Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File:                     AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier:          +FvSxx1t6JzPsSggh4mbQY0e5O3SAYlmMwgQUFR6x+w=
Subject key identifier:   3C:D9:70:55:96:9D:0C:A1:A7:F5:6B:F4:3C:32:E6:FD:11:B4:28:6F
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer:       /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial:       01962E9984669E445309EA671E7347BF349F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: WsCSR/sd0VunibaKbjNxUnHhuJVx8qDEpQ0736jIRqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:84:66:9e:44:53:09:ea:67:1e:73:47:bf:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015921784488add9a05661ff11787ec754e605e5
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=3cd97055969d0ca1a7f56bf43c32e6fd11b4286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:f0:5b:cb:e9:b9:fd:e4:58:c2:8a:4d:99:
                    c8:fc:51:0e:93:f6:d3:7c:c8:a9:c0:81:80:df:15:
                    fe:4b:c1:fe:b7:96:7f:27:6f:29:38:90:63:b4:d0:
                    09:95:b9:85:02:1e:e3:61:fb:29:27:b6:66:b4:f0:
                    cc:8f:3d:a1:69:e8:5f:00:5c:51:52:f2:e2:ef:ed:
                    dc:94:0d:e5:0a:86:1c:2d:ae:a2:52:e7:40:e0:ca:
                    90:db:5b:0b:97:3c:35:55:4f:23:c1:c1:c4:30:de:
                    bf:58:03:40:22:1a:4d:3e:c5:4d:6b:1e:3a:a0:ff:
                    03:1f:e4:34:2a:74:bc:76:61:6a:5a:e1:5e:d0:00:
                    9c:d7:6a:fb:2f:cb:64:01:61:46:30:28:10:af:7f:
                    cb:e8:82:55:4b:7a:65:79:4a:10:86:69:de:88:39:
                    a3:10:07:fb:02:00:90:fb:1a:a1:78:7e:b2:f0:1f:
                    e1:8c:88:d3:9c:87:ea:04:f9:37:f5:c5:cb:15:23:
                    78:84:a8:5b:c7:42:66:9e:9e:a9:68:58:9e:f8:36:
                    86:63:1f:b1:f9:48:7c:c4:cb:85:2b:96:71:e4:03:
                    03:2a:d6:04:ae:8e:ba:f8:aa:f3:d7:7a:15:bb:ba:
                    1c:f8:c7:19:81:65:c4:97:c9:6c:b7:ed:d3:87:7e:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:70:55:96:9D:0C:A1:A7:F5:6B:F4:3C:32:E6:FD:11:B4:28:6F
            X509v3 Authority Key Identifier:
                keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:33:b3:ce:8f:bf:ff:26:1e:97:c3:63:88:35:c4:1c:c1:ea:
         1c:f0:69:e3:e0:eb:d0:58:6e:b7:16:5a:ec:c8:98:c9:26:ce:
         80:5d:a9:a6:22:a0:a1:36:53:2b:5c:a3:37:92:b2:23:51:a5:
         80:1c:cf:98:ed:29:15:1d:f3:8d:36:ab:9d:43:d8:c5:fc:81:
         40:1c:3f:4f:e1:fa:1a:48:f8:3e:b8:b1:3b:69:c9:7b:3b:91:
         0f:bd:80:c3:44:0f:03:41:14:03:6c:ea:93:9d:55:7a:c3:76:
         71:56:22:a2:44:40:ef:a0:52:3d:9d:be:93:b9:68:33:82:69:
         de:05:bf:c8:c5:1b:22:51:11:1f:bf:44:38:86:43:79:f3:e0:
         52:9a:19:76:ce:54:f1:5b:86:17:91:c6:3e:fa:b4:6b:b8:92:
         27:45:e9:14:6a:94:f0:c1:8e:7c:81:b5:5e:53:7a:d3:af:18:
         41:52:fc:d3:70:5e:f4:44:8a:51:a8:12:ac:a1:e9:51:80:5d:
         0f:59:ca:7f:a7:5c:92:b1:d4:c5:6e:5a:1e:7d:0f:9c:42:4d:
         27:cc:6d:16:df:85:7d:f9:29:5c:c7:c1:ad:51:fa:46:a1:ee:
         96:8f:07:40:fa:7d:44:36:30:b1:fe:1c:07:48:66:95:86:4a:
         d8:dc:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----