Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File:                     xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier:          vhWtx8EDMV2svGUPU+KHrpCjQMtFt1ak0xFDJdrE/zs=
Subject key identifier:   5C:2F:9D:1B:50:E4:C3:2F:7F:34:95:EE:7D:E2:65:EC:18:BE:E8:39
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer:       /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial:       01962F74288C9C6BC4F10B961F87F13B7F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number:          0FEB
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: qDfKSKEsnTQie+K/4qJ1UWPO0F9JRDtqw8sOTo3XbPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:8c:9c:6b:c4:f1:0b:96:1f:87:f1:3b:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=5c2f9d1b50e4c32f7f3495ee7de265ec18bee839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:b8:b1:60:22:e1:d5:3a:fb:72:b5:93:0e:
                    b6:43:e6:3f:10:36:d6:94:80:9f:22:35:8b:08:d3:
                    4b:c1:1b:14:cf:34:0a:ef:15:45:ca:3c:15:88:84:
                    fa:e7:22:43:28:2a:44:fc:55:8c:2e:7b:6c:ad:bc:
                    c0:59:7b:3a:78:b1:41:35:28:e0:e4:55:20:7d:03:
                    9c:55:78:21:81:47:20:06:2c:49:3f:11:5e:45:d0:
                    f1:84:49:53:7d:0d:35:6e:9a:0e:46:06:34:dd:af:
                    54:c0:8e:94:fb:45:bf:21:83:34:13:3a:71:49:a2:
                    7b:cc:c7:a8:9a:8b:50:40:f0:02:c0:77:5a:08:00:
                    0f:e9:55:55:ce:6d:30:5a:83:49:f7:52:a1:4d:00:
                    f1:f9:78:49:e4:e2:c1:87:c8:14:cc:9a:a6:11:f1:
                    1b:22:72:2b:3b:42:a0:cd:6e:b9:e4:94:e4:57:cf:
                    17:41:25:b5:fb:8b:70:67:b4:62:08:42:28:a5:5e:
                    ed:14:d2:e1:15:11:cf:b8:5e:c5:b1:b6:a4:63:9a:
                    c7:59:07:c0:85:93:63:ae:aa:1a:03:28:cd:e7:69:
                    8c:1b:2c:7c:9b:b7:3f:a4:2a:41:68:80:9b:a7:41:
                    a2:5d:07:33:6f:be:df:4a:b2:f3:0a:50:bc:be:3d:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2F:9D:1B:50:E4:C3:2F:7F:34:95:EE:7D:E2:65:EC:18:BE:E8:39
            X509v3 Authority Key Identifier:
                keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:d0:df:f0:3a:e1:7b:ca:ca:fb:2f:45:a7:f1:14:b7:0e:
         97:56:75:ab:bd:32:f4:46:a2:15:be:57:1a:0c:5f:7d:d9:d4:
         e1:82:9c:22:e4:66:8b:2a:30:9d:10:5e:49:63:60:91:fc:35:
         c4:64:19:c7:a8:fc:f9:c9:f1:1f:8c:8f:18:6e:79:69:9e:8e:
         9b:a2:f6:38:7f:33:31:ba:aa:df:7f:bc:d9:e0:7b:27:a5:be:
         e6:b1:df:0b:8f:ca:92:4a:b1:18:0e:2a:2c:6c:59:65:1c:4f:
         6b:47:47:e7:c1:e3:27:50:b1:24:c7:25:a2:e4:fd:b5:64:6c:
         ea:8c:67:62:88:4f:87:aa:d0:f0:9f:05:b0:62:bb:9b:28:e1:
         1d:eb:b8:cc:ce:6a:25:6c:de:69:27:b9:cd:f5:63:eb:d3:38:
         98:1b:8a:33:02:1c:8f:1d:7e:cd:57:7e:8c:18:70:cb:86:c0:
         6b:60:21:af:4b:56:49:63:44:2e:ca:9e:4f:eb:69:40:96:03:
         e8:68:03:34:cc:c1:67:7f:9f:f4:18:6a:63:54:be:09:b8:d1:
         86:9e:32:ac:10:b8:ea:e0:4a:88:c6:00:28:9d:23:62:7e:b4:
         57:64:7e:48:c1:d1:cd:85:4d:1a:bb:ce:77:c7:72:57:35:af:
         f7:28:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----