Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          J5cUVjQD2Gj9ToA/6IxP3hmMTUi0w2WQ0bk/LD6+2KM=
Subject key identifier:   F5:DD:B7:24:42:E9:B3:D0:8D:D5:00:3D:1C:0B:1D:D0:DE:66:4B:70
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       01962E98A7FFF4D51A2FBA36C9B96F2DEDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: VOkWYC+sEbTGUTGLlpUYAnqfR8ADdfb6Ax+lYEHV7OM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a7:ff:f4:d5:1a:2f:ba:36:c9:b9:6f:2d:ed:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=f5ddb72442e9b3d08dd5003d1c0b1dd0de664b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:a8:42:d5:b8:74:3d:a4:27:df:39:33:58:
                    ea:36:6f:66:0f:94:2f:37:8a:b3:54:f4:73:7a:48:
                    12:74:e0:d8:cc:8b:25:eb:4c:c7:18:9b:f5:ba:d9:
                    b0:91:81:04:87:9c:d7:21:9c:32:8c:99:33:d9:80:
                    74:e3:05:f3:90:11:27:07:9d:e1:d0:2d:e7:7f:02:
                    37:ca:c0:9d:1e:c9:a3:7c:e0:2e:15:8a:1b:45:f8:
                    7c:b1:82:5d:65:24:be:cd:84:9d:49:ee:41:94:9e:
                    fc:89:39:c4:75:e8:a8:d5:e9:c6:a7:56:80:6d:75:
                    bb:b1:72:62:61:78:de:7d:95:07:98:d1:23:fb:9a:
                    d8:e8:a3:4f:97:18:6a:3d:83:c7:f2:18:36:3d:56:
                    d4:cf:b4:99:50:ca:11:c5:09:cb:0b:c5:e3:6f:0d:
                    1f:8c:90:56:ec:79:c8:b4:e9:23:23:c5:d5:00:2d:
                    8a:f0:3f:02:d6:a6:20:1c:17:df:23:28:3c:94:c6:
                    20:47:63:0e:ba:a0:63:95:05:f5:ad:6c:96:82:b6:
                    5c:c0:ee:1c:11:b8:39:b0:54:b6:12:92:06:8f:e8:
                    12:50:16:9c:3e:c4:de:ff:44:75:80:de:d1:9c:62:
                    fa:b1:8e:02:d4:ff:83:93:98:0d:da:c3:70:62:1d:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DD:B7:24:42:E9:B3:D0:8D:D5:00:3D:1C:0B:1D:D0:DE:66:4B:70
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a0:1d:f8:d6:f0:82:be:1c:49:15:a3:66:97:a4:28:50:38:
         e1:07:f9:df:de:d6:88:28:9c:01:21:12:87:cc:60:df:c3:34:
         d9:55:55:13:21:a7:e8:78:f7:5e:22:c7:0f:0f:69:73:ef:be:
         cc:64:6d:b6:73:4a:6f:24:b0:4a:35:26:69:98:47:07:0b:7c:
         10:92:78:62:28:b5:48:d5:43:81:02:9c:38:a5:9d:86:1a:a7:
         92:b3:42:7d:3d:fa:4d:da:3a:a0:2b:c7:37:94:7e:9c:5d:c7:
         c4:16:be:2c:00:2b:13:73:f9:08:3f:a7:e0:b4:da:59:0c:01:
         68:57:0a:ba:c0:7b:1d:88:ac:98:d7:d0:d6:78:c4:0a:2e:30:
         46:09:0e:b1:2d:d4:99:9a:e4:58:b5:59:21:71:7f:99:17:11:
         e5:cc:f2:cf:28:a5:e2:76:4f:15:a2:84:d4:95:c4:2d:8a:79:
         f3:af:ae:54:73:12:83:12:54:67:77:6e:44:9d:e2:0a:cf:d5:
         13:0c:f5:d5:23:01:2a:14:71:53:44:08:f8:02:b7:c1:df:34:
         4a:f9:04:20:3c:07:83:e3:bb:a9:f2:51:b8:c2:72:06:e1:3e:
         33:13:79:84:db:0f:f2:68:37:9c:fe:33:cd:95:df:1f:7d:bd:
         aa:a6:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----