Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File:                     RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier:          Mytz/wQ/ckLHfRVXRWcRRmQ6fQjWQ6A0YXqAnK07hnc=
Subject key identifier:   35:27:3A:47:AF:F6:AF:BD:77:84:B3:75:80:39:A3:BE:B3:C2:CC:2A
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer:       /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial:       01962E9880BEE14333410CE0E01774D0CA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: DT8uFCsDzcClU3V1J4fU2DaH3m0YUfOK8mO6+m09HF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:be:e1:43:33:41:0c:e0:e0:17:74:d0:ca:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=35273a47aff6afbd7784b3758039a3beb3c2cc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:2d:69:bd:4f:a0:77:1d:7a:4a:d3:03:59:
                    9e:a7:67:35:3c:65:3f:b0:c5:46:28:77:03:63:a3:
                    29:63:e0:5a:12:57:e0:d7:e2:b0:6c:d6:df:de:11:
                    87:f5:f0:ab:be:ef:8b:89:c0:5c:2c:51:e0:ff:42:
                    85:b7:40:3f:15:73:3e:63:1a:b4:e2:ad:74:fd:52:
                    53:be:1b:05:36:90:74:01:63:fb:63:ea:fb:97:ac:
                    e2:48:3c:db:b1:36:11:26:b7:03:e3:9e:08:f8:3d:
                    fd:f3:73:38:ca:ca:cb:49:44:72:3f:f6:8e:37:f8:
                    bd:44:92:b1:c5:05:49:3b:98:51:6a:33:8c:4d:aa:
                    9d:0c:d6:47:3e:ee:e3:d9:42:4c:dc:b3:80:73:8f:
                    ab:19:85:00:62:d2:c9:3f:3a:27:d4:e0:9c:ea:8e:
                    09:4b:c9:7d:76:0a:f8:01:c4:2c:c4:7a:1b:bf:94:
                    02:43:4a:fe:78:88:e7:99:f4:5b:7b:43:f2:5a:5f:
                    a5:3a:4b:ae:89:d7:99:aa:24:f6:07:78:6a:02:05:
                    36:69:06:2f:89:13:9e:62:47:b5:7f:45:bc:2d:ff:
                    4b:5f:fb:8e:96:0a:29:86:2d:0e:ce:7d:39:ac:46:
                    a3:2c:69:bc:6d:3c:78:6b:dc:ea:eb:47:43:6e:8a:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:3A:47:AF:F6:AF:BD:77:84:B3:75:80:39:A3:BE:B3:C2:CC:2A
            X509v3 Authority Key Identifier:
                keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:09:f3:dd:0e:c1:01:4b:58:05:49:34:3a:cd:8c:7a:07:
         0e:e8:e6:93:30:88:0d:5c:2c:0b:56:e9:8d:2b:a6:0f:06:9d:
         57:dd:f8:db:da:3a:92:e7:ac:fc:f9:11:3c:1a:e6:9b:75:9e:
         49:6e:b5:72:c2:8d:f2:e5:a6:79:2a:50:10:19:87:b4:f8:2d:
         96:81:2f:f7:fc:26:fd:ac:17:49:4c:ab:18:60:7c:58:f8:9d:
         e2:d5:e7:9d:72:c8:9a:b4:94:31:96:56:eb:68:e3:3e:95:f3:
         30:e5:d4:b5:83:de:b2:c2:72:e9:1a:75:1f:58:8d:61:5d:d5:
         83:73:e4:70:02:34:ad:a9:2c:5b:e2:46:38:98:e3:65:55:9f:
         e8:c1:e4:f8:4c:18:a7:25:fa:5a:b6:43:69:0b:03:72:27:dd:
         a7:3a:3f:92:64:f9:0f:ce:05:9e:59:b4:30:19:50:74:bc:37:
         11:06:d5:1c:c6:7a:9e:85:ed:af:a8:61:49:c5:06:8c:3b:45:
         0b:0b:1c:7e:9d:0e:9e:4e:21:80:0d:7b:85:76:f3:81:b6:61:
         fe:9b:3f:d6:30:ab:0e:db:38:ad:94:3b:0b:ae:cb:87:72:fa:
         7e:30:dc:37:81:b4:9f:62:9f:e1:f1:7e:9d:e8:75:24:60:89:
         3a:31:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----