Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File:                     pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier:          MrNFtIfwe8Fo//AeNnndHxj5G0FJSZBlHXk3X0VYmTI=
Subject key identifier:   78:34:90:AE:7A:2B:51:98:E5:2E:B5:DD:9E:BF:A9:81:CD:EC:A3:84
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer:       /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial:       01962E2B1B9FDD554A996EF8045389789059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number:          0379
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: Zr9ZvelZ7kN1IiAwywcHk3nz4ij+xG+hTUeZPISqSX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:9f:dd:55:4a:99:6e:f8:04:53:89:78:90:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=783490ae7a2b5198e52eb5dd9ebfa981cdeca384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:75:c2:7a:13:2c:60:c8:e6:9f:58:c3:69:
                    be:9a:d1:fe:a0:37:72:71:63:7f:89:4f:fa:89:14:
                    c0:5d:2a:31:79:e7:b1:d2:4e:f2:d9:fa:88:42:2c:
                    f0:db:91:20:2e:0d:33:e5:13:b5:84:18:85:24:5a:
                    8b:c2:50:df:2a:75:05:6f:c7:50:98:83:07:f6:6a:
                    80:3d:f0:57:c2:46:14:14:6e:3e:b4:98:56:52:6c:
                    cd:50:97:52:14:d4:04:f1:82:19:e1:db:8f:4b:0a:
                    36:7d:2f:43:66:a9:0b:87:70:c5:a6:78:e5:2f:99:
                    64:c5:8f:13:dc:99:fc:02:f4:fb:a6:81:2e:10:5d:
                    36:ea:4d:9a:7c:5a:3e:1a:9f:90:b9:33:8e:2a:b2:
                    25:b6:ba:42:ab:3f:c4:fd:bb:3f:a6:09:e9:cd:e4:
                    e9:41:63:e1:56:43:83:9b:a5:61:5e:cb:1e:14:c8:
                    8d:1c:7c:43:37:c3:d0:d3:b1:bc:2f:7c:94:2f:90:
                    c6:9f:b7:b2:d1:c5:ab:5a:b5:1e:b7:a3:b7:56:58:
                    da:66:05:04:91:ad:53:be:4a:be:14:30:be:3e:eb:
                    c8:21:49:66:33:01:f4:52:d1:27:5b:97:2e:a2:07:
                    28:da:2a:cd:b8:7c:13:b0:32:09:36:87:4d:cc:ed:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:90:AE:7A:2B:51:98:E5:2E:B5:DD:9E:BF:A9:81:CD:EC:A3:84
            X509v3 Authority Key Identifier:
                keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:68:e6:68:4f:0b:07:73:d8:98:2c:52:ac:b7:5b:c2:be:d9:
         2f:3c:d0:33:d6:53:5b:d6:7c:a8:e3:25:03:04:45:79:89:8c:
         31:98:b8:b0:8b:10:9f:fe:39:60:90:76:bc:53:14:52:48:c7:
         69:6d:93:94:56:ae:ca:a6:ee:5e:7d:f7:7c:5f:3d:0c:f8:ca:
         ea:53:b3:24:cb:c6:0a:b7:12:ce:37:bf:b8:ad:18:dc:52:ae:
         4d:8b:e4:c7:52:78:a7:74:70:2a:7f:6a:b5:40:ae:16:13:f3:
         6a:21:f7:30:45:73:11:86:8a:65:0e:8d:38:38:eb:0a:75:b1:
         34:13:35:cb:81:b8:10:62:67:5f:71:b4:b4:6e:e6:63:f8:10:
         6f:8a:dd:a9:b2:77:da:ca:df:02:b8:62:d8:b5:d3:4d:c4:9d:
         3b:5e:7b:31:a4:82:6c:dc:db:aa:0a:63:5b:83:37:55:02:e3:
         71:19:20:65:35:cd:40:be:79:66:5f:c8:df:3c:bd:ac:e1:fe:
         33:93:19:b5:47:ce:50:5a:e4:18:a2:2e:5a:b7:05:2a:85:5a:
         56:1a:6e:fc:4b:6d:76:e4:cc:e9:9a:e8:47:d6:03:f1:47:1c:
         0f:5a:d6:6a:7e:b6:bc:6f:1f:7c:48:59:73:33:fd:53:60:d4:
         7e:60:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----