Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File:                     Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier:          zCX1nX5EYAoFwGiM/j4lbmEq73wRENRBZvZhxnyOI+A=
Subject key identifier:   E3:B5:C4:D2:2E:4B:B0:1B:F9:7E:50:35:36:B7:5C:E3:9D:B8:F0:0A
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer:       /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial:       01962F741E4EA0CCA38EDE5851EEB7552D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: t+i4YbzIwafInvGPVDmT7CQiiD862zWQL8nqFdDMh4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1e:4e:a0:cc:a3:8e:de:58:51:ee:b7:55:2d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=e3b5c4d22e4bb01bf97e503536b75ce39db8f00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:6b:16:4b:83:c5:ad:60:88:a4:2d:5d:55:
                    f7:b1:03:4c:42:06:77:13:3a:4b:66:26:a7:9e:81:
                    fa:f8:29:41:ba:88:9f:2e:2f:58:98:45:e0:d8:83:
                    9e:73:8f:ae:04:2f:ee:82:33:1b:5e:c9:5e:f4:fd:
                    25:31:cf:49:01:72:46:5c:c9:0e:50:33:3d:d1:b9:
                    ef:2e:5f:d1:fc:cf:43:d1:e0:4f:a9:73:08:ec:84:
                    3d:ee:b9:da:96:bb:71:91:f6:3d:29:da:c9:34:f7:
                    a4:33:ff:b2:ef:5e:be:56:5c:7c:d6:ce:5e:5b:a8:
                    66:0c:92:09:62:2a:f1:03:fc:f4:24:10:d2:70:1e:
                    fe:b6:8f:bd:9f:a3:7b:68:33:cf:18:94:7f:e1:0b:
                    89:ad:bb:b9:c5:35:e7:79:73:31:2e:fc:b3:75:c2:
                    53:5f:b2:f8:e2:aa:bf:10:60:7f:8f:9a:f6:02:e6:
                    51:44:e2:59:f0:f1:c1:0e:86:f3:f8:1b:bb:d6:3f:
                    b7:d6:9d:a9:d7:1d:38:92:09:74:e1:c9:e3:4b:25:
                    7f:f7:ca:56:cc:b4:01:d5:bd:b2:45:22:51:4b:d4:
                    71:6a:9f:59:8e:eb:3b:7b:b6:6d:c0:dd:75:d4:d5:
                    82:d0:67:b1:05:1a:ff:0b:54:5d:86:58:52:77:58:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:C4:D2:2E:4B:B0:1B:F9:7E:50:35:36:B7:5C:E3:9D:B8:F0:0A
            X509v3 Authority Key Identifier:
                keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:e4:54:05:ba:7a:01:93:88:9e:2c:66:7f:dc:2b:49:d1:
         2a:92:59:a0:63:09:43:7f:da:4b:da:8c:6b:3b:22:da:f5:d0:
         92:7e:01:b2:b0:ec:79:ad:62:ba:a1:0d:72:23:28:40:75:59:
         42:32:f0:c1:c8:27:07:48:69:b0:59:e8:62:a4:9f:85:d5:dd:
         65:9b:5a:03:7b:7e:b6:2f:34:ce:fc:12:71:72:d3:28:bf:e0:
         0f:69:88:70:4d:ab:ef:87:e4:17:58:57:7a:92:97:53:e6:75:
         44:b1:38:6c:ff:6b:1f:4f:35:44:40:19:b7:47:e3:b7:b9:71:
         c8:02:c3:c0:d6:a7:a3:5b:79:79:ff:96:ef:ba:cf:cb:a2:ef:
         a0:5c:4a:9b:9d:62:ce:7b:6a:6a:e5:ea:61:99:32:12:c7:21:
         51:6a:f6:e8:9b:43:6f:6c:4c:e9:a2:8f:ca:06:1f:10:22:da:
         86:fa:1d:5f:1f:38:5e:47:60:b5:ae:87:dc:7e:67:a6:1d:79:
         e6:32:6c:6d:71:ab:b5:15:41:78:bc:6a:55:5e:77:cf:81:9d:
         0e:43:a4:1b:18:7b:8d:70:5f:02:cc:f4:02:dc:98:db:ba:8e:
         46:b1:ff:e1:ae:d4:7e:c7:f5:35:7f:f6:ed:ce:72:37:ba:b9:
         66:3a:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----