Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File:                     5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier:          8LUZaPvaFXDwcN+6GLKHJVm/W2gGFrl+8kI1j7Frv9U=
Subject key identifier:   EF:5E:C3:C8:6B:B0:EB:89:3D:8D:17:B6:BC:0D:D0:C6:33:03:20:43
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer:       /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial:       01962E992351F541A3796893E699568A2358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number:          0538
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: MPq/Xo4QGGukG+DhTO7oWAaVkcMZKOI1nupqKLuctIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:51:f5:41:a3:79:68:93:e6:99:56:8a:23:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=ef5ec3c86bb0eb893d8d17b6bc0dd0c633032043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:64:68:5c:73:78:eb:ed:86:e6:8b:74:a7:
                    0c:81:86:f5:37:39:f1:42:98:29:b7:91:d3:58:a3:
                    c1:64:52:d4:cb:6c:a5:73:1d:f5:bb:b3:1a:5f:7d:
                    a1:fb:20:84:8d:13:82:09:93:f5:ac:55:89:55:57:
                    94:1d:22:e4:96:ae:63:a2:fe:ad:5d:87:d8:c5:0c:
                    a6:af:60:17:92:aa:43:8a:74:66:06:37:eb:0e:a0:
                    fb:df:57:05:dd:5f:56:88:40:db:03:ae:bc:f6:ea:
                    3a:b5:7e:48:b0:ae:cb:5a:e8:be:9e:bc:8f:9f:5c:
                    3a:63:63:fb:d6:03:f5:88:fa:06:9c:39:f8:07:e4:
                    f1:6f:f9:37:28:ae:ec:89:98:74:41:67:2a:c0:5a:
                    89:1b:49:6e:ea:a7:67:b6:4c:bb:6e:f8:fe:e2:1e:
                    85:3b:7d:ec:0d:b2:50:a2:b0:5b:ce:c4:6d:47:33:
                    42:e5:d0:9e:d9:72:2d:f8:b1:c9:57:d4:f5:10:26:
                    95:a2:4a:0b:ac:19:c2:15:b1:dc:9f:bc:01:f0:88:
                    75:20:d1:1b:35:25:b7:55:3f:a0:55:d3:92:b0:e7:
                    93:ea:cf:c7:4b:b3:14:ba:2e:d5:c7:31:fb:39:95:
                    bf:3f:39:41:73:f1:c9:96:e8:af:2c:8e:7e:5d:e3:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:C3:C8:6B:B0:EB:89:3D:8D:17:B6:BC:0D:D0:C6:33:03:20:43
            X509v3 Authority Key Identifier:
                keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:76:b7:d8:53:99:1d:75:6c:19:f6:36:a5:fa:b8:16:f1:
         38:42:8c:9b:4c:35:02:b8:81:54:fe:a7:9c:4c:74:48:93:3d:
         aa:a1:18:93:76:38:d1:f4:6e:9e:60:0c:b5:2a:7d:0e:0d:63:
         88:07:aa:bd:eb:c6:8f:65:3c:cd:b4:60:02:83:fe:31:ba:29:
         a6:ac:22:bb:56:ae:81:07:38:46:6e:18:5a:1a:5c:c1:59:13:
         f2:8a:c3:9f:39:95:37:e9:f8:80:35:78:70:f5:0c:72:99:e2:
         77:dc:a9:55:ac:3b:40:64:0f:be:d3:ad:64:f9:58:47:8b:c7:
         1d:8f:19:48:d7:f6:f5:bd:13:00:a3:31:85:e5:1d:fa:da:a9:
         05:d8:fb:0d:84:98:96:d4:2e:4c:07:84:e3:c0:db:10:bc:af:
         dd:44:af:3b:21:39:ac:60:f9:34:83:b0:96:82:b4:39:af:6f:
         6d:b0:52:6e:bb:39:9c:38:9e:c9:ba:92:84:84:48:f4:76:be:
         2a:f1:0c:0b:02:67:ab:01:ae:27:55:9e:c5:f5:50:ed:7b:b7:
         51:e1:54:b6:d7:4b:7c:48:30:e7:40:3e:d0:2a:b3:8b:f7:36:
         5c:58:f0:a9:57:42:8d:63:74:ec:fa:bd:17:26:b7:8a:bb:c3:
         f4:71:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----