Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          lUyMjRGBPLXLmdZBJUzUukR+aHUNcGR6lTIeacWfnUI=
Subject key identifier:   D8:99:63:E8:6E:4E:29:C6:93:2D:34:96:DE:1E:52:2A:53:BB:84:DF
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       01962E9995B9E552609A8D86B198C810D23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          0588
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: 9NG4WlZxRuwNYChFS4WTRrZwePKqXntuuiod4PCwaVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:b9:e5:52:60:9a:8d:86:b1:98:c8:10:d2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=d89963e86e4e29c6932d3496de1e522a53bb84df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:10:cd:db:4b:5a:b8:16:96:c9:8b:d7:03:
                    f6:6b:93:8f:4b:c0:0e:5f:4a:d6:cf:63:e7:fe:7c:
                    90:bf:f1:5d:43:94:ba:d6:14:ed:fe:af:b2:5e:a7:
                    db:c0:2b:d6:e7:5d:0b:8f:6b:58:c0:fe:15:21:8a:
                    c6:50:76:d6:71:96:ca:ca:47:0d:4c:20:59:c5:0d:
                    7d:9d:80:6d:c6:95:2c:eb:3f:f5:ad:7e:28:b2:99:
                    f4:e2:d3:40:0e:94:4b:92:65:ff:87:b1:e5:78:eb:
                    43:bd:9e:5f:b5:f9:6e:2d:a8:f9:c1:04:87:59:3f:
                    95:1d:8a:f5:ca:67:a4:ca:a5:d1:ff:46:0e:d2:14:
                    f0:72:b6:f0:f4:41:ad:55:73:ac:c6:05:45:06:64:
                    2c:10:90:a8:01:af:62:b9:d2:41:75:85:95:3c:d3:
                    1f:23:b5:9f:ae:38:81:39:65:b3:a6:7a:47:1a:63:
                    81:c7:68:76:00:ce:03:ae:5b:b6:6d:fe:fa:b4:a2:
                    af:a8:0e:76:f1:64:d6:e3:f1:6e:40:a7:f0:ab:86:
                    bf:ca:a4:e8:1f:05:af:de:e3:10:3f:3a:e5:15:4c:
                    bb:ab:52:38:2f:7f:29:f1:e8:2a:12:99:7c:53:bb:
                    ee:15:20:ef:42:98:9d:ec:fa:86:d4:6e:a2:7e:09:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:63:E8:6E:4E:29:C6:93:2D:34:96:DE:1E:52:2A:53:BB:84:DF
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:a9:ca:b4:9b:22:6f:d5:b3:d9:05:a0:ea:23:a7:b0:44:
         3a:2b:10:ef:f7:8f:0f:21:cb:8b:a0:0b:13:93:e0:ab:84:ee:
         a0:55:ff:dc:9e:64:b3:b4:2b:ec:23:df:22:cd:47:f6:5b:db:
         2c:5d:aa:3e:92:a9:40:3d:ab:6f:4b:57:fe:92:e8:e2:d3:8b:
         cd:a7:29:e6:6c:e5:1b:64:39:7e:d0:51:6b:c4:79:e1:6c:f8:
         ab:e9:7a:d0:64:9c:df:cd:6d:07:f4:e5:98:c4:95:bc:d6:f4:
         30:97:26:1f:76:49:32:60:a4:99:f0:b2:9d:62:24:99:e4:8b:
         2e:af:10:21:57:fb:62:c6:22:9f:ef:e4:6b:69:96:3c:0a:06:
         ea:7b:f3:ae:5a:f7:a8:cb:8f:af:8b:53:12:36:25:5d:22:9c:
         ee:19:db:f0:78:cd:cd:36:09:e5:4c:25:34:6b:dd:43:24:53:
         93:40:a6:be:09:f5:f2:70:93:2f:3a:77:e6:67:db:40:c6:9d:
         2c:49:48:1b:13:6f:9c:7c:1e:4c:96:8b:5b:d1:79:4b:e7:65:
         e4:03:1e:68:9c:2c:09:0b:f3:96:48:0c:ed:cf:3d:4a:60:e1:
         d9:8c:41:ba:45:d5:82:4f:b3:bf:6a:23:ac:c3:0d:96:5f:6c:
         e3:c4:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----