Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File:                     cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier:          MT4kqxTidzIY6Jchr5AL3+TnmZaEreAz8PuLpslIK1k=
Subject key identifier:   7F:0E:6B:4B:B5:4D:41:39:3F:EB:D7:5E:CF:40:F8:BA:45:89:BE:CB
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer:       /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial:       01962E98B4789A2436BF5636C85A65E60A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number:          0E1B
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: 555gTZEj/CUER448vNj4s3LnYBEeYanJmP9W40JhfZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b4:78:9a:24:36:bf:56:36:c8:5a:65:e6:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=7f0e6b4bb54d41393febd75ecf40f8ba4589becb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:a8:f0:7b:0d:09:60:95:fe:e4:b7:63:0c:
                    46:b0:b5:e4:bf:21:13:f8:12:7b:63:02:99:a5:8d:
                    04:90:2d:a9:61:d1:f9:6d:61:73:ec:85:4b:98:75:
                    03:28:3f:6c:b6:62:ac:3e:0b:80:a4:49:33:6d:d1:
                    62:66:a1:28:e9:8e:a9:f5:53:bd:a7:f3:cf:a6:77:
                    d9:5c:77:f5:13:d5:d8:7f:3b:a9:42:74:78:1a:ab:
                    49:75:db:a0:32:cf:34:4e:d7:a3:de:eb:0f:89:39:
                    69:a5:65:2d:b5:6c:dc:7f:fc:76:25:82:9e:0d:af:
                    78:6e:5f:98:3b:6a:6e:29:86:ae:8d:80:66:f4:8a:
                    66:e4:69:c2:d6:a3:70:df:2c:a1:9b:d8:9a:ab:84:
                    8d:e6:a2:69:e4:52:9a:60:74:11:f6:ed:3b:0a:34:
                    b5:a0:4a:d5:5e:b4:89:61:2f:c8:2e:81:ba:58:86:
                    cd:a5:33:36:34:f4:66:87:49:12:cc:d0:48:16:31:
                    78:3c:57:04:a8:cb:71:0b:59:e5:70:5d:b0:ca:62:
                    70:ca:2c:2f:13:d0:93:0f:2d:0b:b0:8e:01:76:c2:
                    0c:23:a7:e4:49:65:3c:c2:f1:5d:c1:4f:58:06:29:
                    8f:20:1d:d9:83:10:b4:14:9a:f4:ae:e4:15:71:58:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:6B:4B:B5:4D:41:39:3F:EB:D7:5E:CF:40:F8:BA:45:89:BE:CB
            X509v3 Authority Key Identifier:
                keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:14:3f:91:4c:d9:6e:20:76:03:ea:33:3f:ae:63:4e:6d:07:
         ac:1c:d5:74:41:13:d7:61:36:00:56:5f:a5:bf:96:e2:14:1c:
         04:d6:6d:0e:81:a6:d9:0c:ee:f8:b0:0c:b7:8c:35:99:bb:5c:
         73:3a:a2:41:10:c5:ca:6f:9f:5f:42:0c:9a:7d:47:45:de:19:
         3d:00:d5:c7:67:ec:74:83:4d:a4:8c:8c:f0:97:7a:df:60:9e:
         fb:7d:73:a4:99:60:df:7b:5c:95:58:a8:df:60:c5:51:70:da:
         56:0d:54:cb:7d:61:35:0a:8c:50:b7:f6:a1:13:46:cb:64:f7:
         fe:51:45:7d:1d:99:a4:e8:54:1b:ff:6f:37:cd:c5:b9:2f:5f:
         df:d5:41:9e:45:49:d0:df:59:b1:18:49:70:4a:c1:23:d2:fe:
         09:9d:78:0b:71:8b:d6:8e:be:8e:c3:ec:a0:c2:be:74:37:a7:
         7e:74:52:90:72:2e:2e:fe:28:d6:d6:35:83:3b:71:a4:f1:fb:
         b3:00:59:e0:8f:91:1d:9f:1b:19:81:3c:6b:f3:9e:57:58:1b:
         54:a3:68:ef:36:7b:c1:29:8b:fd:dd:45:0b:1d:e7:5d:22:82:
         3c:dc:5d:15:fc:23:e0:80:bd:fd:75:92:50:c4:60:ef:fb:de:
         36:88:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----