Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
File:                     hEnGCTJcOmYCBHJgydMAE1CVuLg.mft (raw, json)
Hash identifier:          0tpPI7Kf+OVBTxOWxjsLOu7868Gstoh1PBmGzgN4dgU=
Subject key identifier:   E3:CF:5F:25:A3:87:14:54:66:9A:EE:93:8E:66:FB:72:C7:C8:38:E6
Authority key identifier: 84:49:C6:09:32:5C:3A:66:02:04:72:60:C9:D3:00:13:50:95:B8:B8
Certificate issuer:       /CN=8449c609325c3a6602047260c9d300135095b8b8
Certificate serial:       01962F063D6987B0C1E9D5E74AFF257F6718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEnGCTJcOmYCBHJgydMAE1CVuLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
Manifest number:          04BB
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: hEnGCTJcOmYCBHJgydMAE1CVuLg.crl (hash: 4K3pPZLBV371PUDgMLdtGqXyHz5lA8LxNkPMIFEOY1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:69:87:b0:c1:e9:d5:e7:4a:ff:25:7f:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8449c609325c3a6602047260c9d300135095b8b8
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=e3cf5f25a3871454669aee938e66fb72c7c838e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e0:c4:1e:74:b8:42:5e:44:0b:7b:74:60:34:
                    5a:71:c5:66:3c:dc:43:a4:2b:ac:71:f5:62:77:c1:
                    a7:e6:c9:7d:cb:bb:a5:90:26:d1:81:6a:b9:2d:e9:
                    34:85:b7:90:ac:1d:0b:86:36:57:29:be:2a:dd:14:
                    82:73:c9:5f:c1:af:cd:73:14:5b:98:63:b4:af:3f:
                    ef:d0:06:5d:02:19:41:fb:95:0d:54:13:9b:c5:b3:
                    fc:d2:5a:76:fb:19:e0:49:a5:2c:8b:7a:1d:be:61:
                    a0:aa:53:f8:64:9c:eb:06:ea:45:03:c3:1c:83:76:
                    8a:21:e2:88:e4:74:21:86:ac:21:f3:59:a8:d1:1a:
                    fc:39:ce:75:78:bd:56:2f:e5:e6:ea:cf:73:34:11:
                    4d:7d:02:bd:fb:83:41:1f:6c:7b:f6:77:69:2e:7b:
                    f3:92:48:f2:36:76:96:f4:8e:fa:bd:3d:0c:85:be:
                    83:44:f9:d1:bc:88:53:6c:fe:23:06:43:41:21:7e:
                    51:e7:8b:69:d6:08:54:9e:45:c3:88:3e:6e:45:e9:
                    3a:8e:2c:65:e5:9f:38:b1:61:e2:1f:5c:98:3c:d6:
                    3d:d7:f3:ab:53:17:15:46:db:f3:bf:34:b9:a9:bb:
                    24:87:b5:40:8d:62:29:fe:8f:77:3a:1e:29:d7:9c:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:5F:25:A3:87:14:54:66:9A:EE:93:8E:66:FB:72:C7:C8:38:E6
            X509v3 Authority Key Identifier:
                keyid:84:49:C6:09:32:5C:3A:66:02:04:72:60:C9:D3:00:13:50:95:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEnGCTJcOmYCBHJgydMAE1CVuLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:f4:94:41:4a:50:7c:5b:e5:fb:52:ce:41:e5:77:f6:18:
         f8:a2:39:f5:e1:64:d3:ef:2e:2a:6e:9f:be:7f:29:fe:4d:17:
         a3:a5:e5:00:eb:3c:ba:ed:2c:e3:c2:eb:06:c8:0e:6f:1a:c3:
         48:ee:41:99:98:a3:e0:2b:12:60:ac:6e:ea:2b:78:3c:03:44:
         7a:19:08:be:bd:56:89:c7:5c:06:99:33:f7:51:6c:e7:93:ed:
         5a:54:7f:8e:67:03:d1:ed:b0:bc:62:b2:3e:40:d5:f1:6e:0c:
         23:b8:10:09:f1:b1:72:17:4d:43:82:7d:c6:7c:3c:a4:45:87:
         79:eb:d5:f9:54:44:69:e8:5d:ce:2b:88:40:05:44:1e:d5:c8:
         8a:e5:31:b6:43:9c:24:1f:8f:a0:3e:46:5e:e2:ab:fe:67:c1:
         fb:1e:c2:c7:96:8a:27:30:d8:f9:de:92:6f:4f:8a:3f:2d:0a:
         bb:5a:a6:47:80:28:1c:7b:5a:13:18:d0:e8:c7:57:7d:39:ce:
         f6:17:ed:ae:70:c7:2f:95:33:c0:14:ac:a2:81:b7:47:81:7f:
         a0:d7:a4:5f:2a:13:1d:c2:f6:d7:88:56:73:05:62:d9:0a:26:
         5d:b1:71:54:86:da:7a:7c:0f:4c:b7:d4:2d:0f:f2:8c:b6:cd:
         12:d2:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----