Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File:                     PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier:          vUTxXfaWbRHy9Xcix4Cj6QGADgVA1+7X7f+vUqOG7V8=
Subject key identifier:   0F:81:F2:02:1C:FB:E8:9A:B9:52:9C:64:88:11:5B:50:86:8D:C3:5D
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer:       /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial:       01962E99A8CCD23F505086935BEB1542384E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: XtZW8AYdNXfVjkmz3goWjwYr/QvCijX8WuGvcZWoir0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:cc:d2:3f:50:50:86:93:5b:eb:15:42:38:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=0f81f2021cfbe89ab9529c6488115b50868dc35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:6f:8e:d0:f7:e1:b3:76:7c:9d:7c:46:3f:
                    90:d7:40:2f:11:bb:b6:c9:b8:2f:9f:86:47:ae:db:
                    83:17:48:c0:01:1b:96:0a:73:37:77:0e:ae:c4:da:
                    1c:fd:3c:01:f8:61:5c:d5:3f:bd:15:2b:d1:b8:f9:
                    0f:e4:17:c4:63:fc:c4:c3:76:ae:bf:27:b5:e3:cc:
                    c8:df:be:70:4c:38:87:46:34:1a:eb:72:4e:fc:20:
                    8c:3a:af:f7:0f:1d:81:92:8d:49:6f:fb:99:5e:12:
                    a8:66:87:98:dc:54:7e:70:1f:b7:ab:4f:ac:f1:54:
                    f5:42:03:1d:ea:5f:8a:23:f5:3d:08:92:15:d2:03:
                    d5:e4:2f:05:64:63:b7:43:3a:11:c6:ce:76:78:77:
                    22:39:bd:c1:ef:87:a9:db:59:89:f5:7c:86:ba:2c:
                    68:dc:95:f5:a1:bf:71:35:ff:3f:9d:9f:c5:a7:f9:
                    f6:f2:5f:17:a8:ec:f7:d7:23:c7:84:f0:62:41:8f:
                    19:90:f2:d4:8a:19:a4:6d:c3:3a:7e:b3:e0:e9:3b:
                    b6:e6:34:7e:00:0a:7c:a6:d3:63:93:f8:2e:90:78:
                    c2:72:e9:31:ec:92:08:2c:60:8a:60:76:13:dc:74:
                    fd:63:36:69:33:ac:d7:0c:06:b9:65:30:6b:1b:ad:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:81:F2:02:1C:FB:E8:9A:B9:52:9C:64:88:11:5B:50:86:8D:C3:5D
            X509v3 Authority Key Identifier:
                keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:19:43:ea:76:d9:19:8f:ba:a4:ae:68:a7:1f:c8:0d:01:
         c6:34:44:4e:13:59:aa:d9:d3:fe:3a:f0:4a:06:98:0f:f8:e2:
         f3:3f:56:06:8b:2f:47:6a:fc:6a:44:43:4e:aa:25:b1:04:85:
         37:0c:6b:3f:5c:d4:a5:54:dc:51:7a:15:4b:61:c0:b4:7f:79:
         63:b6:1a:89:e0:4b:c7:05:97:34:aa:59:ae:c2:63:b4:be:9b:
         6b:99:a8:48:cd:86:42:c3:12:f1:be:5a:cb:3b:64:63:f6:e0:
         d6:77:7f:e0:07:90:40:f6:6c:21:a9:07:55:53:b6:1d:fd:27:
         7e:24:46:ac:ca:37:df:6c:19:1d:fa:27:af:7c:2f:b9:4c:b0:
         5c:3b:93:b4:9f:8e:10:42:ec:af:c4:0f:74:13:c0:ad:8d:b3:
         9f:32:e7:a7:0c:40:b1:45:af:b6:e2:22:dc:fc:d7:fe:27:2d:
         2a:27:33:78:f3:bf:79:c3:d4:2f:06:f7:54:32:45:5d:ef:a4:
         f0:8e:01:30:4d:5e:73:94:c2:d8:33:77:bf:28:75:8f:fb:f8:
         a5:d9:b5:af:6c:68:65:d7:77:6a:e7:26:2f:0a:9f:e6:e6:2d:
         1f:58:75:1b:78:d1:3b:aa:cb:27:fb:c6:35:55:1b:4f:4d:c8:
         e9:1f:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----