Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File:                     4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier:          C/A8nSDylGX1aLhBGCrI2VoQoPovtQNOARbeWdHvhDc=
Subject key identifier:   62:1E:DA:09:E9:11:FD:C5:4F:AF:DE:F2:E6:04:94:FA:FD:8A:1E:00
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer:       /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial:       01962E98602CB74D624949EF09FC8F531B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number:          0F61
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: utSHR6FXZSUCBSh45crwoDodwTvcPwCnVkrCUtA1Mes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:2c:b7:4d:62:49:49:ef:09:fc:8f:53:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=621eda09e911fdc54fafdef2e60494fafd8a1e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:93:9a:40:62:7c:76:48:e5:9f:7d:56:41:
                    9b:73:e4:fb:81:47:9d:64:6e:a0:be:76:bb:c8:37:
                    d3:00:eb:0b:dd:5e:3d:e1:0b:92:8d:0d:04:e3:0b:
                    f3:fd:99:92:2f:3d:58:52:a1:bb:53:1e:62:f0:9c:
                    45:c9:b1:93:7d:40:e2:c7:8c:b7:87:ce:8a:61:dd:
                    d0:69:cb:62:00:7d:e4:32:2f:4a:dc:f4:e1:fc:c2:
                    0b:3c:4f:99:2a:b5:a3:d4:4c:76:b5:d0:41:81:5e:
                    11:be:b4:c6:94:d5:0c:a6:4d:54:0c:76:19:41:c8:
                    fe:da:1b:18:12:4d:de:74:43:ed:d8:a3:77:ba:7f:
                    2b:be:a6:f3:03:0a:26:95:71:33:dc:d8:47:f1:d7:
                    31:01:3a:4a:7a:0e:14:cf:17:7b:ef:ff:70:3e:6b:
                    64:71:7a:1c:97:b2:4f:4f:1d:2e:b3:33:67:d9:11:
                    49:ab:f3:a1:06:e6:e9:9e:28:75:18:9b:af:c5:63:
                    83:db:58:c9:89:e8:2f:3a:c9:e2:5a:35:fe:14:85:
                    d2:06:37:67:2d:b9:7a:21:83:48:bd:06:4f:23:c0:
                    e1:50:0a:85:aa:fa:26:70:59:2e:dc:9a:26:23:b7:
                    d7:99:47:f3:f3:17:43:59:ec:b0:05:9d:ac:ff:9a:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1E:DA:09:E9:11:FD:C5:4F:AF:DE:F2:E6:04:94:FA:FD:8A:1E:00
            X509v3 Authority Key Identifier:
                keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:11:c2:60:78:4e:c7:f1:57:34:fc:72:e5:39:e3:b3:54:d8:
         ca:f8:c9:ae:d2:7f:74:87:55:9d:42:98:5c:b7:80:37:8b:6f:
         08:fc:e6:dd:c4:54:6d:ab:65:42:7e:fc:27:79:8b:c0:f3:4d:
         bc:4d:4f:02:ef:20:4f:e1:4f:c2:ed:de:ed:fe:8b:4d:e0:12:
         8b:40:22:e5:52:b9:f7:62:6b:d3:59:87:0d:b6:ba:ae:e1:42:
         aa:22:62:5a:df:cf:3c:79:f2:bc:ab:84:8c:54:d4:cb:7c:0b:
         bd:08:d3:2e:70:a8:b3:06:05:d7:59:90:6e:21:61:5f:47:a2:
         1a:a2:c6:37:26:ce:06:51:14:e2:16:90:92:c1:49:2f:dc:d4:
         a4:46:01:ed:70:66:66:41:56:84:cc:4f:e5:66:3b:46:03:e7:
         5f:4e:b4:c3:ac:53:3e:c8:81:3f:f0:b5:95:5e:1d:e6:03:92:
         91:41:a7:10:34:73:9f:69:da:b6:e6:c3:d8:b3:07:1a:95:0a:
         77:c0:9f:9b:e0:e7:2c:22:e5:9f:f9:00:da:e8:d6:8e:21:98:
         75:f1:20:9f:3d:b3:1b:00:cb:6c:c4:b4:58:3b:a4:ff:12:ae:
         0b:02:a6:5b:f3:b7:c6:f7:1c:05:fc:b8:ef:38:00:dc:0c:de:
         f9:19:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----