Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          xEkM+RhoG3M55fQgD9vARpSnPTBQYahUS9HEXz5YO6k=
Subject key identifier:   76:28:24:23:E8:91:17:26:34:A2:6B:7D:44:88:6C:7A:27:FB:22:85
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       01962FAB1129F065C89D9C07F166CD03C8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          05DC
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: N7a6hj50/OcuZVikoP9mmix3Pi9JNDP8iOEWdI1IgQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:29:f0:65:c8:9d:9c:07:f1:66:cd:03:c8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=76282423e891172634a26b7d44886c7a27fb2285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:92:81:e1:04:f1:b1:bb:17:4c:46:26:b3:
                    dc:d9:7a:32:cb:89:ef:db:62:8a:3f:8b:b8:d6:d3:
                    25:1b:3c:cf:65:cc:95:db:a0:5e:16:82:bf:08:d3:
                    5a:4e:fd:eb:1a:a4:eb:94:81:5e:56:27:61:a8:f5:
                    68:92:1a:36:a2:35:3d:b7:38:7b:58:ef:a6:8a:be:
                    4a:4c:e3:fc:69:6d:85:1c:26:a9:af:60:e5:14:e6:
                    13:f4:53:b0:65:80:2d:3c:ee:99:5f:6e:97:91:a8:
                    72:09:9c:e5:3e:e8:21:ef:cf:39:ef:ec:0f:29:09:
                    e3:d8:dc:28:5a:53:41:4d:cc:6c:10:1f:d4:a8:fb:
                    c5:96:eb:d5:28:68:02:e0:80:f7:94:50:96:7c:0c:
                    42:15:f1:9a:12:03:12:e3:f3:c9:ca:39:24:d7:aa:
                    6e:9e:b9:38:96:de:3f:19:b4:bc:47:3a:da:43:ea:
                    32:7c:8f:a4:e7:89:69:53:d7:54:a8:4f:d9:f0:54:
                    95:9f:ef:53:76:d6:6a:d6:8a:60:3e:c4:94:4b:d3:
                    80:53:1b:51:15:7e:95:26:b0:63:42:fd:f7:25:3c:
                    3e:64:c2:4f:03:00:26:2e:d1:7d:a6:e6:49:83:a5:
                    1f:66:c0:f6:c5:b9:91:d8:d2:de:7a:79:5b:4f:a7:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:24:23:E8:91:17:26:34:A2:6B:7D:44:88:6C:7A:27:FB:22:85
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:1c:07:12:2e:8d:49:56:d4:95:e0:f0:a2:97:33:35:9c:
         d6:53:4a:47:67:0b:8a:ae:a4:4e:34:07:b3:bd:89:85:04:b8:
         6b:32:9d:92:f5:7d:e4:e1:73:95:dd:8d:7a:3b:f1:15:14:d8:
         bc:1f:f7:45:50:7e:58:c6:1e:0d:82:e2:9c:2c:42:91:2b:15:
         1b:74:b7:4a:bc:4d:e7:3e:b0:7f:2a:cc:53:ea:09:66:1e:83:
         e1:7a:ec:ca:41:be:f6:c0:40:bf:95:eb:91:0f:0e:14:40:d1:
         19:0e:ca:88:d3:01:5c:9a:37:da:39:ca:66:20:69:3f:34:5a:
         16:64:d9:be:5d:e0:30:7c:38:9b:59:23:8c:ac:bd:44:60:35:
         ff:d8:44:fc:df:96:2d:42:82:83:ec:86:cb:75:83:0f:f1:2f:
         f8:30:6d:5f:25:6b:68:46:15:5b:b9:28:0c:db:95:77:3e:73:
         66:60:ed:c7:63:64:b7:83:54:93:ad:5f:80:ed:83:d9:9a:30:
         92:bc:1b:2f:1a:4e:72:9b:6d:38:72:ed:6b:d5:64:f3:68:0c:
         78:98:a4:43:83:2f:79:6c:c2:a0:90:6d:d3:25:f3:34:87:e7:
         56:4b:b6:d5:59:3a:b2:d2:5b:00:d2:6c:16:cc:66:03:5f:1d:
         04:7e:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----