Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File:                     A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier:          mhrSmNM3xL8ktGvWFU1Z7zk2L7NEI772Fdkz6yzgAvg=
Subject key identifier:   08:13:B6:9E:8D:71:A0:93:E6:DC:96:05:31:39:AC:C7:1F:F5:9C:66
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer:       /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial:       01962DF3BDEBD3BB5B12B018CF5517F078E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: Ez8whK8TatHiNNqF4iD1rpae4x+wxYStKzEWWIHg5pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bd:eb:d3:bb:5b:12:b0:18:cf:55:17:f0:78:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=0813b69e8d71a093e6dc96053139acc71ff59c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:09:92:a8:94:a9:cb:d4:13:b2:b5:31:15:
                    75:c9:23:6d:02:71:0c:69:75:9e:ff:b9:d1:e5:6f:
                    dd:88:f0:12:cf:5b:ac:78:fc:e3:f8:37:c6:fc:68:
                    55:5f:5f:48:16:95:f4:f7:97:e9:90:5b:f5:ce:8e:
                    9e:60:b8:96:9f:e2:c7:83:ea:e0:21:f6:8e:5b:cf:
                    e2:8e:7f:6a:79:5a:84:66:e4:c2:e4:a5:64:3b:01:
                    2f:58:ab:6e:24:84:54:6b:20:0f:b5:99:f0:43:9e:
                    c2:7b:7d:3e:98:61:d8:c7:c5:ed:2c:f0:f5:ca:1d:
                    fa:3e:7c:e2:66:b5:9c:3d:db:29:4d:25:09:37:bf:
                    c0:e9:79:80:08:d8:7c:b9:3c:8b:e4:a8:dd:55:a6:
                    6d:d1:b9:aa:1b:96:80:9c:99:89:02:ba:99:7f:9c:
                    6c:a5:59:78:73:02:9c:38:47:90:ab:1f:0a:51:55:
                    3c:e6:aa:2d:3b:a9:60:d0:a9:d7:6f:1e:10:dd:e1:
                    80:ed:95:ad:11:14:33:24:e9:d2:75:d7:41:ae:79:
                    5e:36:98:ee:bd:b9:a8:82:5c:79:32:37:5e:9a:2c:
                    38:a2:4a:79:99:d2:94:54:f6:e3:1a:d7:00:ee:e0:
                    ce:04:97:e8:f2:3f:3f:24:56:3d:e5:1d:27:26:28:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:13:B6:9E:8D:71:A0:93:E6:DC:96:05:31:39:AC:C7:1F:F5:9C:66
            X509v3 Authority Key Identifier:
                keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:08:76:1b:4e:f3:b8:00:30:16:2f:e8:b3:d0:0d:e4:51:
         20:ef:85:c9:03:eb:a3:f3:1a:dc:98:32:5b:2c:82:9f:a8:92:
         19:57:3d:35:0d:f0:a1:a0:14:2e:5d:5f:6f:95:12:b2:86:af:
         f9:dc:54:e5:cb:3c:15:04:8d:77:16:0d:10:92:d3:c4:14:9f:
         1c:9d:67:a6:2e:a7:bf:7d:f2:40:71:23:e1:73:87:4c:10:35:
         57:2c:fa:a0:c5:4c:ed:17:83:0f:81:04:8e:6c:69:8d:16:c6:
         e2:7e:7d:24:0d:01:b0:a0:16:4a:8d:ed:23:93:7e:47:5f:c6:
         ec:81:42:26:a0:71:73:5a:75:29:85:84:e1:14:52:d7:ff:df:
         80:67:4d:de:bb:b2:3b:f1:05:9f:38:e5:67:70:c8:d0:7a:de:
         b5:3e:83:e7:f8:cd:57:b5:67:0e:82:f6:6b:1a:dc:a7:c5:1a:
         48:36:5f:6d:a7:ac:4c:4c:79:3d:09:86:fe:43:f2:26:bc:e5:
         93:8f:66:a1:d0:75:48:8e:d5:53:26:4e:0a:41:7b:fd:7b:c6:
         4e:cb:42:b2:e1:c2:5b:9d:99:0c:4d:c7:0d:9c:48:5f:32:78:
         50:d5:0a:87:62:2f:50:07:f1:94:60:01:cd:c0:ed:d9:db:20:
         7f:e3:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----