Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File:                     rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier:          aO5HT3GY7iTtBiddg2i9ZQ0sl/CaCKoS0MVyOBsq2n8=
Subject key identifier:   E7:19:41:9D:75:EE:08:90:64:BA:49:28:29:56:C2:FB:CD:26:35:03
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer:       /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial:       01962DF3EA155168F9EFDC801DD5D79846AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number:          1227
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: U7ixzoicWrG5SZ259tRlkUoPrMeiKAoSIVoohgSp0JI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:15:51:68:f9:ef:dc:80:1d:d5:d7:98:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=e719419d75ee089064ba49282956c2fbcd263503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:07:f4:0e:9e:af:f7:e5:f7:2c:14:a8:60:
                    2e:29:df:a6:37:f6:60:29:0d:cb:43:da:a6:eb:eb:
                    69:a7:73:43:2a:af:26:01:8e:d6:ae:c1:6e:ae:44:
                    2a:ca:bc:50:5c:92:9a:d0:9b:02:95:d5:57:90:c7:
                    77:54:5d:63:1c:6a:67:15:d3:d3:f6:d0:82:18:3e:
                    6f:46:c0:5d:ff:fe:c3:89:01:c6:e3:e8:f2:e6:60:
                    64:98:ed:ce:be:a6:d2:05:c9:45:99:23:2a:ab:d2:
                    80:45:48:cc:eb:7c:ad:1d:69:38:22:b9:9e:e9:f4:
                    16:b3:42:e1:e5:6c:eb:51:5a:05:5e:38:a1:17:29:
                    d6:24:8f:bc:8f:3f:66:5f:3d:db:9a:c1:f7:8e:4a:
                    47:41:66:6b:42:14:fd:ef:9c:2d:7c:ca:e7:3b:00:
                    24:6f:77:a2:f8:29:e1:66:4b:4a:68:53:dc:4e:6d:
                    c2:72:18:83:bd:04:92:d5:de:29:ec:51:87:ba:5d:
                    69:66:d6:f2:76:88:51:79:4d:82:fc:da:59:47:e4:
                    13:89:00:68:24:45:e3:ef:65:70:e5:b4:67:0e:a4:
                    58:5e:8c:65:28:6b:39:b6:ee:f2:1d:eb:e0:2f:03:
                    21:d4:a6:b2:d4:cd:ef:21:09:46:6d:6a:06:2a:a2:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:41:9D:75:EE:08:90:64:BA:49:28:29:56:C2:FB:CD:26:35:03
            X509v3 Authority Key Identifier:
                keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8c:7b:7b:63:cc:41:f2:d5:30:78:aa:7c:0f:a7:60:fb:d3:
         56:a1:32:2a:a7:12:88:df:bc:fe:ca:40:5d:0f:e4:94:45:79:
         54:f6:56:4d:db:06:f1:a7:73:c8:af:5a:31:8b:4f:70:76:5f:
         3f:18:17:ce:b9:7c:74:96:31:ce:0b:7d:3f:6a:d2:10:79:69:
         68:98:f6:5f:58:9c:2b:ed:0f:09:61:51:26:96:03:58:a5:63:
         3c:5c:7f:50:48:fa:8d:f1:f3:bc:a7:da:55:63:65:d4:00:bc:
         1c:8d:28:d8:5f:6c:dd:2f:10:e5:06:69:75:5e:45:30:e0:25:
         84:97:b9:30:35:1c:ba:2a:a9:9f:e1:1b:6d:5d:0b:ee:21:0b:
         0f:0c:9a:20:05:f9:50:c4:b4:e2:91:6a:ae:f6:89:01:6f:df:
         92:3f:d2:d3:dc:25:1f:d4:fb:d6:58:c5:1b:1d:fc:9e:15:fc:
         ea:f4:cd:ed:44:57:b4:f1:b8:86:d0:c5:39:5b:a2:91:04:72:
         91:37:d9:7f:a0:bb:b8:7e:f5:15:04:8a:1e:d8:8d:ce:ac:59:
         96:68:15:f3:cd:4e:e9:b7:e5:c6:0d:48:0a:c6:40:d1:0b:67:
         83:d0:e3:3a:86:da:1f:ac:00:06:ec:3a:56:c4:18:dd:5c:31:
         b3:82:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----