Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File:                     izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier:          Ad7dVCoh2lZYKRmF/aYIbyKBj8PFI+fHl1vz5DmJNpw=
Subject key identifier:   05:DD:6F:96:BD:11:14:14:2F:6B:37:E8:5B:DD:06:2E:F2:67:FE:E9
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer:       /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial:       01962DF3F5EF0250ECB7AF0D838E05103DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: zuPnKGupLizPf38YpHA8kt4fGV67c5as+VvB2zjgNq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:ef:02:50:ec:b7:af:0d:83:8e:05:10:3d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=05dd6f96bd1114142f6b37e85bdd062ef267fee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:11:6e:bc:73:aa:03:9b:08:16:b1:2b:17:
                    6a:67:07:9e:6b:93:5f:ca:d1:a2:fc:2f:52:bb:a6:
                    aa:92:78:c9:a1:ba:55:48:b1:ea:0f:d0:59:d9:0a:
                    15:77:30:7d:43:4e:55:dd:58:ae:1c:c9:ec:71:33:
                    49:cb:6d:7d:a8:85:f3:19:e1:8c:27:0e:39:09:f2:
                    6c:ae:35:83:32:a4:c0:ad:85:cf:6b:ec:1c:21:04:
                    83:82:f5:76:85:fc:7f:2d:8c:cc:ed:9d:af:8c:c8:
                    91:f4:15:81:ad:15:02:44:e0:86:d5:53:9c:df:6e:
                    88:36:94:c2:a4:51:d3:e6:8b:fb:db:eb:ae:4f:bf:
                    2e:b0:e3:a0:51:01:28:69:21:20:9b:27:9b:74:eb:
                    36:f1:1a:74:6f:88:a1:1b:1f:5a:fb:9b:3e:df:69:
                    64:17:d6:68:20:8a:6d:7c:3a:0f:68:5d:03:86:7d:
                    0f:97:63:67:ec:bf:75:ad:72:2c:a1:a2:b0:b6:47:
                    13:44:51:e2:cf:ca:39:4b:e2:2a:37:65:1b:31:b6:
                    c8:b7:03:64:3e:ef:c3:af:12:02:3d:14:40:ba:33:
                    03:e3:08:00:c9:7e:63:19:41:49:56:d8:9e:73:d9:
                    0e:a4:97:2b:a1:13:a1:c4:d3:af:ab:61:3f:7e:86:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:6F:96:BD:11:14:14:2F:6B:37:E8:5B:DD:06:2E:F2:67:FE:E9
            X509v3 Authority Key Identifier:
                keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ea:d8:de:b6:4a:25:c1:f1:2b:c1:83:c0:d4:a9:d5:5f:03:
         f1:a9:81:9a:4f:dd:fd:c2:07:a6:5d:94:5a:aa:66:11:20:5f:
         22:73:16:ca:2b:44:69:65:94:7c:f3:1a:ea:df:42:b9:c5:42:
         ed:0b:ac:47:a0:95:54:29:5f:4c:c5:2a:61:24:80:83:c4:05:
         73:84:69:a2:dc:78:25:8c:db:74:5f:03:f3:d7:38:28:8e:fd:
         c8:be:2d:8a:2f:98:0c:a2:a4:31:25:b4:80:00:53:9c:75:24:
         17:e0:d1:44:c2:c5:fb:9d:68:49:56:bc:23:c7:12:ac:50:7b:
         ac:6f:91:ac:24:4c:05:39:03:cb:14:ec:df:9b:ee:62:44:1e:
         c1:25:c0:71:dd:71:20:e1:c2:91:a2:0b:ba:57:d5:cb:1a:a3:
         10:2e:ee:97:48:70:7f:29:54:d2:a8:10:85:fe:b3:14:fe:c3:
         a2:d9:f8:e9:bf:18:a7:97:52:74:62:cb:af:4e:32:3b:54:e0:
         88:6a:38:8c:3f:7a:7f:7d:f4:ef:2f:f8:1b:d9:a5:da:a8:e8:
         b5:74:3d:a5:fb:a1:0d:eb:6d:11:7e:03:11:ae:43:98:97:77:
         01:2d:a2:cd:ab:83:f2:ab:68:c2:a5:55:1e:cb:64:3a:60:27:
         60:9b:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----