Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          ejqePjkkPvu6qzUV0ppniCglGeyR/RxSuqZZXcTRuic=
Subject key identifier:   43:DD:54:26:DE:5F:4F:F6:F4:AE:15:64:37:43:06:5A:F6:0A:B2:94
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       01962F072FB3AE1A766FCBF2F9C9F600D5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          045B
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: NUIKMvC04UQWnIxw+5rjtX/kOAOowjIMQL8eZLStnS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2f:b3:ae:1a:76:6f:cb:f2:f9:c9:f6:00:d5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=43dd5426de5f4ff6f4ae15643743065af60ab294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:9d:73:9e:0e:e2:92:35:2f:f7:0b:6a:18:
                    16:d6:e9:35:26:eb:ab:b2:83:a0:89:d1:b6:e6:91:
                    bd:f1:b4:d3:fa:9f:1b:12:d4:b2:c1:bc:98:1c:d5:
                    fa:1d:b4:e0:b1:45:46:6f:f6:ad:e0:e8:7f:cf:8b:
                    07:b1:a0:5f:1b:1c:93:9c:65:6d:b2:7a:3d:64:59:
                    3d:c1:a9:4a:e9:33:d4:fd:ad:d2:a9:af:7b:dd:42:
                    fe:be:82:2f:ed:e1:75:2d:c5:3c:42:22:d9:2f:81:
                    41:a2:21:58:66:2c:d0:b9:55:be:fa:00:2e:96:5e:
                    62:3f:39:d3:e6:c4:52:ca:1b:a6:8f:c0:e1:df:f6:
                    4f:20:d0:51:ee:c2:3a:f5:6a:f7:d1:ad:f9:71:67:
                    1d:9c:65:b2:d7:5c:b7:10:db:b1:a1:e1:11:c1:b8:
                    86:8e:55:5a:5b:da:32:5c:b9:b0:cc:ce:d4:65:78:
                    18:e6:9e:92:f6:0f:f1:97:b1:c2:f7:c8:08:81:5e:
                    de:ad:92:61:53:dd:b8:84:ec:ce:e5:b0:35:de:78:
                    bb:b1:2a:b5:a0:8c:8f:ac:3f:2f:50:5e:3c:11:d3:
                    f2:0e:12:3b:6c:15:90:9f:78:f5:ba:12:5e:85:53:
                    50:66:9e:ba:ee:c7:ec:7e:c1:c8:65:54:77:07:97:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:54:26:DE:5F:4F:F6:F4:AE:15:64:37:43:06:5A:F6:0A:B2:94
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:7d:8b:25:6d:00:77:c1:9f:f3:e6:c0:3f:ed:2d:91:43:
         5b:f3:b3:ad:eb:d3:47:bc:22:15:d9:8f:3b:a4:83:a3:fa:a7:
         5a:ba:57:e8:05:e3:47:44:f1:98:84:45:e1:f0:8b:95:65:62:
         a6:e4:93:dd:46:5a:8d:0f:1b:50:cb:10:f1:2b:89:e1:f6:60:
         f1:da:c5:6d:00:25:09:f7:26:bd:4f:2c:c7:f3:5a:e8:fb:70:
         54:ba:30:b6:d9:9c:2c:c4:43:b0:e3:92:c2:9e:1d:44:67:24:
         e1:bf:c7:76:84:b4:50:7f:f1:4c:69:90:68:96:57:4c:fb:5a:
         95:ff:60:34:3d:a4:93:1b:4a:55:b3:8b:44:3b:ab:ae:d5:24:
         73:c3:e1:cd:a6:27:ff:06:f1:fa:66:50:68:c1:65:af:8d:94:
         9d:a3:4a:1e:be:da:29:57:c7:26:5c:28:50:72:b4:29:e2:5a:
         0e:b5:c4:b1:00:96:fa:52:25:1c:34:b4:c6:34:b1:34:cd:e0:
         aa:a5:67:0c:e7:95:8e:3f:87:ce:97:38:88:5e:8e:29:22:89:
         50:46:1e:d2:2e:56:22:08:37:f0:e5:62:c9:72:24:3f:5a:86:
         6e:8f:72:77:f0:77:07:d9:d5:29:59:28:7d:13:6b:a0:83:23:
         f5:4c:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----