Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File:                     INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier:          4+vsAPNYwynSAGYf86LKhdGg/8rWpuP09czicJ3n7Uc=
Subject key identifier:   DE:57:14:9E:3C:6D:F9:09:02:23:D8:20:76:8E:CE:93:D9:0B:E7:02
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer:       /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial:       01962E98C861B948D55287589F2B03AA1A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: Cds9k60ecKLHy37GcgrWt41pea2xD4nW4W01OmXpCvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:61:b9:48:d5:52:87:58:9f:2b:03:aa:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=de57149e3c6df9090223d820768ece93d90be702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:28:fa:3c:0e:9e:73:1c:60:ee:f8:64:a9:
                    e8:ca:fd:96:1a:fb:46:6d:ea:96:0f:cc:6a:ab:3b:
                    dd:40:e6:71:e0:77:ee:e1:27:25:0e:4b:ba:f4:93:
                    9c:02:95:f3:a0:05:6c:f3:08:e4:be:b2:8a:ef:ad:
                    f4:fe:7e:c1:46:9f:93:40:a7:24:91:df:2f:e7:18:
                    de:ca:fc:a4:98:64:72:08:1c:26:5a:a6:27:32:4d:
                    33:0e:07:b8:8f:61:59:92:cc:92:a7:fe:40:6e:cd:
                    28:d2:b7:cb:45:06:d0:8a:95:4f:a2:4a:9f:fe:04:
                    23:92:73:62:cf:0f:47:c8:5d:57:0c:b2:6d:82:f1:
                    2e:1c:63:f3:01:59:3a:f4:28:84:9d:ff:80:bf:e3:
                    12:f9:2d:56:20:b3:aa:a2:98:37:62:0d:41:f6:4b:
                    fd:ac:37:42:3f:65:76:cf:80:76:38:4b:86:a8:a1:
                    6f:f1:c2:b3:37:96:e4:e2:d1:91:0e:f5:0a:8c:1e:
                    35:6e:e6:62:58:74:89:43:88:2d:4e:c9:98:c7:ea:
                    ba:71:28:c6:df:9a:fb:ca:ba:24:4a:86:e5:52:c6:
                    0e:d8:f2:f5:ef:7a:44:95:a4:9e:ab:92:65:69:a0:
                    a0:8a:be:94:cb:b8:20:65:7a:2b:61:e2:d1:0a:e9:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:14:9E:3C:6D:F9:09:02:23:D8:20:76:8E:CE:93:D9:0B:E7:02
            X509v3 Authority Key Identifier:
                keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:03:7a:ee:62:57:23:6a:8e:f4:a4:6e:c3:43:b8:16:40:
         7c:af:d7:d6:de:48:54:3e:27:c9:2a:fc:1b:d3:8b:1a:c3:55:
         02:84:b2:0f:e6:69:ce:77:e1:54:98:20:fb:11:ab:3e:52:1d:
         96:f5:33:df:66:0c:dd:a2:90:41:bc:61:94:6a:37:bf:55:a9:
         f0:b5:4e:29:4c:b2:97:d7:b0:48:48:d7:34:b8:05:4e:43:8e:
         bb:f7:13:29:e9:3a:3a:90:9f:94:f2:f0:2a:65:76:84:53:f9:
         fd:b9:cc:40:0f:3c:e9:61:e4:ea:86:4c:57:21:ef:c3:b6:43:
         97:76:6b:af:b7:f6:b0:5b:80:a3:43:c3:33:28:65:39:81:5e:
         fc:c7:07:30:26:fe:f9:bc:b1:5e:24:fb:f4:59:9a:07:c9:67:
         45:e5:5c:1d:3f:2c:5a:09:21:8f:3f:82:ff:9e:2f:f4:87:12:
         4a:39:c8:8f:f9:8d:a3:c3:7c:dc:73:b4:a4:16:09:c8:d6:12:
         ba:17:fc:08:18:07:eb:da:8f:b0:4f:68:00:fb:bd:48:3a:f6:
         11:d0:03:61:94:40:e5:0e:67:fa:8e:eb:e3:82:2d:af:24:08:
         59:9b:c6:6e:25:c3:e3:50:77:3e:52:fd:ea:16:35:92:a3:11:
         62:4b:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----