Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File:                     xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier:          yBaSUKEZ/THp1Piw/CU0cFheVLYhpqHwIVCPdWW01rg=
Subject key identifier:   F8:B3:55:F4:7E:61:55:08:91:EE:84:2E:8A:4A:59:F1:52:56:BE:D8
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer:       /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial:       01962E9893FBAE1987CD3C46E38C5F5ED283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: WbCdElfrDIPyg8AvX46jwfp5k6HOpF+IRuCY/kNySVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:fb:ae:19:87:cd:3c:46:e3:8c:5f:5e:d2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=f8b355f47e61550891ee842e8a4a59f15256bed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:d1:ac:db:75:21:31:22:da:0e:9e:06:81:
                    b7:81:fe:80:f5:f5:c5:f2:70:3a:e2:47:c0:f9:61:
                    91:31:17:0a:13:00:04:90:45:ba:2e:80:a6:14:95:
                    aa:80:2f:d5:be:e9:79:e2:6c:fb:ec:13:f4:cc:28:
                    06:73:5b:5c:ca:46:fe:55:0f:49:cd:3d:95:dd:bf:
                    dc:f7:d6:09:f7:f2:5f:89:25:53:72:cc:21:2a:f2:
                    0d:c1:6e:dc:54:64:ec:74:52:09:e6:78:38:50:72:
                    97:d2:15:5a:55:79:66:9c:bc:8a:5b:68:39:aa:14:
                    f6:39:ac:d4:c0:69:b9:5f:42:93:91:2d:48:49:0c:
                    38:97:cd:9b:53:4a:cd:a1:6b:86:c6:c0:f6:27:ae:
                    1e:22:f3:98:96:c8:74:3f:ee:c4:53:9a:bb:d6:71:
                    a9:25:4c:1b:fe:f3:3a:4f:7a:d8:5f:28:3b:39:74:
                    08:c4:19:c3:83:76:ed:d0:6f:39:c4:f8:31:d5:b6:
                    8a:76:8e:de:32:5e:15:4d:69:dd:6d:a2:20:0c:22:
                    e0:b1:ac:09:f1:ec:b1:30:d2:97:32:13:50:ab:9d:
                    3e:cb:81:96:32:85:da:c6:3e:39:3a:00:c5:05:20:
                    80:36:cf:10:14:34:25:08:5c:21:1d:05:70:1c:43:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:55:F4:7E:61:55:08:91:EE:84:2E:8A:4A:59:F1:52:56:BE:D8
            X509v3 Authority Key Identifier:
                keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:28:16:e7:6a:ff:9e:b3:c1:86:4c:69:fd:e6:9a:17:aa:
         08:b3:7a:8c:6c:cd:d1:96:f4:ad:f9:e6:3b:56:2e:43:e4:9a:
         10:29:29:fc:23:7e:16:aa:b4:78:ec:6c:6a:10:fa:a5:91:4d:
         19:9f:e4:94:da:09:11:d7:e2:fb:d0:10:7e:0f:c9:ea:a0:63:
         95:3d:37:81:60:c7:c6:ec:29:10:a3:33:dc:9b:c9:1e:c7:46:
         4a:9b:66:29:99:d2:5b:68:48:79:30:e6:b4:5b:7d:67:f0:df:
         ce:10:c5:52:55:25:ab:54:dc:9e:92:48:a1:45:dc:87:87:2f:
         8f:71:1b:d7:05:d1:f2:63:65:ed:db:3f:66:9e:a8:af:db:44:
         ba:23:b3:22:64:7e:ee:7b:07:1b:b6:3e:22:8f:cc:68:a0:9a:
         d2:64:51:f9:c9:ea:65:95:18:e2:98:14:4b:c6:14:d3:17:c5:
         bb:11:5a:f0:9c:db:8f:2d:93:24:b7:75:8e:a7:fd:b1:b5:7e:
         88:8f:e4:ec:45:39:ab:89:6d:88:10:61:73:f4:86:74:76:09:
         69:81:c8:84:b2:b1:4e:70:8c:de:d2:bd:bd:8e:93:cf:8e:4d:
         4b:99:bb:60:e5:49:b3:af:52:b3:71:ce:9f:d8:ff:bb:59:53:
         a1:6a:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----