Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File:                     AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier:          zA31s9I3MgENwjbF1sj97E4edrkx3V8OQ+pWhe07LFQ=
Subject key identifier:   14:D7:C2:46:85:DB:52:AE:F6:AD:04:3D:B4:B1:8E:93:CA:A7:E5:E7
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer:       /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial:       01962E99C7AC618A8F335DAD2B9601920B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:32 +0000
Files and hashes:         1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: 9/sCI1rhXO53bZoZv9xkjf2Ibf6pI4k39MHrOan93L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c7:ac:61:8a:8f:33:5d:ad:2b:96:01:92:0b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
        Validity
            Not Before: Apr 13 10:02:32 2025 GMT
            Not After : Apr 14 10:02:32 2025 GMT
        Subject: CN=14d7c24685db52aef6ad043db4b18e93caa7e5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:de:fc:bd:b7:c0:e8:0c:55:39:ec:51:01:
                    d5:2a:81:e1:af:57:72:3b:ee:ee:95:17:03:cb:a1:
                    6c:bd:46:1d:36:8a:d6:9c:40:27:24:9f:bc:f0:44:
                    58:d6:1a:8b:7e:14:06:6e:b9:ba:af:75:65:5a:da:
                    09:67:e2:07:e9:a4:66:fb:51:41:77:51:1e:60:40:
                    3a:6a:63:6e:fe:c3:5d:e4:7e:71:c7:9d:e9:19:b3:
                    b5:7b:46:44:b2:d4:3d:88:77:99:7f:37:4b:27:cc:
                    5e:00:b5:66:66:79:b0:45:08:90:e2:1c:d3:f1:a9:
                    43:35:a7:7d:84:29:d1:17:00:c6:19:97:6a:db:17:
                    0f:57:60:ae:5a:e6:ca:0d:32:c9:c2:f1:01:74:37:
                    c2:e1:a3:8c:5e:52:f7:a0:2c:ab:9d:44:b9:ef:42:
                    fa:a9:bd:ca:aa:d7:df:c2:df:63:c8:97:d0:a3:6c:
                    5b:26:c7:69:6a:b8:17:fe:06:82:4c:22:45:69:63:
                    ed:9b:3d:a0:a6:19:6b:e0:b3:f5:84:22:05:46:ba:
                    9c:5e:c1:e4:87:e7:7f:67:ef:42:ab:5b:e9:4e:4d:
                    35:c2:47:ee:7b:03:1c:85:a9:63:56:bb:01:e5:96:
                    22:0a:5e:c0:5a:82:b8:38:1d:86:df:0b:7b:2c:c7:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:C2:46:85:DB:52:AE:F6:AD:04:3D:B4:B1:8E:93:CA:A7:E5:E7
            X509v3 Authority Key Identifier:
                keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:7b:8a:ec:e0:4c:ad:23:64:f5:8f:96:cd:b2:b4:3e:38:
         9b:49:21:39:bd:de:8b:56:b0:38:76:94:8c:e1:30:cb:bf:a2:
         c0:e4:35:32:38:da:f9:18:3f:df:6c:1a:b8:c6:61:56:2b:c5:
         0f:88:34:3a:d2:ad:54:7a:99:ae:61:78:f3:3b:8f:6b:9c:82:
         08:af:65:18:77:a3:f8:58:5d:5d:06:1a:d6:68:f8:24:11:97:
         41:3c:5d:31:1d:c6:aa:a2:a4:2d:a7:e3:9a:28:06:a7:9e:4b:
         7f:79:f4:8a:48:f2:b8:bb:59:76:9e:ee:fd:35:5f:52:c0:bd:
         3a:f6:56:95:25:50:9e:06:dd:39:1f:5d:73:74:d5:73:a3:34:
         03:5f:75:9d:80:e5:10:97:6b:b1:0a:30:61:d0:78:bd:ad:d0:
         eb:03:2e:dc:52:e9:7c:53:12:18:2c:2f:9e:24:76:ba:61:f7:
         e1:c0:52:f1:20:59:28:02:fd:f8:fd:52:11:ee:a4:5c:10:4f:
         05:fa:0d:5a:cf:c5:0c:c9:96:03:b2:49:b9:43:16:9e:6a:20:
         3f:a6:da:d8:99:d4:45:b6:47:1d:4c:82:3c:5b:12:7f:10:93:
         c5:93:4a:db:59:e9:19:60:d0:fc:26:26:f6:11:d2:62:2b:9b:
         2e:4c:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----