Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File:                     4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier:          wm1eAPBdE7FFqnDrzZHOub4c+3SQSbVIo0qGuut39p0=
Subject key identifier:   42:0C:37:5B:F0:D5:7F:52:02:9C:19:C4:2A:48:44:25:E8:BD:FA:3F
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer:       /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial:       01962DF418F812A47799D30D3D3B372FD5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number:          0804
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: fPFY78MM9uTiGlV8KyJ3duJio6Is2TdjxmRpR7VQApo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:18:f8:12:a4:77:99:d3:0d:3d:3b:37:2f:d5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=420c375bf0d57f52029c19c42a484425e8bdfa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:59:9c:d4:31:e9:2f:0f:c3:79:da:4c:37:
                    e8:ac:77:54:22:2d:77:fc:8a:f2:58:1c:88:bb:5a:
                    eb:43:7f:11:e1:a8:72:ef:83:01:1d:d9:2c:02:89:
                    8e:95:da:09:e7:7a:ab:22:97:b5:61:6f:ae:eb:1e:
                    ee:8e:cd:7d:c1:53:31:87:ab:6f:ce:1f:bc:56:32:
                    c0:c8:13:78:3d:3c:34:ae:ee:f6:23:4d:e2:07:13:
                    06:cf:2f:df:e2:75:fc:f2:1a:94:5e:be:fa:7d:96:
                    1d:0c:1d:a0:9d:2b:77:61:38:4b:1d:87:05:84:95:
                    2b:21:4f:e7:39:da:4e:e3:11:3c:28:fb:8e:a1:d8:
                    aa:41:db:70:cd:dc:c1:e4:88:d9:1f:7a:a0:a2:51:
                    38:d2:5a:a6:3f:64:7e:fb:55:3d:cb:fd:24:d3:b4:
                    08:28:c9:a2:02:a0:63:14:31:39:ce:4f:e1:f7:d1:
                    2f:d1:5b:26:16:fe:6c:9f:01:c8:a3:d1:19:74:ef:
                    b9:2f:24:d6:93:da:d6:93:a3:3d:ea:88:d7:e8:04:
                    e9:9c:69:fc:fd:35:87:0b:62:75:98:0f:e1:d9:5a:
                    51:c0:54:52:30:7b:3c:ac:e4:d8:9d:2a:6d:a3:69:
                    3e:c8:58:21:ee:64:6c:e6:7e:78:04:24:01:1b:10:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:37:5B:F0:D5:7F:52:02:9C:19:C4:2A:48:44:25:E8:BD:FA:3F
            X509v3 Authority Key Identifier:
                keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:72:06:60:a3:dd:d4:80:9f:af:e7:18:d5:0e:05:ee:11:e6:
         14:26:eb:21:fc:f3:a0:f1:db:04:b6:af:f2:9b:fc:f8:44:26:
         2c:f1:60:3d:f7:27:32:bf:cb:83:56:ec:0f:07:6c:05:39:55:
         f1:be:a0:11:e7:b2:69:0f:f6:71:96:ab:f5:b8:db:37:c7:8b:
         3a:ae:96:5f:7d:1f:8c:0e:8e:fe:53:f1:48:20:39:67:8a:72:
         54:3a:4e:8f:68:3b:3d:91:17:e3:09:2b:24:7e:4e:ca:30:da:
         20:01:41:73:27:b3:91:e3:2b:00:68:e9:ea:d3:6c:7f:b8:ff:
         2f:4b:b7:e5:1c:8d:dc:4e:28:9f:03:37:81:67:4e:5e:54:d0:
         59:b4:ea:f3:60:d5:dd:e9:06:cc:c1:37:11:1e:48:f0:55:7b:
         ed:1f:b0:03:8e:07:54:ba:6d:e3:61:ee:da:ed:2f:5c:0d:df:
         44:e8:b9:44:a5:8a:90:bd:d4:2e:9d:14:d4:41:2f:b9:27:8c:
         3f:48:5d:41:b1:8d:41:43:83:99:f4:85:b7:48:31:b6:e9:7e:
         4b:37:f5:40:64:fa:cf:b2:8f:74:c9:06:29:c6:de:9b:fc:1e:
         e6:16:c3:6f:be:ce:c9:51:6d:94:08:83:03:6d:df:8d:9a:6b:
         2f:83:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----