Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File:                     cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier:          nH3Pt2G8rsgswfU567n33nbziWLXivPGD15gI8srvSY=
Subject key identifier:   E4:85:D4:FB:26:87:9F:24:09:44:40:51:BC:46:A5:1B:24:A4:B3:4B
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer:       /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial:       01962E2B0BC669DC57329A3ED57A685A0C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number:          02A2
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: 4xkvfdRh+KGiF/3wGFUGqP+412bn8HFTWX9HzW7FXtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0b:c6:69:dc:57:32:9a:3e:d5:7a:68:5a:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=e485d4fb26879f2409444051bc46a51b24a4b34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:78:b7:29:27:0f:ed:15:53:5f:8e:73:83:
                    e8:ab:aa:2d:42:96:af:75:ff:6c:e3:04:c7:bd:c2:
                    7d:a5:4a:fb:60:a7:86:96:9b:54:26:de:28:6e:90:
                    b3:9e:10:c6:5c:1b:58:fe:4d:5c:68:4d:a6:be:a1:
                    cc:74:7b:50:52:68:2b:2a:1d:cd:d8:72:01:1d:aa:
                    73:bb:72:10:1f:58:90:b3:c1:be:a8:55:d6:c7:f9:
                    b6:28:3d:e7:d1:62:db:e2:24:8a:48:c5:4d:17:8b:
                    3c:8e:bd:03:c2:1f:fe:a5:d9:c9:19:18:ae:f9:91:
                    21:00:1b:da:4d:b9:4d:53:43:7f:4f:02:a4:54:3b:
                    5d:5f:8b:7d:aa:6b:cf:18:bb:79:f4:4e:e6:93:5f:
                    dc:e1:a5:98:de:11:51:37:b3:c1:44:f7:d4:ae:7a:
                    22:e8:ba:20:09:4f:26:7b:83:18:1c:b2:a6:34:87:
                    97:2d:de:5b:26:a8:d7:0d:93:0b:4c:8e:aa:6a:0d:
                    5d:1a:da:73:d5:1e:19:c7:89:91:d6:cd:0a:4b:48:
                    aa:84:05:04:f6:6d:2f:15:9e:26:90:37:52:c8:3d:
                    e6:0f:80:30:e9:3b:04:ab:83:57:1d:78:65:c1:1a:
                    a3:2b:9e:05:75:7e:dd:50:4a:71:63:6a:3b:28:31:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:D4:FB:26:87:9F:24:09:44:40:51:BC:46:A5:1B:24:A4:B3:4B
            X509v3 Authority Key Identifier:
                keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:24:3a:25:3e:0d:01:b3:1e:5f:95:9e:ff:36:df:f6:05:
         d2:4e:68:5a:2e:9e:68:e8:ac:53:e2:b5:0e:e6:c9:9f:d8:22:
         17:8c:9e:0e:06:11:18:fa:f8:0e:78:f6:01:d4:f6:ef:11:62:
         93:3e:96:d3:3e:e9:52:e2:66:17:65:f5:14:96:0f:0d:59:43:
         15:ed:c9:a3:7f:fd:42:74:d4:a1:e9:ee:7b:82:85:06:50:3d:
         ff:d1:25:bb:de:ab:35:f9:9d:bf:6c:59:7f:2e:43:b6:a2:e8:
         b7:32:ba:68:ea:2d:bf:6a:69:b9:ba:f7:06:15:19:78:e3:df:
         b6:07:b6:fe:38:58:3f:62:e6:a8:fb:05:39:c5:f7:dd:ce:10:
         4f:85:b9:5f:18:84:ce:0a:4f:c2:43:37:fb:80:65:cc:af:65:
         c3:84:c1:19:d8:3b:06:a9:0c:7a:d9:c5:cf:e0:06:fa:0f:74:
         e7:0d:6d:05:46:a7:15:4e:e6:1f:22:51:b5:6e:7f:3a:54:e6:
         65:f4:90:75:fe:97:ad:fd:5c:8a:92:d3:c0:80:ef:3a:ae:da:
         32:2a:dd:5a:ab:dd:04:80:3b:96:27:22:75:b9:0b:97:39:e2:
         72:eb:f5:f5:6c:8a:92:b9:f8:6c:dd:fa:8d:a4:fb:4d:07:1b:
         60:9e:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----