Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          mcQsgZrOAUfg3JqhvWyiaZsPCXmJTEd6AIQ1b9MFHAA=
Subject key identifier:   91:61:1B:53:7A:99:0D:41:4D:75:CA:64:E8:C5:46:2E:8C:B3:F6:05
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       01962FAB531366D750C6C6A8BF3C149013BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: a24HUzYqdKTgwap25DiEPbN6lMRpccNT6GdaunmKlnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:13:66:d7:50:c6:c6:a8:bf:3c:14:90:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=91611b537a990d414d75ca64e8c5462e8cb3f605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:d8:a9:c0:1f:a8:fe:5b:83:43:20:f4:94:
                    fe:85:cc:5e:15:54:44:f6:e5:30:14:13:85:3a:95:
                    8b:28:53:cb:9b:20:cd:39:69:52:0f:40:9c:8a:b0:
                    ed:a4:d0:d3:b3:9f:b2:7e:81:31:80:29:ff:55:7f:
                    47:23:af:fb:0d:be:14:72:1d:7c:dc:47:8b:d8:73:
                    5b:72:33:dd:1e:a6:f5:6e:71:9a:07:27:c6:68:86:
                    03:a7:fb:00:28:5e:05:12:08:23:b0:b3:97:75:9c:
                    2b:62:f2:4b:31:00:24:42:b7:d1:13:43:2d:fd:f1:
                    de:cc:0f:af:6a:c2:b0:34:88:0f:9e:bc:c9:f6:1b:
                    ea:c1:82:0b:c3:ef:f9:3d:4e:13:46:57:a3:3a:af:
                    5b:ac:03:b0:c8:9c:d8:86:8d:d3:16:a2:31:cb:3b:
                    65:28:80:93:61:ed:fb:36:a0:ca:55:b9:d7:bd:dc:
                    e2:fb:ea:45:db:47:05:0f:44:0c:59:8d:c7:e7:27:
                    ae:55:a2:c9:b1:e5:e0:a6:99:7f:50:5c:49:14:d3:
                    f3:44:3d:84:be:18:13:97:da:ed:b7:1f:cd:73:62:
                    78:64:1b:47:e0:ea:9a:88:75:4f:36:e0:4d:af:83:
                    19:1d:a0:ba:9e:e3:d8:1b:82:9c:9d:41:73:e2:b3:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:1B:53:7A:99:0D:41:4D:75:CA:64:E8:C5:46:2E:8C:B3:F6:05
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:4d:39:c8:9d:29:ea:69:16:38:95:36:08:51:4d:c5:0b:
         64:0a:e3:5d:59:2a:0b:fe:2f:c4:27:1d:1d:d0:f5:6b:84:4d:
         38:4a:50:11:bb:97:3b:18:71:57:22:f2:c2:80:9c:30:e6:8c:
         59:fb:25:56:bc:fa:af:ed:7a:ac:05:ac:46:0c:1c:71:44:4f:
         6a:23:e8:58:3b:3a:19:03:48:44:fc:65:60:03:bd:79:77:6d:
         24:6e:3d:db:fd:30:20:2b:0f:06:8f:4d:ab:49:af:60:d0:e0:
         24:73:94:92:cd:27:0c:bd:05:05:6b:c6:78:f9:30:62:d5:7c:
         6b:36:16:8a:db:68:a8:7a:b2:f3:fa:f6:46:a1:a4:c6:a1:2d:
         87:d8:1b:07:9b:20:23:8c:72:56:69:2d:b7:93:e0:8a:d2:24:
         2f:cb:5e:44:df:25:38:e2:82:17:31:c6:6f:ac:b0:91:06:2e:
         87:bc:83:7a:76:d8:e6:ef:69:ad:6e:d5:e9:56:73:0f:4c:99:
         8e:1b:02:c3:50:63:ee:94:af:e4:a4:ec:55:47:09:91:b2:8d:
         fd:33:72:b8:2c:f8:2e:21:fd:88:24:29:6a:90:31:17:a6:9a:
         bc:42:80:73:b7:98:78:36:8c:5a:2c:3f:84:e3:00:18:fb:30:
         6c:47:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----