Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File:                     Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier:          CyH5D2OYDfRBjESIZCJWdQ7y6ZdkNoDBuD5UBfx8IWQ=
Subject key identifier:   CC:7C:2F:64:AD:42:D2:2A:75:AE:43:39:F0:74:8D:ED:97:81:7D:6A
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer:       /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial:       01962F748FC12E31FF5A15862C0B0B3FC308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number:          0184
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: 5RqLuHoON6eJhvjR4VIkGDNwA/BLzb4GrjqQbhIV/88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:c1:2e:31:ff:5a:15:86:2c:0b:0b:3f:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=cc7c2f64ad42d22a75ae4339f0748ded97817d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:68:79:4a:7f:46:8f:30:cd:9a:7e:cd:90:
                    88:3d:5d:f5:e2:b8:80:c8:38:5a:6c:e3:f4:af:e4:
                    30:6c:b4:be:56:7b:08:15:ec:8f:1d:46:f8:41:38:
                    c1:e0:9d:08:82:74:42:6b:4b:89:e3:fe:14:a3:5c:
                    89:cb:12:9d:91:70:cc:b5:ad:d3:d7:a4:83:e9:b6:
                    83:ef:fc:b3:66:8a:8f:d1:40:7b:d2:a0:64:b0:b8:
                    20:7d:d8:a6:15:ea:ce:b6:71:28:7f:28:93:43:e0:
                    8b:5f:d5:83:22:4a:9f:c5:ee:48:e9:8b:2b:ce:fa:
                    62:4b:c9:92:23:a3:fb:90:7b:1f:3e:0d:f0:bb:c5:
                    39:9b:37:4a:bf:e0:fd:fa:e0:22:6e:11:20:cd:7f:
                    b4:03:cf:0c:f2:21:84:82:0a:b0:40:cc:76:d3:78:
                    94:f3:27:a6:a9:88:5a:7c:99:a8:58:6a:ef:fb:ec:
                    da:40:12:98:a7:1d:65:7d:f3:98:39:f3:b6:30:6c:
                    ac:31:83:fe:16:fc:44:24:97:48:15:e4:2e:e6:8f:
                    e9:66:18:10:22:6e:04:93:2e:1c:d4:6a:bd:64:59:
                    bf:56:02:cb:79:3b:75:40:d7:51:07:a3:34:8d:81:
                    1b:55:e4:dd:01:55:52:15:13:5a:b1:63:74:6d:07:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:2F:64:AD:42:D2:2A:75:AE:43:39:F0:74:8D:ED:97:81:7D:6A
            X509v3 Authority Key Identifier:
                keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:85:b5:5f:94:47:21:e7:d6:57:13:1f:15:9c:d9:1c:04:
         2f:fa:8a:fa:5b:09:bc:81:e4:bc:89:72:e3:44:b1:08:1e:52:
         46:33:31:01:89:e1:96:9a:72:54:9d:6a:71:1c:04:70:03:04:
         e8:05:71:ec:e3:21:87:e7:61:00:04:e6:a3:59:ce:a6:24:0e:
         0f:46:e2:cd:ac:c0:85:db:3d:0e:5e:4d:54:55:d4:fb:db:8a:
         1e:7b:ba:06:c2:d5:03:0d:b0:45:4f:ed:12:a3:9e:24:9c:ed:
         f4:a3:ef:37:04:0d:d0:5b:c2:48:83:56:b8:62:90:ef:82:c4:
         f8:4d:08:cb:95:dc:60:71:75:af:3e:12:a2:23:e0:ba:03:97:
         1c:fc:b3:0a:b3:0f:98:55:b7:f0:95:cc:3d:32:e6:a1:4a:da:
         75:54:8c:a4:7e:ce:e7:ef:21:40:f2:d2:e6:3c:dd:44:31:76:
         20:13:74:d5:fa:c5:f7:a6:ab:dd:d3:55:4c:c0:9e:d8:be:89:
         b6:f8:14:9e:23:a4:a3:6b:10:fd:64:4d:27:6e:94:97:86:62:
         98:24:0e:7d:e4:6f:71:9e:d9:2f:87:4c:e7:73:49:78:0b:02:
         3c:c3:8b:2f:20:64:ac:a5:5e:a4:1a:c6:02:5b:28:14:c7:9c:
         53:e0:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----