Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File:                     5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier:          xLXdMFLucjdVnQ5jK/YzRIFh6R1ytWIVRCgeCGpy7E4=
Subject key identifier:   9B:C0:DE:79:1D:6A:6E:C5:F5:48:01:3F:B5:FA:7E:2B:65:04:53:1B
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer:       /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial:       01962E98910FC29B2ABE88B287CA02114DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number:          1309
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: gL6isRFVu6j8ZZZQ+tRC8ovcpjqom+elUsufAgvWrlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:0f:c2:9b:2a:be:88:b2:87:ca:02:11:4d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=9bc0de791d6a6ec5f548013fb5fa7e2b6504531b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:b4:80:98:b2:24:4e:6a:7d:f4:f4:3a:59:
                    d8:65:4d:ca:da:da:8a:66:c2:cc:91:ce:75:ee:37:
                    83:57:5c:e6:23:bf:a7:0c:2d:59:f0:27:68:43:c3:
                    36:87:3e:55:ce:19:af:01:da:d6:23:cd:4b:5f:fd:
                    68:a2:a0:4a:ed:c5:43:4d:8e:c5:4d:1e:f1:ff:34:
                    94:ee:08:17:2d:bf:3e:af:3f:79:17:8c:5b:cc:da:
                    79:66:cc:da:41:3b:03:de:54:15:ce:78:e0:c5:5e:
                    fd:11:44:be:39:cf:cd:8a:5a:53:66:71:ec:99:05:
                    46:2c:28:19:77:cf:c4:3d:d4:3c:8c:53:70:3e:8d:
                    48:85:c9:86:21:ba:3e:63:c9:90:58:99:93:09:92:
                    22:91:17:a5:73:1a:f2:86:f5:94:84:07:55:81:93:
                    5a:0f:0a:59:0d:52:44:2f:93:6d:84:d3:32:7c:d7:
                    4a:b0:c5:a7:d2:f7:c3:39:67:22:fe:46:8a:89:18:
                    36:f5:b4:27:73:e2:18:d6:d3:10:c3:d6:d7:9e:e0:
                    2c:48:7f:4d:d8:ab:99:e7:71:5a:d7:fd:31:c1:bb:
                    ac:a4:ee:4c:02:7a:7d:c8:bb:e8:40:44:9a:0e:58:
                    d1:93:27:ae:1d:97:45:21:10:a9:0b:4d:f6:1a:d7:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:DE:79:1D:6A:6E:C5:F5:48:01:3F:B5:FA:7E:2B:65:04:53:1B
            X509v3 Authority Key Identifier:
                keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:ad:62:80:49:8c:5c:0c:c8:e9:ef:83:a3:02:1d:a0:06:
         ad:e8:fa:2e:ec:39:66:dd:6a:7a:9c:74:7b:23:d8:39:f6:4b:
         14:f1:c2:a0:b1:66:8d:11:09:04:0d:60:ff:c2:27:8e:48:19:
         99:b7:99:dd:c0:5c:0e:74:a3:3f:a9:e5:5e:0c:1c:5e:1e:e6:
         43:ca:57:3b:54:2b:07:9a:3f:0e:7a:0f:d0:a7:48:2e:5c:76:
         a0:46:eb:1e:56:e3:4c:0b:60:29:3c:cf:b1:08:8a:82:ea:e4:
         de:79:fb:e3:9f:bb:a7:09:3f:db:b2:86:65:96:10:58:4e:c4:
         0a:f2:3d:ca:47:68:b4:3f:19:5f:72:95:e0:90:de:b8:19:68:
         8e:aa:d9:d8:86:0a:8d:98:a7:da:f7:94:f7:66:cc:61:5f:6e:
         4d:63:09:a3:0f:90:10:87:16:77:9d:4c:ec:5f:91:38:9d:45:
         cd:7f:a5:ae:57:94:99:fa:44:aa:47:81:de:32:fd:81:c7:71:
         be:b5:18:73:b8:12:a5:c7:04:e1:5a:0e:1b:74:dc:db:b6:12:
         3a:0d:c0:8b:26:b1:1e:13:a6:a8:d8:22:89:44:52:9e:38:86:
         4e:7f:90:61:ad:fe:32:4a:1e:7f:84:cf:8f:6d:c7:51:cc:b8:
         41:9a:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----