Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          qnjgRf5J0gaR2MVqcDgivKxg/9ILmiv2hJRE/P8duW0=
Subject key identifier:   4D:29:4F:B0:13:D7:18:2D:A9:47:75:EE:B5:50:BB:E9:2E:07:9B:E8
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       01962E618BF558060634FDF139F1E8E2E463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          0412
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: klnwi05N98GGljdguBZlmpjeJsf/s7lSf4hRISzM+Rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:f5:58:06:06:34:fd:f1:39:f1:e8:e2:e4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=4d294fb013d7182da94775eeb550bbe92e079be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:f7:d7:bb:97:d8:ee:e7:ac:4a:1c:10:fe:
                    d1:9b:cd:6c:dd:48:6b:25:ad:c5:75:94:33:27:bb:
                    03:4d:1a:fb:d9:31:a6:d5:21:c2:c9:bc:45:25:cd:
                    6b:76:a6:63:bd:16:32:af:67:3f:42:c4:e1:0e:93:
                    90:2e:15:01:b7:9a:a1:19:c4:4f:d3:1f:15:87:70:
                    e6:95:df:19:d1:a9:e9:8b:86:d3:9d:75:37:f4:79:
                    ca:5f:c9:87:11:ad:58:5a:f6:02:5a:fb:d8:6a:01:
                    c5:39:71:44:37:65:89:0a:f1:4c:ba:a3:44:ce:12:
                    ea:ac:96:14:b0:de:e8:6f:a9:4a:5a:63:49:96:92:
                    8d:9f:5a:54:4b:ef:33:7c:90:af:2e:2d:1f:b4:a0:
                    12:63:6c:53:2e:fb:ca:1c:70:c8:38:44:e8:cb:ac:
                    a0:fc:96:b2:31:fc:22:dd:cd:63:22:cc:8f:f0:67:
                    cf:fc:27:9c:f1:9e:8e:99:bf:f6:f5:e4:f8:72:0f:
                    84:81:2a:dc:44:76:8f:1b:2a:f8:f5:30:3e:c8:46:
                    b2:8d:c8:be:eb:9d:a7:6c:55:c0:4c:2c:aa:08:1b:
                    47:7c:bf:e3:0c:2a:8a:94:e0:0c:31:12:31:1a:70:
                    e8:37:04:fb:95:2d:a3:38:77:23:8b:3b:10:18:1c:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:29:4F:B0:13:D7:18:2D:A9:47:75:EE:B5:50:BB:E9:2E:07:9B:E8
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:af:d0:6b:be:9e:57:69:f7:b7:87:26:ef:a9:9a:6d:17:
         b2:24:8c:d1:52:33:5c:54:63:ad:09:86:1a:f1:2f:8d:5f:d3:
         db:40:a2:90:1b:20:2d:3f:bb:fa:cc:c4:b3:13:b4:de:cc:77:
         d5:5d:b0:61:62:56:96:f3:27:c7:82:e5:d0:b4:58:25:ee:e1:
         22:1e:a1:a0:fb:8e:23:b0:bd:8c:26:f0:03:05:21:00:58:e8:
         00:46:c1:9f:ef:cf:d2:ea:08:90:c5:c5:73:af:26:9e:e6:b8:
         9c:45:69:ad:78:24:13:7e:e0:f7:2e:8c:14:de:94:0c:b7:50:
         e4:68:f1:44:5d:06:3a:bd:06:e7:c1:3a:8f:83:45:4f:3b:13:
         c0:88:f7:d0:43:06:76:9c:7c:a0:1e:4a:1d:a9:a0:a3:a9:87:
         9d:3a:19:bb:6a:b7:2b:58:da:e5:fe:12:1f:c3:53:47:88:ed:
         32:07:7f:9c:46:01:41:67:20:ad:79:85:64:e2:aa:97:5f:de:
         2c:9a:bc:6b:26:2b:3a:54:77:e8:df:99:56:77:aa:8c:a0:36:
         c6:e2:5a:e4:aa:1b:39:43:0e:8c:ca:f6:aa:c8:23:40:f1:3c:
         29:d6:a7:76:89:f8:8f:36:e4:a4:29:94:b2:ac:44:97:6c:20:
         81:ce:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----