Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File:                     aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier:          6hoSNq6/HwFxvS74jLtr+ub3k6cRS7UH0ouKLQk6KgA=
Subject key identifier:   46:C6:10:A4:11:09:40:5D:78:D2:27:D1:94:0B:E4:7B:B8:92:F6:5C
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer:       /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial:       01962E99BC1EFE6B70C35EE156A6025B81AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number:          0971
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: gYuOKYGWNpjPIUeP440vP5pmIfc87JvgYnUe5S3nxsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bc:1e:fe:6b:70:c3:5e:e1:56:a6:02:5b:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=46c610a41109405d78d227d1940be47bb892f65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:ed:68:83:c6:3a:90:7d:c8:4f:10:02:29:
                    1c:62:f9:36:4d:f6:f4:92:50:86:05:8e:29:67:ff:
                    62:e5:76:45:de:c1:c2:06:00:58:e7:39:9a:6c:25:
                    65:1c:5a:d3:89:79:f6:1a:9e:9f:1d:bf:ed:10:ef:
                    70:3b:c6:86:c0:4c:b2:a3:f2:d4:15:ac:ab:c9:2e:
                    7a:72:07:30:c3:d6:2d:6e:83:8e:f4:42:3e:0e:0d:
                    ad:1c:31:16:2c:79:7e:90:6b:d5:67:d8:bb:37:ef:
                    d4:54:e6:a4:6b:53:81:53:27:b2:8b:c7:30:76:90:
                    e6:83:5e:9e:e0:71:2f:13:fb:fe:52:b3:be:c7:cf:
                    ba:94:0c:19:0c:05:76:d9:01:44:57:e4:e1:df:54:
                    b7:8f:e3:e8:0f:f4:51:4a:5d:73:45:42:01:9b:9c:
                    cb:1c:e2:6c:53:3a:19:1a:86:34:69:70:17:49:b6:
                    c2:40:a7:e3:75:09:85:aa:9d:21:48:e9:fc:88:1e:
                    72:63:13:07:9c:1c:01:d3:95:23:04:e5:1d:94:bc:
                    2e:8a:0a:07:c4:46:a9:c0:07:91:bc:9d:3f:5d:8a:
                    26:c9:fa:ae:9e:f9:c0:bc:d8:71:5b:db:1c:71:e1:
                    9e:0e:c7:5c:e7:a1:c0:0c:e6:97:5c:5b:0e:52:12:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C6:10:A4:11:09:40:5D:78:D2:27:D1:94:0B:E4:7B:B8:92:F6:5C
            X509v3 Authority Key Identifier:
                keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:58:f3:f7:e7:08:17:c7:16:d6:27:2c:02:77:88:4a:50:
         69:37:41:b8:50:db:6f:78:d2:9c:f5:ca:e4:ff:8b:05:bb:de:
         e7:19:a2:f1:2d:5e:10:ff:06:bc:ca:07:1e:02:ef:f4:04:3d:
         f6:46:71:8d:a7:0d:0f:1d:b1:cf:d7:d8:9b:ed:c1:82:a0:28:
         03:e6:a7:01:47:7c:7a:1a:b2:f3:ee:dd:68:f4:85:a0:33:d9:
         ac:f5:63:26:97:38:74:2b:ae:27:16:7e:41:76:49:b4:6b:26:
         bc:e5:d5:67:0e:73:d2:79:5f:99:53:bb:08:d9:49:62:bc:70:
         5c:88:fc:de:d4:cb:fd:f9:22:d4:24:2c:67:30:a3:e9:72:e4:
         8f:15:fe:32:43:5f:f2:80:ea:fc:7a:1d:48:f1:51:e8:b0:8a:
         76:4c:87:6f:f4:73:0a:20:e3:81:08:0c:ef:f6:2b:e3:b9:cf:
         b9:2c:cc:22:ae:e3:dd:e2:7d:3c:5e:70:fa:94:f4:d1:06:f9:
         fd:85:af:80:c3:79:f3:90:54:5b:bd:75:56:04:c1:ce:70:9e:
         07:0e:de:5e:75:6c:c0:7b:a7:a7:42:a1:cf:3a:20:0c:b1:2c:
         9d:73:16:57:46:43:67:90:16:c4:ac:fc:86:e8:62:e3:8f:76:
         58:42:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----