Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File:                     Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier:          nIsgrbUTXCQrw4WfXRIDv+UnYfQgER30HM+heaC0ERs=
Subject key identifier:   9E:D5:25:CF:6C:AF:43:3D:E4:5B:F3:A1:67:D9:3D:0B:EA:6E:8B:89
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer:       /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial:       01962F3D34C79A98EF55749A691C0E206D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: KMgy+ECXWGxjoeLXRstZKA6HbqsYXgcJuNAsIc/GCCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:c7:9a:98:ef:55:74:9a:69:1c:0e:20:6d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=9ed525cf6caf433de45bf3a167d93d0bea6e8b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:ce:73:89:a1:b4:f8:ba:25:0b:29:68:96:
                    f5:d9:5f:fd:74:70:57:af:d1:c1:fe:b7:1f:65:ae:
                    9b:c8:4c:10:0e:93:f4:4d:cf:f7:f1:e4:b2:95:e1:
                    7f:0f:50:de:4f:73:8d:7b:6f:4b:c4:16:1e:15:10:
                    ab:1b:b8:3f:fa:74:a8:83:47:ff:e4:9c:ae:83:5c:
                    c5:70:ff:a7:ed:d1:30:1d:b0:cb:8e:57:b9:f1:de:
                    77:f0:ed:19:84:dd:28:ff:94:89:d5:76:7c:49:c4:
                    a2:f0:6f:92:c0:56:31:a8:a5:fc:00:6c:27:a3:f5:
                    3f:2d:26:60:b7:c1:39:bd:12:23:0c:7b:db:29:c3:
                    ea:f5:31:00:46:02:23:62:ce:a5:dc:56:59:68:50:
                    9a:3e:8f:4e:0d:42:62:52:7b:75:ac:a1:d0:74:9d:
                    28:c7:46:66:40:20:d1:86:83:97:60:83:b6:26:c0:
                    10:46:5f:f2:8c:9d:73:cb:6f:34:16:1a:fc:10:e7:
                    7d:da:b0:9a:4e:c6:08:8a:ad:e3:5b:4b:31:77:ab:
                    f8:4b:0f:fa:91:61:63:d5:ef:ad:ce:2b:51:3d:9a:
                    26:a5:71:05:ab:b3:8a:f7:bd:bc:2f:5b:b5:d7:c1:
                    cd:83:79:b3:3f:61:e5:8c:83:29:76:8b:62:8d:cc:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:25:CF:6C:AF:43:3D:E4:5B:F3:A1:67:D9:3D:0B:EA:6E:8B:89
            X509v3 Authority Key Identifier:
                keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:27:f1:50:a2:36:5b:c7:63:da:28:12:66:27:3a:40:36:
         20:c5:56:1e:30:86:8b:bb:8e:e3:6c:47:09:42:c3:f0:42:64:
         20:f9:25:46:e9:b9:04:f7:e9:34:81:ec:a0:40:b1:6b:46:6a:
         a5:54:80:61:87:93:77:ef:08:5a:38:87:42:2c:cc:97:b2:bc:
         63:bf:73:2d:53:64:e5:7c:27:18:ec:48:6c:1d:09:bf:55:b0:
         35:43:ea:af:2f:34:67:b3:d4:13:e6:9c:72:14:e3:f2:18:5b:
         db:ae:b4:0e:ff:15:71:1a:af:b1:0c:09:81:db:c5:a8:ac:0c:
         9e:e3:21:55:42:80:43:41:e8:b3:b9:a9:40:c9:45:4f:8d:db:
         63:f0:16:a7:02:f6:3b:40:6c:20:81:b3:fe:69:47:ea:c3:7c:
         4c:70:c7:31:83:0f:1d:6f:de:8c:af:18:2e:2e:fa:4f:ee:47:
         ee:e6:e7:7a:67:e7:17:c4:44:98:cd:c4:44:cc:f7:01:15:4d:
         fe:fa:3b:4c:4c:f6:dc:76:4a:9c:09:71:31:5f:e6:d9:be:97:
         03:6c:f1:6b:62:b9:e7:ed:d4:3a:db:2b:fb:f8:0a:a7:19:1f:
         e8:8e:5f:bb:a7:b8:73:77:8c:9b:6f:df:82:37:8a:92:51:71:
         e6:3d:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----