Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File:                     biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier:          h40H+pah3CaML9LhjzATqtQ+mNgPGS35Hj3ysZikAug=
Subject key identifier:   45:6D:99:0B:81:59:EF:07:5D:53:6A:4A:C6:0D:86:7F:3F:20:1E:25
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer:       /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial:       01962E999F34BF722FC68D5BF75E386C5C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number:          0D46
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: 4mhRiwHMA/v1KGbyxf8eLbjaVEO6Af1vSeM2K9wbCuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:34:bf:72:2f:c6:8d:5b:f7:5e:38:6c:5c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=456d990b8159ef075d536a4ac60d867f3f201e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:63:5c:ca:f2:50:ec:0b:5c:31:bd:8a:31:
                    3e:1d:90:1e:40:b7:70:eb:8b:64:fa:7a:56:c5:a6:
                    f5:50:7c:c3:e0:ac:0f:69:8f:d2:7d:3c:29:db:e6:
                    e8:6b:8e:e1:0b:b8:47:cb:9a:5c:ba:8e:21:e5:6a:
                    19:7c:71:86:99:88:ee:4f:60:78:ec:93:33:db:4d:
                    6a:c5:44:95:a3:ea:32:cd:75:56:00:92:3c:20:b7:
                    32:6e:32:3d:93:e7:53:24:12:3b:0d:f9:c3:b8:3e:
                    bb:a3:3a:19:f8:cf:2d:92:b9:87:e5:61:d0:29:0f:
                    1e:3f:43:0c:64:36:5f:95:a7:90:45:e6:09:df:2a:
                    22:ed:91:bf:f4:c1:f7:c8:ed:8a:05:36:b4:a8:31:
                    5a:3a:cb:96:2f:8c:0c:1b:58:f6:ad:73:53:ac:9a:
                    e7:93:e1:09:05:f4:e5:cf:6f:18:84:1f:df:99:2e:
                    09:d6:39:42:fc:2e:79:da:29:64:96:62:ae:d5:45:
                    f5:3c:83:5b:b6:d8:af:42:e9:38:a3:a9:3b:87:85:
                    d4:53:de:66:16:47:52:f5:d1:36:7c:23:f4:90:e8:
                    9a:7c:76:1d:f5:c6:0c:1b:60:e3:12:09:3e:fe:99:
                    50:26:e5:67:b8:d5:eb:d9:2b:25:d9:b4:14:40:0a:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:99:0B:81:59:EF:07:5D:53:6A:4A:C6:0D:86:7F:3F:20:1E:25
            X509v3 Authority Key Identifier:
                keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:bd:f6:3e:9a:0d:84:c5:35:6b:e4:f6:a8:66:a7:9c:eb:
         52:01:aa:1e:59:04:6e:71:93:42:95:8c:8f:fc:85:9c:da:d5:
         52:ae:0c:79:e6:f2:3a:39:ea:52:e6:66:13:1a:ad:da:9a:45:
         b5:51:06:d1:83:b3:0a:cd:76:e6:e0:55:6d:bb:1d:72:d4:d9:
         19:dc:42:47:af:ec:ad:d8:dd:e4:f8:c8:04:d7:c5:9c:49:0d:
         99:0d:c9:86:e8:2d:9a:c2:db:b4:5f:48:ac:9a:30:02:8d:2b:
         16:97:0b:98:7f:91:80:7b:d2:10:48:ae:2a:cf:c6:02:aa:d7:
         f2:2a:8b:af:87:5f:b6:ed:ad:a0:d2:dd:e7:98:08:68:5e:4c:
         ad:5a:74:43:d9:a2:52:62:ea:cd:79:3c:06:7e:6c:6a:f8:62:
         37:05:6a:a3:b5:e6:a7:da:d9:7b:58:37:f2:54:c1:c3:9a:ab:
         86:7f:61:b6:74:cf:ff:3b:a7:5f:97:b9:a2:87:05:a2:0a:58:
         52:f7:18:1f:51:a2:90:4b:0f:2e:35:c3:1e:d8:4b:f9:5e:bf:
         c1:74:59:f2:f3:37:5e:05:5b:c8:11:0d:5b:06:a7:da:d2:cf:
         3c:c8:46:f3:96:d3:6b:a0:1a:32:96:53:0b:27:43:01:1a:44:
         a1:92:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----