Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
File:                     avKqUEvzdkSAPC7vFgTThgsd74Y.mft (raw, json)
Hash identifier:          c4tnypcdSjWMXk0hRnpqJg+lyp5BIDjzf9D8+MXZYcM=
Subject key identifier:   E1:A0:CC:C2:A6:FF:9B:A4:30:63:D4:F0:88:3E:08:3F:DB:17:1F:4F
Authority key identifier: 6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86
Certificate issuer:       /CN=6af2aa504bf37644803c2eef1604d3860b1def86
Certificate serial:       01962F3DC54505EB69A7958E6D4AD71B2E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
Manifest number:          0449
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: avKqUEvzdkSAPC7vFgTThgsd74Y.crl (hash: P7GEnw2Ic/uf4TlD/Md7meWSoc6Bkmie1RZaG70bbig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:45:05:eb:69:a7:95:8e:6d:4a:d7:1b:2e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af2aa504bf37644803c2eef1604d3860b1def86
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=e1a0ccc2a6ff9ba43063d4f0883e083fdb171f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:5e:b5:d3:90:96:40:5e:db:64:6b:0e:6f:
                    78:4a:2e:41:7d:6d:9c:8e:2c:84:07:9e:31:e0:b2:
                    af:02:40:8d:ff:4a:4d:c1:f1:6a:ba:e5:a0:6d:28:
                    0e:8c:8a:ad:ea:7d:a5:11:19:9c:6a:2b:29:7b:47:
                    56:0a:48:45:3e:75:02:29:bc:d6:c3:37:e6:32:e5:
                    fa:dd:14:13:4c:a3:3d:25:4f:eb:8b:39:fd:59:27:
                    ec:77:6c:1b:78:d7:82:ad:df:d9:56:92:44:9e:ea:
                    85:70:13:8b:69:49:35:03:94:2c:f5:18:0e:78:b1:
                    95:d4:48:89:1b:13:07:22:20:71:8d:f8:eb:a8:9a:
                    01:d1:c8:3f:6f:b1:69:4f:b1:ed:da:8d:32:72:56:
                    70:56:bf:53:d7:f9:49:81:70:34:44:9d:3f:01:d2:
                    a2:5f:b9:8f:da:5f:55:c0:ab:62:90:a3:06:e6:de:
                    f4:1d:60:80:fc:4c:db:07:38:e1:33:93:97:c3:4d:
                    a9:74:c0:34:54:06:8b:4c:71:d1:c0:ca:b6:42:e9:
                    b9:42:ed:e4:61:da:84:fe:9c:a3:b4:6e:cf:f9:42:
                    26:b2:9b:dd:54:64:9e:da:66:a5:56:85:26:2e:1c:
                    1d:28:c6:ea:e0:a2:1d:bd:a8:8a:ca:ce:40:ca:2e:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:CC:C2:A6:FF:9B:A4:30:63:D4:F0:88:3E:08:3F:DB:17:1F:4F
            X509v3 Authority Key Identifier:
                keyid:6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:42:64:cf:91:91:89:2f:a4:c6:58:07:2e:45:46:b7:51:0e:
         e7:d7:23:e4:59:7b:a8:a7:10:df:c3:08:f8:e6:29:7e:29:cb:
         c4:c4:f2:e2:94:96:1e:6e:41:2b:6c:93:1c:7e:23:8e:da:56:
         ff:c1:97:8e:a5:f2:86:d1:df:15:d7:46:de:77:05:18:8f:ff:
         71:ad:17:63:9f:77:b3:62:b6:8d:64:1f:24:ef:17:79:59:6f:
         39:18:5d:68:62:69:01:4c:07:d8:fa:40:f2:15:92:20:2d:a8:
         a4:0a:57:89:9f:83:ac:c3:94:87:48:55:fc:0d:7f:dc:53:5c:
         a1:3e:68:c6:6c:b6:b1:88:21:23:48:9e:b5:84:77:be:aa:cd:
         3a:81:e8:cb:1b:71:ca:62:ba:45:bb:09:a8:38:50:74:0b:8d:
         6c:70:f6:fb:bc:c3:ed:19:f1:3c:d1:e6:56:db:fa:f8:54:5d:
         80:44:79:c0:04:2c:09:08:62:5b:65:09:2f:9d:a3:c5:e0:84:
         48:73:75:90:04:d0:3d:a9:8c:f8:3e:50:f9:63:4a:cb:54:5d:
         7d:af:03:dc:37:c1:01:db:9a:ce:c5:6c:be:9c:55:d5:ad:05:
         e3:48:d9:c9:be:c1:3d:30:53:34:2c:96:9d:9c:dc:a0:1e:8f:
         4f:71:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----