Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File:                     lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier:          6zFkVf5ASjlmRD3d5X/S/HXM7Qe5eILv0jrWlQsGWUw=
Subject key identifier:   6D:7D:75:B0:B0:7D:84:16:C0:0B:CE:23:A4:28:C1:1F:94:EC:0F:D1
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer:       /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial:       01962E2AC2AE0DCCE8DC8230F051F8308308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: bk66KS+1mjmx32heR1L7foe8yNEP4VRKqEhJ0UOMbvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:ae:0d:cc:e8:dc:82:30:f0:51:f8:30:83:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=6d7d75b0b07d8416c00bce23a428c11f94ec0fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:95:a3:ae:41:22:15:58:75:9d:ad:69:67:
                    80:31:dc:30:f4:8b:1b:e1:79:fe:e1:07:a7:b0:ca:
                    48:94:63:4c:47:52:4a:e8:4f:c1:25:ad:64:78:8d:
                    90:03:7a:a6:d7:57:6c:fa:cf:32:0b:02:ff:f2:87:
                    6d:29:79:4c:37:94:ac:b4:fb:77:65:78:cb:b9:ec:
                    16:84:79:a1:4a:44:05:a5:a1:24:74:0b:7c:39:5b:
                    54:da:20:14:66:ba:f5:54:b3:0b:d6:39:94:33:63:
                    95:bc:9b:05:a3:4c:e0:54:7e:42:0e:08:a6:96:98:
                    32:07:80:c3:88:5b:46:80:9a:ed:50:d2:a7:5b:24:
                    4e:5f:a7:7f:a0:37:09:52:15:90:c0:e5:b8:40:97:
                    8a:e6:22:09:1b:ac:3f:89:77:25:f1:13:70:56:3f:
                    11:8c:7b:da:55:a9:f9:57:10:24:61:7e:c6:40:14:
                    b1:90:ea:f3:16:f1:6d:eb:d7:bc:d9:34:c8:3e:02:
                    e1:12:cc:71:7a:24:45:98:c3:bc:ac:32:7b:91:af:
                    70:15:10:50:65:83:7d:16:94:78:36:c2:e4:dd:a1:
                    bf:dc:33:9c:19:b3:2e:aa:66:20:23:52:01:35:c6:
                    7f:8b:3c:95:26:87:dd:1f:cb:7e:e9:e4:a8:c6:57:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:75:B0:B0:7D:84:16:C0:0B:CE:23:A4:28:C1:1F:94:EC:0F:D1
            X509v3 Authority Key Identifier:
                keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:da:e4:41:c0:d3:92:19:1c:62:36:96:da:2c:7a:68:45:
         b4:7c:a8:dc:6a:1d:99:8a:7a:c1:4a:df:07:78:36:9c:10:26:
         91:a4:f6:fa:3e:9d:03:40:de:b8:6c:72:21:d8:d9:51:70:2e:
         91:ea:0b:f3:ef:13:37:ef:34:af:f6:55:8c:c5:04:aa:de:f6:
         93:95:bd:0a:54:b3:88:9e:83:a5:b3:96:ee:29:f5:b9:d5:09:
         d4:d8:56:f5:bc:1b:ce:07:cf:e2:23:11:7a:ce:d9:b9:c6:87:
         3f:61:df:1e:92:6a:b8:07:b3:18:53:cf:60:43:25:1b:f3:19:
         76:57:74:22:81:e8:38:15:5f:fc:2c:19:06:6e:5b:6e:cc:86:
         04:8a:62:98:a5:d1:0a:a5:ac:80:3e:18:bb:90:e3:41:7c:b2:
         48:a3:46:3b:69:65:f5:26:56:58:06:4f:aa:d8:17:67:2e:a1:
         93:d4:44:51:9e:f3:0c:fb:9f:8a:fd:41:9f:fc:b9:1d:0b:79:
         ee:6b:28:8a:a1:fd:b8:fb:2f:c7:11:7e:8f:d4:5b:27:44:55:
         96:d7:c8:58:d9:54:75:7a:37:9f:20:4d:54:eb:32:32:37:7f:
         12:07:d3:cc:72:d4:70:b1:f3:60:d3:42:e8:4f:1a:80:a5:75:
         f4:49:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----