Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          Hm9yQhX6qJyVVPkMf9GQua5z89QzBphR5hpcPL4dxKc=
Subject key identifier:   52:E3:AE:F0:DA:B0:82:BF:AD:60:52:B3:DC:DC:CD:35:A8:9E:83:04
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       01962E61800CF0E8D3F129FEF5A5CAA48D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          0411
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: 1PSZ1gzhe82GPGrMeYXu32S8+Fp0dSNqUkrVjnMaM5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:0c:f0:e8:d3:f1:29:fe:f5:a5:ca:a4:8d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=52e3aef0dab082bfad6052b3dcdccd35a89e8304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:b3:63:0e:d7:6a:e7:a6:a5:cc:dd:3f:bf:
                    4b:4f:df:cb:08:5f:98:cd:f5:33:04:45:e5:ef:98:
                    ee:08:a3:99:96:d5:28:5c:25:77:cf:0f:a3:62:6a:
                    cc:0b:99:78:dd:e5:42:0f:8a:29:57:44:6c:28:a9:
                    2b:69:e8:ab:35:35:69:69:98:96:51:c3:60:0a:b3:
                    a8:8f:ec:21:ab:a3:d7:99:57:71:1d:03:61:c3:58:
                    2b:7d:41:00:b3:f7:dc:7f:9b:e4:24:79:71:d9:ef:
                    a3:ae:ee:c6:d9:50:90:c1:18:9a:d9:51:c1:83:78:
                    16:fe:3a:b4:a3:6c:c6:5d:4a:dc:e2:7a:dd:b3:52:
                    33:ad:a9:74:19:f5:6d:f4:5f:04:94:73:7e:f9:ac:
                    8b:3c:9b:9a:34:25:18:3f:a3:cc:8d:6a:97:53:5a:
                    c5:75:c2:d9:46:db:f5:54:e2:4b:4c:27:58:06:68:
                    6a:b0:b0:d6:e6:e0:cb:cb:bb:e0:9e:d8:05:95:39:
                    7c:73:45:c4:ca:a1:2e:21:12:d1:2d:50:11:24:02:
                    67:f9:ea:64:60:6a:28:02:84:da:f8:8c:23:05:b4:
                    a0:d0:37:73:9f:f0:9a:6a:d9:3e:fc:71:b7:19:06:
                    f2:b7:24:61:e2:22:d0:8a:61:e6:dd:ce:b3:6e:95:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:AE:F0:DA:B0:82:BF:AD:60:52:B3:DC:DC:CD:35:A8:9E:83:04
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:07:49:00:bf:59:c5:8e:f7:db:db:d5:07:ec:5b:85:da:ad:
         25:c8:f3:25:1d:ae:31:b0:ca:d9:19:3b:1a:ba:91:1d:bd:2e:
         d1:f5:92:9e:37:cd:d2:33:9f:71:44:3f:28:c9:ce:d3:61:2c:
         79:d5:bc:5c:95:16:ee:08:05:7c:86:ca:59:e1:86:28:8b:77:
         ff:19:cb:9a:62:b5:4b:69:5a:e7:57:ab:fa:6c:09:f2:b6:12:
         55:b4:29:56:9c:6c:20:68:52:b0:bb:fd:b3:2a:75:5f:2b:8e:
         29:bb:89:4b:18:d3:ec:4f:8c:65:89:27:d4:e4:93:e1:95:14:
         53:23:9f:ff:3b:30:59:c1:a6:2b:b4:11:54:c1:9a:65:ea:a2:
         c8:72:14:9b:b1:1f:a5:e0:11:09:5b:9c:37:ef:5c:4f:a6:63:
         16:f8:9c:14:68:ba:b6:b6:67:4d:c2:33:6e:0c:58:a8:e1:2b:
         cf:2c:36:fc:df:b8:12:c9:87:81:e1:21:51:38:93:51:89:63:
         b5:37:87:f1:80:ad:f7:b5:cf:ef:7a:e4:07:4f:8d:78:74:e5:
         29:20:1d:ce:4f:e1:38:65:0c:61:59:b6:f0:f5:18:d5:a9:ec:
         67:22:35:45:4d:97:51:61:45:c1:ba:3f:dc:26:db:b6:8e:58:
         95:af:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----