Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File:                     rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier:          DSFJ5j/Ma/VJmIiWRSbgQ+cTn6mYMFUQQ4YNqjVUAQk=
Subject key identifier:   FF:4F:43:C4:0C:47:29:6B:47:48:3B:4E:61:F9:1C:91:C3:C2:A5:00
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer:       /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial:       01962E98F797437F749A257A17A05CEBEFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: B2cSp65JvQ3i07V4t/Xg5cUZbU6NwQyYx+njPZ+6lTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f7:97:43:7f:74:9a:25:7a:17:a0:5c:eb:ef:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=ff4f43c40c47296b47483b4e61f91c91c3c2a500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:5c:3b:40:f9:59:53:15:bd:74:a5:4a:48:
                    9f:ec:d8:5b:19:bf:8b:bc:00:91:82:c6:96:0b:56:
                    97:5f:de:53:41:67:31:13:f7:47:52:a6:71:9e:a2:
                    d5:24:b3:32:9a:10:06:7d:a6:f9:30:46:b0:73:1d:
                    29:db:74:b5:88:38:af:93:36:1d:d9:e1:46:08:22:
                    4d:8e:26:8d:05:93:43:99:75:0d:34:b3:9d:74:a2:
                    64:d6:94:ef:9a:7d:3c:ac:c1:80:a2:0d:28:95:eb:
                    3f:21:20:30:1a:45:2f:29:47:cd:bc:04:0b:93:1f:
                    b2:42:92:43:64:9a:22:dc:9c:9f:db:8f:d9:23:72:
                    b6:50:72:8b:92:5e:4b:1c:53:6f:40:c9:bb:70:ba:
                    10:90:65:e0:39:a0:4e:bf:54:7a:9c:7d:2c:cf:9a:
                    7c:91:d0:1a:30:18:ab:5a:5d:97:fd:bd:2e:55:a8:
                    7c:43:35:1e:f1:43:f5:c5:d0:d0:e2:8d:d5:05:fa:
                    6d:b8:ff:69:c4:0e:88:64:4d:54:94:f6:ad:b5:3b:
                    de:73:a7:3b:0c:0a:85:0b:1b:9c:5c:89:0b:f1:ce:
                    a2:a2:cb:9f:3e:ff:3b:26:22:e3:1e:33:38:44:13:
                    db:a2:f6:e8:59:31:72:21:f0:7f:58:93:04:b1:8e:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:43:C4:0C:47:29:6B:47:48:3B:4E:61:F9:1C:91:C3:C2:A5:00
            X509v3 Authority Key Identifier:
                keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:0c:e6:c9:de:ac:15:7e:b6:75:ef:3b:e9:c1:4f:a0:88:
         d5:70:a4:e3:d1:89:fc:66:59:55:e3:ad:65:ad:0c:61:d6:71:
         19:03:ab:e5:ff:6a:f5:4e:26:13:fb:03:cc:76:98:b8:9f:b3:
         77:ba:1c:a1:84:2d:e0:e3:24:a4:3d:0b:02:97:3d:06:7f:76:
         32:01:0f:d6:48:b4:b9:0c:1a:09:7e:0d:4f:a0:cc:de:69:30:
         83:2a:78:b3:cd:ed:0d:20:7c:06:b2:79:2c:be:66:ca:90:6d:
         23:84:68:fc:56:66:97:34:bc:2e:f7:0e:5a:42:d0:fd:5e:dd:
         b4:11:65:5d:d8:d4:e4:c3:54:fa:b9:e8:de:97:ea:63:c9:59:
         e9:9a:44:55:82:9a:8b:95:4a:76:15:b2:28:a6:15:dc:70:0d:
         57:6e:17:1b:bd:56:32:fc:94:63:75:86:4c:9a:63:94:14:ec:
         94:ac:0f:76:0c:76:63:db:0d:20:19:69:df:53:c5:f2:02:e4:
         98:5d:c0:cc:80:e6:a7:41:bd:44:91:3f:21:20:d1:f4:5e:ca:
         78:0e:e4:02:54:8e:6a:23:cd:06:1c:ae:01:7d:20:f1:c0:36:
         da:7b:71:0b:8c:de:4a:7f:19:e7:88:f0:06:87:3c:b4:55:63:
         69:b3:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----