Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File:                     k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier:          wYOIIbNscrgnM4ylu1q0R+JULNhJk00do1ka7VOnq98=
Subject key identifier:   F4:8F:29:62:E7:3F:2D:C5:5C:C1:FD:7F:3E:26:4B:A2:2D:E9:0D:90
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer:       /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial:       01962E99B3F466EB6956781D49BE566C4485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number:          054E
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: nQYeRESXZPfI8IvD0nD1DVNRCh1kKbRZie6drrP5PmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:f4:66:eb:69:56:78:1d:49:be:56:6c:44:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=f48f2962e73f2dc55cc1fd7f3e264ba22de90d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:5c:40:d5:ed:6e:fe:50:ff:6c:cf:50:39:
                    21:2a:4b:7f:6d:47:53:e5:e0:21:4f:fb:9e:45:0c:
                    95:ee:3a:54:9a:dd:f4:ad:45:02:be:8f:02:ec:a0:
                    35:9a:57:9c:37:63:d1:79:af:a4:5e:bb:09:8d:a4:
                    65:96:20:a5:fe:0e:f7:89:33:32:3f:ef:ce:9d:23:
                    12:11:cd:20:d9:e9:5a:2b:a8:e0:f4:40:16:cf:4b:
                    53:a8:e7:06:16:e2:86:2f:4c:b3:f8:ee:b9:3e:15:
                    51:58:d2:3f:52:fa:2f:3b:a5:df:a0:d5:18:ac:b5:
                    ff:e5:7a:6e:45:db:2b:e9:bf:62:a6:4d:dd:bc:d8:
                    b5:27:bd:a5:55:b6:a8:76:87:6a:0b:87:d9:30:f9:
                    4f:7a:21:48:e2:6e:d4:61:9e:00:de:87:b7:28:7e:
                    66:b2:9e:40:fa:7a:05:b4:f2:ea:58:77:ab:f8:52:
                    bc:2e:03:f4:b1:63:9f:17:9a:26:5b:6d:69:d5:d4:
                    f4:70:9f:44:10:6a:56:86:79:4f:0e:9f:95:ef:f3:
                    b4:5e:c1:f2:af:6f:d8:19:ac:d7:f0:b5:ae:17:42:
                    a7:c7:61:d1:fb:8d:4e:b1:b8:f1:92:6b:dc:f0:02:
                    2b:df:14:8f:ca:c9:42:65:3c:54:02:cc:dd:45:39:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:29:62:E7:3F:2D:C5:5C:C1:FD:7F:3E:26:4B:A2:2D:E9:0D:90
            X509v3 Authority Key Identifier:
                keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:33:a4:17:89:07:16:48:6f:58:1b:75:fb:4c:91:a3:05:4e:
         0c:26:ed:95:72:e1:14:fc:e4:5b:db:2c:e3:03:17:a4:7f:4d:
         ba:3a:1b:3e:69:a5:93:06:40:c3:b4:af:1e:67:2a:d5:75:89:
         8c:8b:1c:38:e0:60:7a:e7:50:5e:42:35:57:49:12:0a:82:f6:
         1a:fb:a0:71:18:b3:22:f0:0e:93:e0:35:54:57:67:39:e5:1d:
         10:12:7e:92:17:1a:cc:eb:b9:2b:7e:82:49:3b:de:bb:fc:9c:
         68:af:e3:e8:1a:d2:5a:ad:fd:f5:4c:94:15:33:b0:87:d2:8f:
         40:37:26:ac:2c:8f:3c:3e:3c:64:08:1a:fa:c9:18:53:09:0f:
         c7:64:c1:ed:25:c9:26:0b:43:8b:9a:93:07:af:b7:99:fe:e0:
         98:8a:61:30:48:a4:a0:51:7d:86:f8:dd:53:2b:4d:c0:ae:2b:
         a3:76:ff:54:3d:fa:1f:ed:fa:5f:33:5c:69:25:47:2c:49:90:
         0f:d0:f1:d2:37:21:ea:0f:68:05:30:c1:fe:23:57:e4:33:c7:
         f8:cd:4c:de:fa:34:6e:46:84:02:8a:57:37:84:e7:ab:5f:24:
         d5:40:f8:1d:58:0a:f4:1c:73:6a:4f:2a:70:1a:44:f5:05:eb:
         8f:c0:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----