Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File:                     rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier:          Ft1Q+054RtiqoY4LoY89uYBMR4dtPuUC5yMpcj8qX+w=
Subject key identifier:   24:5C:56:42:81:34:12:51:B2:3A:13:B1:F7:12:47:C7:8B:BC:26:46
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer:       /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial:       01962E98A09F371EB8EB8AC0F1FEFB5C9C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number:          08E1
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: zt40aNIFH9Tvf2tVFjXnAW7fT1oWEwrN/Wi+cTwjYxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:9f:37:1e:b8:eb:8a:c0:f1:fe:fb:5c:9c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=245c564281341251b23a13b1f71247c78bbc2646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:81:6b:9a:1c:bd:e3:30:f6:98:e2:22:91:
                    31:cf:d9:88:a8:b9:46:46:b7:37:14:7e:fd:02:bd:
                    4c:20:6e:33:9c:08:bc:a2:b7:f1:d9:e6:e2:a8:55:
                    ed:7e:f1:d2:a8:16:e3:59:80:28:04:5d:ad:37:37:
                    38:ed:6b:c8:67:2b:8f:4f:1c:f9:3f:64:36:6d:7d:
                    50:97:7c:a4:cf:f8:99:81:c0:ef:64:40:c9:2e:59:
                    8b:f7:c5:6b:23:32:0d:f2:37:35:53:d2:09:44:c1:
                    70:ec:50:a1:85:f9:3e:ff:d9:79:6d:2d:55:01:b4:
                    c8:03:00:2a:90:29:28:db:24:59:ac:80:2d:74:d2:
                    72:29:b6:bc:10:0b:57:7d:bf:25:83:f1:4a:3f:d2:
                    33:bc:66:17:79:fb:c7:bb:10:45:42:26:8f:2b:49:
                    6b:22:13:4e:b3:7b:92:0f:0a:e5:2e:88:fc:01:dc:
                    13:e3:09:0d:dc:ad:4b:e5:b5:23:72:22:fe:18:64:
                    89:fa:78:a0:ed:63:f2:3c:10:f3:f9:00:ca:fa:9d:
                    da:e3:f4:12:4f:46:95:f6:cc:7a:23:08:e0:1b:f0:
                    2a:2f:cf:d9:7e:bd:7c:9e:8b:8c:df:ca:2c:95:a3:
                    f2:4f:5b:ea:bd:c6:1a:bb:29:09:a7:7f:45:24:f5:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:56:42:81:34:12:51:B2:3A:13:B1:F7:12:47:C7:8B:BC:26:46
            X509v3 Authority Key Identifier:
                keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:bb:c1:13:48:1e:ad:73:e2:db:b7:30:7b:76:00:df:7e:
         39:37:29:af:3c:9b:40:80:4c:3e:77:9f:e0:00:24:e9:58:54:
         30:12:f8:7d:dd:48:c8:45:08:08:76:3c:bd:d5:40:33:73:01:
         87:17:af:4f:67:df:6a:64:65:c9:80:48:e9:94:b9:e9:65:ed:
         cd:21:2b:c9:4e:b7:98:40:07:5d:76:14:f2:9e:0c:5d:b8:a1:
         93:23:a4:2a:cf:16:55:5d:ac:ac:31:16:85:cf:89:67:79:24:
         81:49:66:98:fb:fb:b0:a0:cc:64:e2:6d:42:25:66:22:7c:b8:
         96:eb:91:eb:10:54:ed:4c:7f:d1:30:00:e8:6f:9f:00:ee:4a:
         9c:af:09:cc:5f:e2:d9:a3:4a:75:a2:cb:f6:7c:83:00:80:1e:
         d6:5f:ca:8d:ff:66:c5:27:0f:5d:6c:d3:7e:d9:09:54:fb:0a:
         be:da:52:90:f8:ab:1e:6e:25:0d:ab:51:3a:a3:26:77:62:b3:
         c7:28:4b:dd:1e:d3:98:76:4b:1a:7b:cd:db:92:6b:d7:14:fa:
         4a:be:eb:21:e7:69:5e:f1:00:57:c2:37:23:b2:a5:82:dc:35:
         ae:93:11:a9:f7:4e:49:df:00:9a:00:ef:3c:e0:79:3b:6d:1c:
         e2:b7:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----