Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          FvYKqMgPuz3GtScupSH99TQsU6fsu8GiSybD8drjYMQ=
Subject key identifier:   76:72:1D:CA:0D:45:42:46:70:A7:1E:D0:0B:94:37:77:D9:1B:C5:1A
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       01962F3DB3215A6A7A30BF14E5C8286C64EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: cXmCrR2uQfT3wNM/KjwxpF1hKErWhw7Nu86b05vCdj8=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:21:5a:6a:7a:30:bf:14:e5:c8:28:6c:64:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=76721dca0d45424670a71ed00b943777d91bc51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:bd:9a:5b:8a:9d:63:f5:73:25:de:0c:2c:
                    22:a2:dd:33:7d:e7:d8:c0:8d:bb:b1:57:5e:3c:14:
                    66:f8:47:c1:cc:eb:ec:2a:b8:22:f4:04:08:d4:d2:
                    50:63:30:89:20:af:b3:0c:11:de:6d:c5:56:e6:ca:
                    43:43:ff:22:8c:19:c7:9a:26:01:4d:18:61:22:e5:
                    89:95:57:7d:1a:85:32:72:bb:24:63:ff:68:b4:ad:
                    45:1c:41:55:85:50:ca:ed:de:01:f1:8e:76:9e:e2:
                    51:6d:56:a1:0c:0d:ba:54:85:12:11:31:0a:f7:cc:
                    c9:a1:56:fb:96:54:68:68:59:7c:ff:e5:c8:2a:20:
                    39:e5:f6:80:05:7b:40:65:c9:e8:4e:8e:17:b7:3f:
                    43:38:9f:0c:2d:2a:ab:d5:89:7a:e3:33:c4:45:df:
                    ff:28:5f:ef:73:bb:0a:f3:09:c7:ff:ec:3a:3f:89:
                    66:87:e9:8d:e4:bb:dc:48:35:fd:5f:4c:33:86:54:
                    5f:30:f7:19:91:64:6c:e7:90:13:37:8c:c6:e7:38:
                    37:f3:43:09:79:dc:45:b4:21:5e:62:3c:cd:d6:54:
                    df:22:cf:94:05:98:cf:f5:24:06:a5:c2:ba:8f:9f:
                    71:58:e3:8f:ec:7a:cc:b3:54:6d:74:ca:6e:28:a3:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:72:1D:CA:0D:45:42:46:70:A7:1E:D0:0B:94:37:77:D9:1B:C5:1A
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:2e:4e:25:a1:43:56:a5:c6:31:35:7b:6f:d0:1c:f2:27:
         35:1a:5b:05:4d:2d:fa:42:85:09:79:0f:66:7d:41:ca:00:68:
         9e:94:77:6d:63:fc:bd:f0:2b:e0:aa:a9:c5:e3:12:75:a7:13:
         51:7b:69:6e:4d:34:9d:85:05:9d:f0:ec:21:a5:f3:8b:ee:a4:
         66:ac:ca:51:ff:6c:05:d4:ef:9b:ed:4c:a6:99:44:d2:36:88:
         1f:17:33:f1:f0:24:6c:11:17:fb:0e:f3:e3:2d:d9:e4:36:83:
         71:38:f1:b0:58:ae:a8:e1:c5:c8:c5:e7:eb:13:64:c9:40:52:
         ec:a3:c9:9a:87:f1:0c:69:c0:31:12:fa:ef:28:3b:cc:ea:08:
         cd:ce:37:ab:e6:d1:66:9b:c3:78:d1:8d:e8:6f:03:72:32:fd:
         70:19:1a:13:40:17:eb:8b:b4:8f:36:36:4e:69:da:7c:63:e0:
         15:3c:55:82:e1:bb:ea:12:a6:ca:76:19:5c:75:3e:e2:35:15:
         ab:29:36:a9:d1:8d:77:dd:fc:99:8f:50:b8:d9:34:f7:47:3e:
         34:9f:4d:78:eb:5f:66:58:28:46:5e:ba:0f:bf:fa:15:01:c8:
         56:78:ef:1f:6a:0b:27:01:b2:e2:4b:11:97:a1:68:ec:d5:2d:
         b0:b8:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----