Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
File:                     4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft (raw, json)
Hash identifier:          8N7Q61MtztrNCWbDLR6PpT0MKIkd/+BZ4CcMFXcnkiE=
Subject key identifier:   0D:B3:5F:54:FD:8C:91:3A:14:A4:6D:2A:21:EB:23:2B:D5:A7:70:FE
Authority key identifier: E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
Certificate issuer:       /CN=e03174a0128730faac0d78c7a3d908aa51054be7
Certificate serial:       01962E98AC66DCDF8D586B4AF2929F43B9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl (hash: 2N7nWrfYGSU4+hm76AVYto5YjkEeEXGTeGQMBfzVPpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:66:dc:df:8d:58:6b:4a:f2:92:9f:43:b9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e03174a0128730faac0d78c7a3d908aa51054be7
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=0db35f54fd8c913a14a46d2a21eb232bd5a770fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:42:94:18:fe:7f:ea:d3:37:1a:d7:32:7e:
                    5c:b3:ab:e0:4a:05:40:8f:a4:5f:d4:f6:80:81:59:
                    96:0b:ca:8f:39:9d:e5:9d:d1:94:d6:a3:8c:21:a7:
                    7e:c7:fe:06:21:63:93:3e:de:8b:7f:da:32:26:4c:
                    81:0f:74:6a:07:d6:9f:3b:d5:5b:b5:fa:56:89:1c:
                    49:d5:2c:08:20:de:d2:55:d5:27:e6:83:a7:34:6d:
                    a9:73:fe:53:72:95:e8:71:37:f2:96:5b:91:8a:20:
                    40:1a:d6:94:5e:fd:12:5d:8e:e3:b5:32:62:ef:31:
                    24:e7:c2:9a:f7:4e:67:9f:62:30:70:df:d0:84:02:
                    c2:25:72:8e:1f:bd:09:d4:24:88:9d:67:bc:d6:ff:
                    ff:ac:97:fb:37:36:cd:b5:61:60:cd:54:da:57:92:
                    ac:97:30:9e:70:ee:e9:db:9f:da:9e:01:bc:9a:e3:
                    f2:02:e2:91:b8:53:03:b1:b6:05:c8:29:73:f3:40:
                    15:e4:26:55:32:e6:f2:0f:de:81:bd:78:de:79:12:
                    5f:ee:1f:3c:ea:42:a3:6a:6d:28:ae:f2:5a:b0:2b:
                    e2:a2:c1:e0:a9:8e:a0:19:06:93:ee:63:bf:b5:bb:
                    28:c1:cf:f8:bc:75:76:e5:ea:a5:e0:20:79:b1:ee:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:5F:54:FD:8C:91:3A:14:A4:6D:2A:21:EB:23:2B:D5:A7:70:FE
            X509v3 Authority Key Identifier:
                keyid:E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:1b:1a:58:b2:8e:28:52:b4:92:7b:ca:00:a1:f2:50:17:
         4d:7c:04:2d:da:b4:6f:df:9c:44:d7:cf:c4:7d:8c:0e:9a:35:
         0c:10:6a:d6:69:c2:ed:70:7f:2e:0f:7a:9c:fb:fe:7a:e1:d6:
         e9:b9:fa:6a:d2:fb:07:5b:75:e0:b0:ec:97:10:a9:09:be:98:
         e3:45:58:3d:fa:43:b8:d1:03:0b:85:2b:54:76:61:28:c7:19:
         c0:0a:45:ba:41:5c:ca:3d:df:a8:97:8d:11:26:99:6e:27:17:
         25:3e:83:5b:d6:3b:89:33:ee:e4:47:50:43:a8:1d:86:18:57:
         02:93:fd:93:47:d4:01:5a:17:7a:4a:11:84:da:85:ac:ae:ff:
         ae:f0:92:5d:01:49:84:f3:4b:64:45:42:ca:f7:37:6f:c1:4f:
         65:de:96:20:3a:fe:8c:20:44:61:3d:8c:68:22:c4:3b:e6:d5:
         f5:f7:28:1b:f6:06:6c:c9:13:b1:dd:ce:fb:35:21:b7:7e:12:
         98:7b:b1:df:7a:be:d3:81:4e:5d:2a:a4:f4:68:f2:f9:38:83:
         6b:ba:60:4d:50:61:b7:94:36:eb:f1:eb:58:7d:7a:bd:74:3d:
         2e:0b:52:fc:10:16:5f:39:c1:1c:dd:8d:3a:1a:d4:14:22:19:
         b8:d4:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----