:ce:a1:91:4a:08:6f:af:ff:aa:30:e4:e8:
                    a9:4f:af:49:fb:32:2c:78:80:2f:72:6a:aa:b8:81:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:B3:EC:33:35:A8:F9:24:61:84:46:5B:74:D6:48:13:1B:42:59
            X509v3 Authority Key Identifier:
                keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:ff:ab:d3:16:65:6b:dd:da:03:6b:5d:6a:4a:df:33:3a:
         c1:4b:d8:48:d2:bc:26:57:5a:12:15:cf:39:03:ee:f0:b5:d2:
         6a:f6:33:e9:4c:ce:d3:bc:db:97:04:12:7a:ee:18:5d:7e:ce:
         d2:d4:5a:72:db:1b:4b:88:b8:00:07:75:93:93:f0:56:64:02:
         41:eb:b0:07:25:48:55:51:40:83:58:a6:c0:bb:df:4e:13:60:
         91:e6:5a:b5:3d:0f:36:12:a8:01:64:82:b5:26:00:74:d8:47:
         53:d4:c1:4d:d6:41:da:f3:d7:53:c9:07:3e:4b:b7:de:30:4e:
         93:fe:00:5a:4c:58:a7:ae:e9:80:93:4c:8a:f4:dc:fd:aa:94:
         e1:13:e5:dc:e1:22:3f:90:3b:24:ba:7e:85:39:82:7a:b5:da:
         8e:c4:90:5d:f2:58:74:8b:b1:96:b7:02:0e:1e:bd:2c:88:5f:
         6e:14:c5:c4:57:f1:ce:10:af:70:c8:3f:23:74:f1:b9:3c:a4:
         fc:53:ea:9c:0a:95:39:44:10:39:a7:d0:5a:12:83:6f:9a:32:
         d9:86:07:0d:43:c9:eb:d6:da:83:34:c4:61:f0:eb:64:62:08:
         07:cf:fe:53:75:50:e6:bd:ac:bb:d5:d2:ba:d5:bd:8f:17:75:
         3c:cc:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----