Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File:                     Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier:          LyMtLins24MKCJKV10nVwBQtEZZVNA6wF25HbGL03Tw=
Subject key identifier:   E1:B0:0C:19:BF:1D:C2:69:8B:88:83:4A:13:9E:D0:36:C7:75:54:D6
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer:       /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial:       01962F0746A944B08CFDC42F324EEB52A519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number:          0849
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: bZOBhnN28KrDic6EBF6y61jMUSv6kqU7XK+LfEM+Hm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:a9:44:b0:8c:fd:c4:2f:32:4e:eb:52:a5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=e1b00c19bf1dc2698b88834a139ed036c77554d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:76:ff:6c:f8:25:bc:cd:e6:37:59:4c:c1:
                    00:c3:c1:cc:b7:6c:8f:3d:47:b7:47:2e:5c:e2:fa:
                    c4:37:25:da:1c:d8:9f:a7:a2:2a:c5:17:65:cf:88:
                    e4:cf:44:06:38:96:32:86:42:c0:08:cf:f8:99:2e:
                    2c:d8:fd:c9:54:bf:14:f6:fe:0e:85:6e:ec:e6:d6:
                    b9:b0:c2:a8:6a:ed:d8:f3:8e:eb:f2:5a:2b:ee:47:
                    e4:ee:e0:fd:13:07:ee:4d:81:2d:cf:87:48:18:57:
                    9c:d3:de:d9:d6:64:be:b7:68:59:61:17:1a:a8:1c:
                    7a:77:05:7d:86:d4:f4:e0:76:77:58:b1:24:c8:cd:
                    2b:84:e0:78:89:62:51:fe:bb:2f:92:34:2f:54:bb:
                    1c:d2:8a:7a:78:4d:c0:74:9f:11:fe:27:5a:59:ec:
                    f2:bc:b5:73:6f:11:41:5e:7c:c3:f2:05:8b:5a:a2:
                    8d:57:92:26:90:7a:a9:f2:01:c1:72:cd:d5:1d:f0:
                    6c:3d:1c:70:e9:76:e3:b0:4f:68:63:68:67:b4:69:
                    5d:1a:d8:b6:94:3f:fa:2e:57:7e:fb:7e:42:07:53:
                    3e:8a:e1:28:e1:72:c5:14:33:7b:0d:4e:16:bc:8a:
                    ca:69:3b:34:97:88:69:86:84:a2:d9:d6:ac:cc:df:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:0C:19:BF:1D:C2:69:8B:88:83:4A:13:9E:D0:36:C7:75:54:D6
            X509v3 Authority Key Identifier:
                keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:dd:7e:ac:ff:a1:01:b5:ad:04:e4:2a:35:5c:8a:ce:d1:88:
         12:5f:7d:05:33:89:60:38:17:d3:b2:f5:7c:8a:6e:c0:87:b3:
         4c:b4:5f:b5:3b:3d:b4:9f:2a:e0:ea:91:9a:45:36:20:04:47:
         1e:3b:2e:ff:ff:2b:12:4c:73:df:29:1b:55:06:c5:73:64:fa:
         b7:a8:c4:cb:b1:52:4b:42:fe:03:b8:0f:3c:c1:44:4c:5f:a7:
         2b:1c:d1:1a:de:4b:82:03:3a:86:c4:df:93:2b:86:79:6b:a5:
         d7:a0:b7:b2:4e:69:92:27:30:f8:c5:dd:8a:1a:43:98:78:66:
         64:df:d7:ed:03:5f:3e:73:da:2b:f4:74:47:0d:10:d7:33:a0:
         9a:02:35:b9:19:e7:36:bd:26:88:33:08:cf:b5:ff:67:d6:c7:
         de:20:d5:e3:a8:8b:a3:dd:f0:8a:de:a7:5f:8f:f9:79:41:ea:
         16:2e:7c:1e:6d:94:7c:30:13:f9:9e:64:9d:30:da:35:0f:d7:
         0b:81:a8:ba:f8:21:1e:ea:04:eb:a8:2c:24:58:83:f0:12:88:
         27:ad:a8:2b:12:74:a1:1d:cb:99:8d:99:03:b8:b7:e4:45:6c:
         f4:01:9a:d0:50:0f:ee:02:6a:31:7d:32:81:67:50:e5:fd:b1:
         34:1e:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----