Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          4k+YhQxNmNr44A7Lz/Bf0YWE+jdOCYGkRTrI/QmNiuU=
Subject key identifier:   2A:A4:31:DD:92:3E:CA:88:8A:A5:22:81:CC:C2:EB:93:BF:DA:C2:0D
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       01962E98D4EA161D6F4CEA045A717F3905F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: t63bh5PPmy7OPmlNORgr7adDeFB1zgvkuceIpMkb2/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d4:ea:16:1d:6f:4c:ea:04:5a:71:7f:39:05:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=2aa431dd923eca888aa52281ccc2eb93bfdac20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:8a:f0:a8:e3:86:20:fe:f1:41:eb:d8:35:
                    e1:a6:0d:f3:0a:a8:3f:ba:0f:6b:1a:97:c7:80:93:
                    b4:67:59:90:b7:eb:a2:d1:01:31:d8:ea:a2:21:21:
                    9a:c3:c6:84:6d:44:44:ca:38:f6:03:85:90:b1:e6:
                    79:0c:8f:85:4b:7c:14:60:af:10:8c:bb:95:36:4b:
                    c9:9d:ed:c6:4f:a9:69:24:6e:c5:c6:75:f0:3b:d5:
                    d3:eb:a9:b5:46:b7:51:90:1d:91:6a:26:d8:80:ac:
                    b4:ff:61:d6:90:44:88:27:15:e6:b4:09:e0:65:76:
                    3e:9b:d7:6d:e6:aa:73:fb:56:3b:63:1a:1d:88:10:
                    51:b4:27:be:95:16:b7:f5:32:be:eb:dc:c3:42:f0:
                    84:11:3d:11:dc:2a:26:9e:56:0e:4a:0a:48:2a:62:
                    db:f7:a5:fc:6e:ff:c3:71:9f:c1:ff:ac:2a:ab:67:
                    5a:58:9a:b0:e6:77:2e:b3:bb:db:7b:87:1e:d4:87:
                    a1:c7:e4:9b:ec:d3:e4:0d:bb:a7:47:22:0f:8a:b9:
                    18:68:5d:f1:87:6c:bd:11:19:7f:ad:49:b9:a7:81:
                    db:ba:b9:3e:71:48:10:b5:41:d8:8b:23:ed:44:47:
                    3d:b3:5a:32:48:73:84:3d:73:0e:3b:94:e8:f6:5a:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A4:31:DD:92:3E:CA:88:8A:A5:22:81:CC:C2:EB:93:BF:DA:C2:0D
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:bf:fc:7c:f8:1f:4c:94:ae:8b:bf:b1:91:56:19:55:4e:
         e7:a3:1c:d9:cf:62:5a:01:48:ed:72:73:2c:37:22:43:97:24:
         a3:f5:07:c9:fc:7c:ce:83:88:89:ff:de:9e:37:71:c6:e5:cd:
         58:38:18:2f:35:21:7c:d3:b8:1a:91:c3:07:63:cb:9a:25:81:
         ab:27:d2:2f:e2:54:92:f8:69:74:c8:1c:d2:03:c9:44:01:9b:
         f8:37:9a:1e:ea:78:a8:59:ad:11:f0:16:ae:7d:56:d0:aa:e8:
         c6:33:b4:5c:11:99:f9:5d:71:28:d3:48:e4:25:37:bb:5b:f5:
         2c:d4:47:09:57:83:23:7a:56:53:95:cc:b2:f2:d4:80:e9:dc:
         ab:11:5a:a1:4d:9d:40:e4:95:85:0e:ed:8f:7c:45:95:24:4b:
         9b:4c:c5:36:9d:e4:d1:f0:f8:af:f1:69:4e:1c:e7:6a:82:85:
         e0:10:dc:5f:01:bd:06:06:da:e0:a7:00:45:43:36:64:13:25:
         3a:67:58:78:50:bb:f3:99:e6:09:f5:f3:7f:29:fa:b9:41:65:
         38:68:b3:71:c8:d5:f1:d9:d8:6a:0b:e1:d4:e2:77:a7:d5:95:
         ee:47:76:4d:2b:81:51:94:1d:8b:a4:f6:15:ae:81:de:98:91:
         7c:cf:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----