Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File:                     sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier:          Hv1iG0uyAG9ZNIuc4NJusxtjNWen3uBPhZ3kX/1c1Sk=
Subject key identifier:   83:7F:41:A9:78:BB:D4:B1:8E:4D:DE:C0:22:CC:AE:AF:43:12:2E:BE
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer:       /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial:       01962E2B39F780990D6934E6F01663AAC582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number:          019E
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: oamg9kPQQXrSIRlRnQt9O8Jc2OPuBVfdaVwK4gDXDQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:f7:80:99:0d:69:34:e6:f0:16:63:aa:c5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=837f41a978bbd4b18e4ddec022ccaeaf43122ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:58:d6:22:84:97:4e:6b:83:55:78:ba:9c:
                    44:20:dc:17:b2:d1:6d:ba:5b:84:42:b4:bc:ca:c5:
                    91:01:7e:27:7b:46:1d:63:ed:b9:bd:d9:cb:4b:48:
                    e1:77:c1:f5:86:f8:62:70:8f:e7:1a:a6:cf:1f:04:
                    e3:1e:17:f9:9e:ef:65:7d:55:b2:4b:56:17:98:dc:
                    96:8c:7c:20:58:f0:5a:10:32:1a:b8:43:f4:7e:6b:
                    69:62:fd:d9:18:ed:21:5d:6c:2c:36:34:9a:6b:c9:
                    33:44:a6:78:e8:cb:d4:9c:2b:6d:52:fd:a5:16:e9:
                    f3:e3:7f:d1:6b:61:d1:e6:20:dd:d7:c7:9b:59:7c:
                    78:a0:7d:4e:49:d0:fc:97:77:57:73:14:9e:af:1a:
                    90:fd:ae:5c:0e:32:48:ae:e1:1b:f6:73:96:23:d0:
                    73:c8:12:8e:dc:8d:2b:e6:fe:01:08:12:4b:92:c9:
                    a9:22:62:36:8c:6d:e5:9a:8a:f8:25:e3:6c:2e:30:
                    35:0b:3a:61:58:89:a2:a3:d1:40:92:4e:39:0e:14:
                    70:f1:f7:44:2e:56:64:10:96:31:d8:b6:9c:d6:bd:
                    ed:e9:e0:a1:1e:7c:d3:37:7b:90:83:f8:b9:47:df:
                    78:82:4a:e7:22:55:58:41:06:ff:ff:7f:95:17:75:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:41:A9:78:BB:D4:B1:8E:4D:DE:C0:22:CC:AE:AF:43:12:2E:BE
            X509v3 Authority Key Identifier:
                keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:e1:df:2e:a3:d8:f6:1c:13:50:d6:1e:db:1b:fd:07:91:
         e2:59:bf:a6:0c:29:d3:8b:e0:a0:73:04:dd:28:db:5a:b1:55:
         e6:11:64:89:3e:27:f3:26:c4:f6:4f:67:af:1c:13:b8:9b:8d:
         6a:9c:ba:5d:f8:e2:24:5f:22:f5:bb:f8:1a:7e:09:1e:ea:cc:
         97:c3:33:b0:f7:2c:0e:ff:5c:6d:dc:b2:cd:1e:cb:a4:59:d5:
         f0:18:4c:4e:b4:d1:45:8a:1a:8d:fb:f4:88:95:50:61:95:84:
         bd:26:7f:4f:61:42:8a:ee:35:f3:90:fe:0b:3c:cf:1c:cb:fe:
         f1:25:35:76:56:67:4f:ef:4e:22:c2:03:07:74:6a:fb:54:67:
         21:6b:8f:f9:83:ee:b3:9d:a6:76:db:0a:22:50:52:cf:17:f4:
         dd:ae:0d:05:89:60:67:3f:32:9e:f4:67:58:61:7c:7d:5d:4b:
         f9:24:b9:c7:c6:23:22:b1:bf:c9:0f:b9:1f:29:d2:8b:6e:45:
         3e:c8:57:9a:02:20:fc:e7:bb:1f:18:5a:4d:99:82:06:6e:50:
         60:af:22:13:fc:a8:de:8d:e1:f9:a9:b8:5f:56:70:7b:85:a5:
         ea:e6:69:84:0b:fc:1f:9e:91:01:b6:9e:73:f2:f8:7b:a4:40:
         34:b4:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----