Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File:                     2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier:          R8Gm4MMaReaCCbwn6eDfesvb7SUwYaLlQWihIXEY3f4=
Subject key identifier:   DF:74:90:34:D9:C8:1E:5D:90:4C:BA:89:A4:D2:C5:18:2C:A6:9E:37
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer:       /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial:       01962E99AFD8DAADFDDB1A0D420E2AEF68FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: fwyk+sk16zgu/e5iWtY6yxukKqQWxIl2jTVqNvW1vZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:af:d8:da:ad:fd:db:1a:0d:42:0e:2a:ef:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=df749034d9c81e5d904cba89a4d2c5182ca69e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:65:28:b7:3b:5a:83:7d:21:65:5b:9f:da:
                    57:32:6f:a1:46:99:ec:9a:80:48:2a:ce:16:72:e0:
                    c4:b5:f4:06:cd:60:44:06:b1:cb:f6:cb:28:71:b7:
                    4b:e8:04:09:c6:c9:67:98:a2:5e:df:a0:8e:4e:ef:
                    dd:d5:cd:73:5d:67:e3:d9:22:6d:d8:68:35:b2:be:
                    b4:e7:c0:f9:0f:67:5b:b9:c4:b2:d5:61:76:70:06:
                    a4:eb:98:d7:0f:9f:e4:bf:b2:4e:a7:1d:4e:25:39:
                    cb:43:60:2b:54:6b:4a:e5:78:85:cc:61:69:96:22:
                    39:d4:1e:97:72:e4:19:48:6e:93:65:77:05:b1:e5:
                    d1:32:42:55:2d:82:76:b6:80:de:bf:46:bb:6e:6a:
                    8e:9d:a5:29:18:b0:43:ab:81:1a:bb:29:30:3a:79:
                    fe:23:c1:70:3b:fd:e0:f0:60:96:4a:29:a0:b7:62:
                    cf:a0:2c:dd:56:64:0a:19:97:b5:1c:b3:79:73:88:
                    d8:06:3b:f3:5d:8c:25:36:62:75:97:e0:d7:ea:c3:
                    46:b0:b4:bb:72:23:1c:ff:fd:43:ba:96:3c:ae:8c:
                    a1:20:6d:56:58:f5:8d:fe:ef:7a:db:77:f9:1c:e7:
                    4e:23:8b:e0:23:30:a4:57:e0:1c:7d:7e:66:af:b0:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:74:90:34:D9:C8:1E:5D:90:4C:BA:89:A4:D2:C5:18:2C:A6:9E:37
            X509v3 Authority Key Identifier:
                keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:91:db:bd:f3:15:8a:12:01:a8:5d:ec:d1:c1:c9:61:23:
         b3:13:ea:69:f0:88:fe:ad:ab:c8:b0:d0:69:e2:f9:3e:60:b9:
         f7:90:52:91:a1:78:67:31:33:0e:b8:68:f9:56:87:57:5b:40:
         b4:c8:0a:9a:46:f6:a7:36:12:c5:7b:7e:9b:cb:78:5a:3c:a0:
         48:97:72:3e:45:90:5f:50:78:62:99:3d:29:7a:fb:84:3e:b4:
         89:f6:dc:2d:1f:82:a7:21:97:f7:c0:ce:83:47:c2:4a:07:26:
         d8:3c:84:49:a0:68:cd:1f:f0:89:f2:e5:aa:96:c2:9d:23:32:
         d9:60:77:a0:f5:22:25:4d:6a:05:9e:bb:cf:45:5a:dd:57:47:
         ab:cf:fe:24:79:eb:46:44:62:64:05:51:36:77:5e:58:29:37:
         89:67:6b:8b:a2:4a:c7:a2:3a:37:2b:94:c2:76:40:f7:a5:ee:
         2e:ee:15:87:c2:73:e1:eb:12:44:7f:af:f7:f1:88:5d:4e:69:
         e2:12:3e:8a:3c:8c:5e:9b:dd:04:0d:91:0e:10:2b:7a:5c:dc:
         29:83:46:30:d6:65:53:be:7a:08:b2:b9:2f:1e:65:ca:bf:9f:
         15:90:15:0f:60:33:7e:ca:71:5b:ae:97:5c:38:02:f6:0e:c3:
         7e:d3:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----