Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File:                     iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier:          72kN6MMAgUWXahGqRbo8to8wZWH9uNoCku8ivebGB6A=
Subject key identifier:   F5:61:6F:49:49:92:6B:C1:E1:A9:98:80:74:4D:D1:3E:9D:F5:81:E9
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer:       /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial:       01962E98F14FB87D1416D418E32B69D955D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: VHJVPun04Xktx0M9gOyib0pSuwyWu2iApTECX79AtHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:4f:b8:7d:14:16:d4:18:e3:2b:69:d9:55:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=f5616f4949926bc1e1a99880744dd13e9df581e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:2f:24:8a:ed:ea:90:a8:51:c3:83:a1:f3:
                    bd:53:86:a9:3c:53:6c:12:ad:7a:4e:6c:a2:8b:bf:
                    47:25:54:1f:5f:0f:23:3f:eb:b0:c8:48:84:eb:ba:
                    36:f8:24:27:7d:9a:8f:d7:36:9b:e4:8e:53:8f:69:
                    de:9d:f4:72:78:19:fa:43:83:cc:c1:68:d9:8c:e9:
                    bb:3b:16:e8:40:ed:ee:7f:b9:05:16:ba:a9:ea:2b:
                    2e:36:8d:2d:dc:9a:5b:1a:c4:9c:8c:df:3a:02:52:
                    a8:22:8d:dd:ca:ec:3c:56:fd:bf:7e:37:de:45:c2:
                    a8:df:bc:e9:b3:9d:35:98:2e:2a:6f:a3:ef:69:55:
                    3a:0a:b8:af:df:f0:b2:dc:07:02:30:bd:71:78:04:
                    39:c2:5e:10:8a:cd:8a:7f:6f:e5:aa:d3:cd:03:96:
                    f4:e8:c9:9b:7a:d9:60:f0:30:00:85:26:7c:9f:5a:
                    8b:34:94:97:3b:9e:0a:68:b4:1d:e4:f9:12:58:76:
                    65:8b:bf:01:dc:f6:43:b5:6a:48:b0:05:14:85:f5:
                    b4:56:d7:2a:89:ab:c4:7c:b0:49:bc:a2:40:50:0e:
                    98:bf:58:e6:8f:22:7b:77:0e:69:e0:42:cd:92:e3:
                    4a:5a:f1:d3:6d:1e:6a:e5:03:45:d0:19:b3:db:39:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:6F:49:49:92:6B:C1:E1:A9:98:80:74:4D:D1:3E:9D:F5:81:E9
            X509v3 Authority Key Identifier:
                keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:d0:7c:cb:c5:60:eb:8b:c9:5b:2d:c9:ef:a9:8a:a9:69:
         71:fa:af:66:1a:7d:49:a5:22:a0:11:07:9b:30:9c:db:f9:b2:
         64:83:86:b5:f1:71:cb:c6:d0:eb:32:e1:07:f1:4b:f4:f3:4f:
         47:5d:78:ad:e9:7c:b4:83:a8:22:2b:e2:b3:33:35:cb:b9:6c:
         31:56:46:56:22:4e:b0:78:15:09:9f:a3:30:cf:cb:9a:f4:7e:
         67:5b:ef:cd:f3:18:97:5e:60:04:fc:b6:b2:4a:e7:d8:ad:32:
         1a:7e:b9:a6:14:68:5e:00:29:fb:1e:64:b8:1c:cd:24:e5:3e:
         31:67:4d:ae:b6:59:cf:32:e3:42:4a:a6:fb:bb:e7:4f:9a:bf:
         1b:7e:5d:d6:1f:f4:b8:11:7b:69:78:6c:e7:a7:ec:49:e3:d5:
         05:0e:15:f5:11:4f:f5:3b:21:17:f5:73:7d:84:27:bc:00:5b:
         9c:41:24:ce:ef:98:28:cf:13:25:f5:f4:f8:9f:0e:62:4f:b2:
         60:55:d8:95:94:ea:ce:61:bf:b0:9f:c0:f8:ff:a5:51:8c:3e:
         40:c2:94:47:51:35:16:2e:ca:be:04:c4:fa:3d:67:fc:e2:54:
         0a:10:05:c7:8c:a5:f1:af:d2:c0:d6:68:69:e3:7e:23:07:82:
         70:49:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----