Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File:                     T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier:          7d24NJlCJjRZyHCt4ZegF5AZIre+WDJ6usOhguVNw/s=
Subject key identifier:   47:04:E9:D0:38:FC:EB:90:4F:94:CE:33:21:14:EE:21:48:B9:09:92
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer:       /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial:       01962DF448ABE8FF74CF1B5DA3FB8932BBBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: Ao39welLjDfy4KMHgFin/QqlA1DvSydNqXUw5I/+haY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:ab:e8:ff:74:cf:1b:5d:a3:fb:89:32:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=4704e9d038fceb904f94ce332114ee2148b90992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:3d:ca:8e:44:6b:a2:83:d9:c7:d1:c8:a3:
                    25:a5:76:51:82:ff:1c:10:11:8b:d2:19:2b:dd:4a:
                    62:43:5b:d6:f3:a0:cf:e0:a7:42:75:44:46:31:e2:
                    03:af:73:e5:ab:b7:2d:4e:fd:10:31:18:d3:8a:43:
                    ee:d9:f9:34:9c:24:16:8b:46:39:a5:01:dd:4e:a5:
                    de:1b:a1:14:f5:e4:9f:75:25:99:d9:5e:16:da:03:
                    af:ff:4c:5d:36:4b:4b:95:af:3c:fe:87:44:78:75:
                    e2:f4:39:bb:c3:c2:1f:1a:b6:9c:f8:f3:44:b0:f2:
                    11:53:ea:ef:c9:7b:8a:60:e1:c7:7a:eb:bf:ab:7d:
                    f9:15:89:a7:69:80:3b:a3:15:74:cb:ed:d9:fb:75:
                    1e:e3:10:3f:f4:94:43:0f:92:56:ef:c4:a0:f4:4a:
                    a9:4f:bb:53:27:c3:f7:d5:c4:25:c7:62:57:b7:2e:
                    8a:ff:e9:18:9b:7a:0c:6b:c1:b8:53:0d:d6:70:03:
                    0f:95:cb:34:ad:3c:ae:1f:5e:82:c0:39:24:5d:78:
                    3d:a2:df:13:79:62:7b:4d:cd:12:ea:bd:fd:39:79:
                    3a:1d:12:7a:fa:a0:ef:14:4e:a9:c0:76:b2:dd:d0:
                    97:43:12:7c:7a:de:24:fe:44:5c:4f:b4:17:cd:db:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:E9:D0:38:FC:EB:90:4F:94:CE:33:21:14:EE:21:48:B9:09:92
            X509v3 Authority Key Identifier:
                keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:31:94:2e:4f:3f:6b:51:e9:de:8e:c5:ce:1d:d4:91:fa:2d:
         e8:01:4c:70:ba:95:b0:ef:9b:4c:cb:8c:60:ae:e2:ed:31:0f:
         aa:5a:64:40:b1:2a:f1:48:db:29:38:62:4d:af:4b:66:68:96:
         e2:31:1e:13:b2:f0:cb:3a:17:6e:d1:db:39:48:83:80:45:e0:
         17:20:93:68:a4:e5:86:ee:5e:9d:a9:10:0c:b0:40:b1:96:b5:
         cd:9a:41:55:ca:df:a8:c4:bb:a6:dc:e8:b1:62:69:b5:71:9c:
         46:66:21:5b:41:07:08:b8:c6:f1:78:75:b5:12:53:af:6e:46:
         1d:59:06:5d:71:d7:8e:25:88:f7:34:84:0c:9b:98:17:7f:ac:
         e0:c9:a6:66:ed:db:4d:28:08:00:84:61:b5:b8:4c:59:8e:b8:
         56:3f:2e:7d:13:67:e5:93:fb:41:84:20:14:bc:35:bd:3f:d2:
         19:90:a8:15:06:81:bf:9d:9a:ad:1d:92:a2:d2:5e:eb:a1:b6:
         b4:1c:7b:a4:e5:46:60:6d:45:40:1b:c5:b4:2a:f4:60:cf:63:
         6d:d9:0f:35:b9:55:49:c3:b3:a7:c4:3a:d3:03:b3:bd:64:95:
         d8:2c:db:20:21:ac:e8:49:32:42:00:1e:0f:b1:52:d8:39:61:
         2f:b0:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----