Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File:                     _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier:          B8NFtpPOXoWDF3LxQgxnuu2fuwyw8kwyMPPYK6GqvnA=
Subject key identifier:   63:6F:15:97:63:2E:A0:6F:FE:F8:66:C3:DE:DD:03:91:9D:03:EF:89
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer:       /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial:       01962F06702B546F34BB11E2384B8C438DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: aANkOH+X44ahqKI0XO5NiXlxefm/QsbvFpO2Q6eQzik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:2b:54:6f:34:bb:11:e2:38:4b:8c:43:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=636f1597632ea06ffef866c3dedd03919d03ef89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:35:ed:68:45:de:b7:2f:ef:31:13:75:f3:
                    c1:fb:b4:82:9e:67:8b:b8:ad:cd:be:dd:33:07:4a:
                    29:e8:f8:7e:3e:58:e7:b4:4a:c9:7f:c9:01:13:4f:
                    11:2e:51:04:f4:f4:e9:04:c9:7e:b1:3f:f6:53:8e:
                    36:80:b3:d5:2d:45:81:2e:09:ad:2b:10:7f:bf:dd:
                    dd:3d:d5:88:17:0b:c4:39:0a:8a:e3:a3:41:47:55:
                    34:65:a5:57:29:e0:5c:60:86:6d:15:84:0c:ff:82:
                    19:69:58:07:1f:97:ad:97:aa:9d:62:54:53:e8:46:
                    9a:ec:b1:da:55:3d:96:19:e8:a8:4c:c2:66:72:5f:
                    b3:6e:f1:0b:86:c5:38:41:2f:27:26:4c:3d:3e:5c:
                    c5:6a:11:28:e7:4b:4b:bc:e0:80:b0:dd:ab:f2:45:
                    f8:2e:8c:e7:0a:0f:89:ea:7e:35:2f:14:e5:4f:9b:
                    70:82:75:1d:34:8f:97:e8:98:f3:09:b3:f6:bc:40:
                    17:e4:07:74:85:98:fc:af:eb:83:e1:cb:f0:e1:dd:
                    49:76:ca:d6:1e:a1:7b:20:f5:bf:08:15:c0:41:6b:
                    90:63:f1:4e:91:9d:d6:3d:9e:e3:c7:e2:89:a8:14:
                    e3:94:a2:eb:e7:d0:69:d7:65:44:69:e4:e4:5c:40:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6F:15:97:63:2E:A0:6F:FE:F8:66:C3:DE:DD:03:91:9D:03:EF:89
            X509v3 Authority Key Identifier:
                keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:54:93:fb:67:9c:d7:f1:3d:6d:44:64:85:f0:29:1a:9a:
         8e:59:dc:6a:9c:47:82:ab:31:08:b3:03:b4:9c:2b:ff:4e:2f:
         01:19:f8:f8:0c:fb:e2:92:86:64:da:b9:d8:78:4d:3b:63:67:
         e0:1d:cb:df:09:93:16:c3:6d:85:1e:9d:9a:f9:59:c1:1a:d4:
         45:0a:7d:f6:ec:2b:4b:e7:9f:01:a6:46:08:9b:83:77:5b:8c:
         28:6b:84:f7:d5:fc:ae:e4:ea:89:ff:32:42:2a:75:17:9f:f8:
         a5:68:37:0b:46:be:d3:58:ba:f3:fa:e7:10:f1:a6:48:db:d4:
         4c:4b:f3:f7:f0:e9:d6:de:f9:b6:33:29:49:c3:94:9d:73:aa:
         a5:64:77:84:3e:47:b1:66:6e:37:a5:82:6c:5c:90:92:36:22:
         6b:eb:43:49:5c:2b:be:70:f4:b6:ed:75:74:f4:f2:2c:a8:8f:
         c9:4f:5b:7b:8a:04:3e:a9:cd:62:bc:e6:b2:99:73:21:25:bc:
         3f:2a:6b:2c:65:f2:b4:52:2f:6d:1d:ce:e6:fb:e4:19:05:1e:
         f1:e5:e0:e3:4e:11:95:50:15:6b:c7:cf:33:d9:fd:71:3b:f5:
         88:1f:85:7c:76:06:7d:53:64:17:cc:84:4f:99:65:9e:0f:41:
         82:15:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----