Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File:                     xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier:          nG68FAvRKxpiEgPP7MRaBOVSRjhl7iqHv0lDTYA0OhY=
Subject key identifier:   E1:E4:35:3E:C0:85:6E:D0:CD:EC:37:D1:6F:A4:FB:B6:F9:C7:2A:74
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer:       /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial:       01962F74F64D1069F79F2E4559315FB65E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number:          02E7
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: IeEznEV2PlHnJVcEyAkEcRhA/b6uRWLqJdpIs9vQta4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f6:4d:10:69:f7:9f:2e:45:59:31:5f:b6:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=e1e4353ec0856ed0cdec37d16fa4fbb6f9c72a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:81:b2:f6:eb:b7:61:1d:d8:79:ff:33:78:
                    58:09:b1:1e:80:5e:f7:7f:7b:f1:1c:fe:7c:7b:43:
                    c4:8c:96:89:33:d3:cf:9a:06:26:7e:42:6d:a2:67:
                    6f:00:a9:49:eb:0f:b5:b7:89:4b:f0:b9:f9:85:a9:
                    f7:be:9c:01:59:7c:3e:56:3e:96:dd:20:e9:25:e4:
                    9f:3b:3e:eb:2d:40:2d:c8:ca:e4:60:27:f3:20:14:
                    72:8b:90:46:7c:96:bf:e5:f2:2c:1e:22:87:ef:bd:
                    b9:32:4e:52:53:44:69:09:ec:47:c0:9d:1e:16:23:
                    b0:59:72:51:8a:58:c9:9d:c1:30:f5:85:d6:e4:ca:
                    cc:93:9e:b8:ba:b5:f0:ac:ca:87:aa:b2:9b:d4:39:
                    d7:92:19:e1:84:0f:c6:47:9e:20:99:85:b1:d9:d4:
                    eb:7f:af:b7:fb:af:b3:ae:5f:25:eb:0c:2b:99:94:
                    43:e0:28:be:b4:1e:7a:72:51:a6:68:68:86:b3:ec:
                    50:aa:09:d0:9d:54:54:3c:9c:8c:84:8c:2c:cc:a4:
                    b0:30:2d:dd:5a:0f:b4:7e:03:75:bd:4d:db:04:aa:
                    09:1c:65:21:db:c7:eb:9b:a3:78:7e:d7:b3:c3:92:
                    b9:78:c2:7b:b7:0d:8a:f2:71:3a:62:2f:ab:99:39:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:35:3E:C0:85:6E:D0:CD:EC:37:D1:6F:A4:FB:B6:F9:C7:2A:74
            X509v3 Authority Key Identifier:
                keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:ce:3d:1e:8e:47:06:6b:fd:8f:ce:3d:a5:53:4b:dd:34:
         af:78:ca:9d:b7:f3:cd:02:22:ac:f2:06:52:c9:f5:cb:be:3b:
         54:79:8d:eb:f7:1a:8b:e5:2a:ab:b8:05:1f:b5:fd:dc:b2:d7:
         13:83:a2:5b:bb:3e:bf:f8:d0:c5:cc:e8:2d:4a:6b:c9:68:1a:
         54:08:76:6d:7f:36:c1:e7:88:c1:d2:43:b4:12:83:34:12:80:
         2f:9d:d6:77:00:ab:65:9d:b4:c6:bb:38:73:33:9b:c6:b4:c8:
         11:1c:86:ad:2a:62:71:1c:38:2e:ba:4e:cb:d0:3f:fa:08:21:
         56:a8:e9:99:c8:77:36:8f:34:70:89:84:e9:4e:a7:2d:53:f6:
         79:a2:29:2b:3d:47:de:40:a1:8c:86:c7:f9:9e:c2:2e:9b:93:
         fc:0f:b4:a7:6d:0f:e3:78:48:4e:24:96:60:00:53:d5:32:8e:
         b5:78:6c:cf:c0:63:0e:ee:22:d1:66:91:29:6a:be:22:7d:65:
         25:8d:92:ba:2d:a0:89:3e:e9:92:08:ab:c2:65:25:0b:9c:36:
         db:29:4e:48:87:b2:c5:2c:d1:c9:77:65:93:34:73:a8:2b:69:
         e2:c8:33:60:85:df:9b:02:2f:c7:b5:64:87:3a:75:59:c4:59:
         b6:37:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----