Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File:                     TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier:          PYsL1/9Ghyb/zh50tSEK4j6i+ZO87ntoOQVLs5e3ytY=
Subject key identifier:   3A:05:50:3E:62:E9:CD:FC:10:76:3B:22:43:9B:48:1F:9C:DF:26:00
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer:       /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial:       01962E98CF4D7E33E5061BB87BC34FE55FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: x0iI92Q4y7H+f+quVXTgSAtSCfqtxzHyVQuihqvUPvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cf:4d:7e:33:e5:06:1b:b8:7b:c3:4f:e5:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=3a05503e62e9cdfc10763b22439b481f9cdf2600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:c8:08:00:92:03:d9:91:29:f4:2f:a9:61:
                    8e:37:73:7c:1f:6b:63:ac:29:df:c3:03:99:e8:21:
                    a3:a0:ff:56:b2:72:42:ac:14:ea:2a:72:f0:5d:34:
                    35:59:a9:91:65:a4:83:e1:36:42:11:0a:8c:08:fc:
                    c6:5b:65:88:b2:d6:c7:13:80:58:e0:75:85:2c:ac:
                    9f:88:8a:cf:0f:6e:ca:2d:77:b3:b3:5e:44:53:44:
                    24:2c:f3:6d:fa:e5:1e:7d:85:ce:8b:3e:7a:1e:a4:
                    e5:ff:8c:4e:50:fb:61:c7:5f:62:1d:53:07:60:a4:
                    8f:58:67:f0:6d:35:10:8f:8e:d3:1c:06:c4:2a:b1:
                    f3:df:8c:12:9b:97:9b:01:cb:64:16:18:eb:d6:1c:
                    88:e7:fa:7d:de:1d:be:95:bb:1d:a0:97:3e:c4:74:
                    92:6b:a0:d0:f1:6c:df:ba:b3:45:97:93:4d:f1:d4:
                    a1:0f:eb:b5:7f:3b:6c:de:6c:80:50:4f:6c:c1:67:
                    bf:8d:33:64:a2:ab:45:7e:a7:29:41:1c:78:61:22:
                    a5:f8:db:24:76:92:76:91:81:97:c5:10:cf:8c:4f:
                    95:13:f0:ed:ca:18:ce:86:57:64:b3:45:72:51:67:
                    df:b4:6b:60:2b:78:29:5c:92:7c:9b:69:ac:1c:de:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:05:50:3E:62:E9:CD:FC:10:76:3B:22:43:9B:48:1F:9C:DF:26:00
            X509v3 Authority Key Identifier:
                keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:13:27:28:c0:57:94:b6:da:f3:03:85:0c:b8:56:38:ca:
         8e:66:c4:5b:4e:db:24:57:22:23:49:60:a0:5b:8b:9f:52:55:
         36:c5:c6:94:94:84:e8:dc:f1:24:02:3b:83:05:98:6f:dc:11:
         f0:aa:89:a4:f7:bf:94:81:5e:37:ee:3e:46:97:be:e2:61:be:
         86:87:d0:f6:42:7e:78:2a:f2:90:e5:06:f6:e6:3f:23:a1:51:
         6e:3e:2f:9a:87:64:eb:1d:74:f7:5b:b6:e8:94:b2:c1:7c:67:
         d4:a0:b6:ef:02:6e:93:ca:73:07:f6:e7:5f:e1:68:ba:e7:c0:
         41:2a:43:11:45:34:d1:39:ff:64:cb:d1:8d:63:96:b7:75:0d:
         f6:d2:3c:a1:61:c4:2c:cd:e3:01:9f:2c:3a:68:56:91:43:05:
         70:fb:66:75:1f:51:e8:19:39:65:8b:da:d9:25:f5:48:56:c8:
         52:09:0f:0e:b7:d0:41:07:d0:c5:72:fb:d0:ad:92:b7:0d:00:
         f3:4c:bc:46:af:9a:69:07:5c:cc:86:16:27:c7:85:aa:c8:e2:
         a0:54:f4:3f:d6:cd:50:e4:cc:9c:c7:2b:30:60:a3:52:03:53:
         89:27:94:58:4a:f9:91:93:97:a1:fb:ed:42:ac:5c:cc:d8:9a:
         86:33:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----