Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File:                     4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier:          MiyEvDBnlbirjO4baCjgPEA1PgtW1KmLPKi4yd2AOD0=
Subject key identifier:   1E:9B:68:4F:52:99:09:78:DF:3C:92:62:24:FD:C0:70:39:A1:8B:BA
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer:       /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial:       01962DF413EB764841E6C21CBDB36412FE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number:          101B
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: BFqfESBgqtJFn9dk2UQveI9SDTzmIAGYukEDcvu4ums=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:eb:76:48:41:e6:c2:1c:bd:b3:64:12:fe:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=1e9b684f52990978df3c926224fdc07039a18bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:42:29:b5:8e:a1:7b:18:ab:6c:f0:9c:ee:
                    11:c9:53:ef:bb:9d:be:eb:2c:cf:14:d2:48:e9:1f:
                    3f:fc:49:89:e6:39:6a:1f:73:97:c8:2c:c9:d7:b8:
                    a7:13:61:7e:df:f6:e1:e5:50:61:1a:cf:5a:3f:63:
                    eb:b3:63:07:5d:a7:ce:4f:07:2e:0c:ea:f2:e1:91:
                    2c:30:0a:94:18:a2:18:f6:5d:70:7e:cb:8c:95:f7:
                    e1:20:71:f1:8d:e2:c4:7b:9c:a7:7d:49:83:77:1b:
                    d7:6b:18:b7:cf:cf:7d:7d:d4:76:71:92:d8:b7:12:
                    08:c8:5b:69:23:98:02:81:2d:78:87:19:64:e5:2d:
                    85:15:c9:29:f3:f2:64:71:70:ec:3e:05:ee:37:ed:
                    93:f9:0e:0d:70:f7:25:46:19:0d:da:d8:22:a4:01:
                    d0:95:df:72:c4:03:7b:53:45:65:fb:d8:13:70:b0:
                    66:63:a6:6a:fd:65:da:dc:82:46:7c:b5:18:cb:b0:
                    0d:c3:5f:52:18:19:7d:05:03:37:94:73:7c:86:1e:
                    dc:cc:4c:53:51:16:22:56:44:17:10:9a:5d:b7:fb:
                    3d:6e:56:28:7f:2c:fc:d4:05:fc:cf:50:24:46:b5:
                    9a:aa:23:46:c6:81:4f:79:f0:c1:0a:4c:b2:73:4e:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:68:4F:52:99:09:78:DF:3C:92:62:24:FD:C0:70:39:A1:8B:BA
            X509v3 Authority Key Identifier:
                keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:ed:28:32:15:8a:ab:6c:28:59:1b:67:a2:48:ee:ca:69:
         8a:32:4e:8d:91:d7:1f:9a:a0:cd:89:ec:08:e2:43:06:92:16:
         e8:2c:7e:71:8a:ef:43:22:72:06:a5:2f:75:d4:7a:31:d7:d5:
         de:ec:a4:ba:03:04:2c:3c:98:27:db:e0:b5:fb:76:b6:b1:66:
         e4:c8:0a:8d:5f:d1:f1:92:d0:75:5f:57:b4:90:21:8e:26:24:
         fa:46:c6:43:ae:45:c2:d4:0b:d2:28:25:28:f8:a9:47:17:91:
         cb:c5:0b:2a:63:cf:5a:21:ca:30:70:c1:c2:9a:ec:4e:a9:cd:
         07:be:35:be:1d:5f:a0:df:6e:2e:2f:f3:cf:dc:ea:ae:90:a8:
         e6:82:3f:97:b4:d4:45:ea:b5:ff:e6:6b:7a:90:63:d4:6d:f0:
         6e:f1:be:0e:09:05:1e:20:5f:c3:69:9b:73:d8:2b:1e:86:6e:
         26:f2:ee:1c:fa:30:e0:07:75:e7:13:79:83:71:15:2b:22:55:
         b3:da:45:db:2b:bd:ed:a2:63:e8:54:e1:87:03:e3:22:d7:e3:
         2f:f8:61:04:e6:f9:72:04:63:21:4f:10:25:81:c1:9b:da:f2:
         9f:ec:a8:9b:04:51:1f:6c:b8:3f:d5:d1:d5:6c:d2:14:f0:16:
         b1:7e:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----