Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File:                     k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier:          lrTFLXcyjEsJG9kTzBYgrB2eYInkQWCmutoYF/5zm24=
Subject key identifier:   3B:5C:37:57:D0:25:9A:D2:DA:B9:CD:09:FE:4D:85:22:DA:1B:F9:C2
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer:       /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial:       01962E996F26D5DEB9AA92A957A17631919B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: oOxnPPKrUgqMAQKSAUj9IWcMYcx2EEgXuwpgfkG1b5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:26:d5:de:b9:aa:92:a9:57:a1:76:31:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=3b5c3757d0259ad2dab9cd09fe4d8522da1bf9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:20:d7:a9:05:57:e9:07:9d:02:99:e4:65:
                    6f:26:9c:01:16:6a:f8:c8:5d:de:d5:10:f5:f0:22:
                    1a:d4:0d:74:7a:6f:4c:b6:ce:8a:44:55:3c:6c:7c:
                    bf:6d:7f:60:90:ab:5c:38:48:8a:0b:c7:21:9d:8b:
                    07:c7:04:f5:da:e0:07:1d:4a:ae:74:29:3c:41:e3:
                    3e:97:91:5e:e0:d2:81:73:39:50:18:e3:6c:8e:e2:
                    f8:40:06:8e:45:6b:17:08:67:3b:8f:46:c0:b6:e2:
                    bb:a8:0f:59:01:8e:08:06:34:c3:95:ae:b7:53:8e:
                    38:2a:b5:fe:39:65:6f:3e:de:64:1e:f1:4f:92:39:
                    fb:96:99:4d:cd:cb:f6:38:51:d3:fe:c4:bd:9c:f3:
                    42:3a:41:88:6e:f9:6d:49:ac:92:95:cc:7d:96:5a:
                    ed:33:7f:2f:4e:c0:72:10:f4:7e:6b:b0:f6:7b:bd:
                    24:4b:29:eb:99:df:3c:32:e2:b6:aa:76:55:88:b2:
                    42:69:2c:3c:3f:f1:72:64:a7:94:9c:ae:1a:cd:80:
                    1e:94:9a:07:c4:e2:6a:49:0c:3a:f0:a4:b6:fa:67:
                    44:18:78:cc:a0:0d:17:0f:25:bb:a0:68:80:90:40:
                    f3:65:6a:f7:6a:7d:2d:e9:2a:4f:29:8e:c2:af:7c:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:37:57:D0:25:9A:D2:DA:B9:CD:09:FE:4D:85:22:DA:1B:F9:C2
            X509v3 Authority Key Identifier:
                keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:7f:5e:68:39:bd:d2:0a:d3:a0:31:46:10:e2:a3:0c:23:
         a7:f1:6d:72:91:53:13:fe:28:94:d4:2a:38:38:fe:85:87:62:
         80:04:ba:76:d4:7d:f2:a7:93:1c:aa:bb:3c:83:d5:bc:c3:cd:
         47:74:11:62:e1:1c:b4:6d:ed:54:44:30:08:4a:69:43:6d:85:
         2e:9b:04:67:40:f2:11:48:e9:e2:f9:5a:0d:22:44:e2:38:30:
         41:17:6c:d0:46:31:42:e1:bb:3a:ac:95:c6:93:2a:23:7e:e9:
         9a:71:87:13:df:88:30:65:c9:85:3e:2a:3d:96:fb:85:97:b4:
         0e:a0:c6:e6:d7:9f:9f:2a:a1:0a:2d:ac:41:3f:3c:47:68:e0:
         78:e5:e6:5d:10:9f:0d:f2:a4:12:c2:7f:cc:e1:45:e6:e9:76:
         0f:3e:57:76:bf:3d:e8:12:67:d8:89:14:69:2c:22:39:ba:61:
         6f:c6:f7:5e:7c:65:47:30:b8:ae:d0:d3:d2:3e:c6:37:94:48:
         c9:5a:c4:09:6b:14:c3:4c:2f:b7:a8:b2:62:63:5e:d5:0f:7d:
         d7:f8:2a:9c:a2:9d:d3:6f:6a:7e:28:a1:86:84:a3:82:de:03:
         a4:80:d2:7d:ce:86:e8:1a:f5:f3:db:15:fa:2c:11:ae:fb:ea:
         c0:da:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----