Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File:                     p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier:          SbRsISDceE/gd8M3FWzwVD7EjFFBrqPOLk9vBrYtBSA=
Subject key identifier:   6C:22:95:F8:D3:E2:FF:76:1A:F3:67:5D:D0:82:96:4B:7B:9F:ED:2F
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer:       /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial:       01962F0692C185BF787B8F2EF16EC8B5D451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number:          02E7
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: vXrG5FQ6DsoDoZuI6i8ckN4LslSkza8/6QcAnJnkfo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:c1:85:bf:78:7b:8f:2e:f1:6e:c8:b5:d4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=6c2295f8d3e2ff761af3675dd082964b7b9fed2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:f7:b8:bc:b0:cd:9f:79:f7:3c:10:ef:8e:
                    b3:39:41:b9:65:8c:f8:30:5c:8a:0d:9e:aa:da:5f:
                    e3:03:ae:82:2b:15:bc:22:04:a3:e4:da:9f:bf:5c:
                    ec:58:f7:55:b4:55:c1:fa:15:c9:7d:5b:08:56:d3:
                    04:34:fe:0e:22:fd:73:29:e3:5b:7e:c0:c9:d5:6e:
                    32:69:8d:97:05:e1:24:a4:4e:8a:df:73:a9:91:05:
                    91:53:14:ec:fe:60:f0:9c:2e:2b:8c:71:6e:95:4d:
                    94:a1:59:2e:df:98:29:27:db:11:5d:a8:24:79:9e:
                    d0:a4:ce:07:81:2e:cf:62:a9:ed:04:2f:25:52:c8:
                    9f:0b:16:43:8b:3c:a4:88:ea:63:e6:8b:bf:6e:5b:
                    13:c9:13:02:03:98:81:6e:f6:a9:f5:59:26:5c:4c:
                    b1:f5:2a:0d:67:f2:d7:89:b5:1c:93:78:8c:0a:c9:
                    32:30:d5:31:c4:b6:25:6a:d6:00:3e:b5:61:39:bd:
                    df:2a:c9:6d:d9:92:e5:d8:65:60:e7:55:a4:69:10:
                    e8:82:bc:27:e4:62:73:e9:58:b9:5b:d4:6f:6f:23:
                    85:87:18:c6:47:1e:e8:ec:45:9f:2b:72:2e:ba:cb:
                    35:80:72:60:df:3a:c7:54:43:0a:9f:bc:d3:2a:ec:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:95:F8:D3:E2:FF:76:1A:F3:67:5D:D0:82:96:4B:7B:9F:ED:2F
            X509v3 Authority Key Identifier:
                keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:a6:5b:15:7a:c2:11:0b:9b:23:e1:a0:65:df:56:d8:da:
         aa:64:08:1e:43:09:32:dd:60:2f:d6:68:da:89:bc:a7:79:57:
         ad:a5:76:e4:e8:0c:fe:82:dc:ee:58:cf:04:30:bf:e3:a1:1e:
         c6:3b:24:68:e5:aa:33:f9:62:99:f7:51:c7:10:73:7b:99:cc:
         fa:4e:22:6d:ae:5a:13:c3:15:79:9d:e7:77:50:d7:cd:c1:ee:
         f3:ea:e9:7f:08:57:a1:64:00:c6:b3:69:a9:a3:6b:28:44:a4:
         91:06:a4:3d:ab:e1:0f:8a:33:04:bc:1f:d7:91:9c:03:05:39:
         d5:20:3c:67:1b:cb:40:c4:f2:8f:e0:8a:d4:1f:c5:bb:bc:54:
         86:56:61:10:84:71:b9:64:95:5a:c9:11:a9:30:bc:a4:78:8f:
         fa:3b:be:d1:77:73:17:59:97:91:85:5b:e5:04:10:fe:77:fa:
         41:b0:71:06:99:3d:da:68:7a:b4:98:79:11:59:c0:a9:a3:c2:
         23:47:87:c4:51:03:3e:18:f7:ad:c7:dc:75:04:53:ea:33:ca:
         b4:43:ee:6e:a8:5a:fa:88:4a:e9:7b:7b:5c:8e:60:8c:67:02:
         c7:9d:9e:0d:5f:21:cd:ec:ef:ea:cd:75:ca:e9:84:70:fc:a3:
         ef:fc:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----