Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File:                     aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier:          NFOhTk3UQ8tcs/dcswNwcY+S094/RiyJHHdiIOCoE/U=
Subject key identifier:   F6:78:65:3D:8D:B0:8C:DB:31:6E:69:C0:20:04:87:B1:06:D6:64:E6
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer:       /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial:       01962F7458AC8FA41EB283D7532859C232EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number:          0C04
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: Y10nTtyFdDS/Fu8VLFpHET26HWCaAER1G54F4yD9nrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:58:ac:8f:a4:1e:b2:83:d7:53:28:59:c2:32:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=f678653d8db08cdb316e69c0200487b106d664e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:36:fd:9f:94:0d:cc:0c:c1:b3:3a:43:1f:
                    bf:6c:fa:1f:fe:ef:00:ab:8f:b9:86:90:e3:ea:b1:
                    49:b9:eb:a7:a9:ee:0e:bf:0d:b2:9b:cc:c1:29:15:
                    20:c3:ee:67:9e:f0:f5:d2:ed:b5:4d:6b:c6:5e:92:
                    4a:00:36:d0:78:12:9a:0a:3d:23:86:8a:9a:4c:36:
                    00:4a:c3:9c:cf:6b:df:fc:be:56:22:29:b6:2f:de:
                    60:bd:35:1d:df:62:33:7d:61:c9:88:8a:ce:59:e8:
                    96:7d:d2:e5:c8:56:08:c5:12:bb:d3:b0:2d:5c:86:
                    d3:5b:55:d3:c1:e0:55:89:09:55:4b:65:94:d2:63:
                    81:03:40:8d:2c:8a:f8:1e:12:e3:f8:82:86:80:d3:
                    16:93:99:11:ec:f0:4d:09:25:85:28:00:f3:be:41:
                    86:ee:7d:75:fc:94:0e:88:ba:7b:c8:10:95:d5:e5:
                    66:bf:e4:30:39:f6:b5:3b:ab:dc:2c:b3:7e:99:92:
                    4a:3d:18:02:da:82:f1:8d:16:56:4a:34:ee:d8:00:
                    a6:60:dd:4c:55:c3:3e:73:c5:b0:6c:5f:f0:8b:56:
                    f9:54:ab:cb:43:01:4e:a7:bb:61:e1:03:20:88:72:
                    e5:04:79:92:fa:1e:e1:b3:d0:54:13:a0:65:da:4d:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:65:3D:8D:B0:8C:DB:31:6E:69:C0:20:04:87:B1:06:D6:64:E6
            X509v3 Authority Key Identifier:
                keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:b2:39:06:8e:36:a9:4d:74:8c:c8:b4:02:70:a9:5c:6e:
         8b:1d:10:12:0c:b3:cd:b5:2a:0c:6f:6c:96:34:69:fb:77:5f:
         da:1a:06:f7:2a:8b:99:c5:0c:7f:c9:aa:cf:a7:e5:a9:f1:bd:
         52:16:76:7f:6d:0f:55:62:f6:1b:1d:11:2d:11:33:b7:3c:39:
         be:c8:c2:3d:20:d2:9c:0a:78:d1:9b:b9:73:a6:d4:ad:6a:84:
         f7:8c:15:cb:56:50:3e:55:eb:b2:03:83:95:b6:a1:a1:48:02:
         18:d1:fe:b7:e9:f6:a5:f0:81:0a:98:ca:2a:b3:5d:d6:ed:97:
         f3:d1:e8:e6:62:ae:f9:3d:39:18:3a:a5:b1:94:9c:f4:a1:0d:
         99:08:39:e3:a4:28:de:0a:a8:71:25:b0:c6:33:7b:90:be:07:
         68:1e:35:12:90:4e:0f:f9:e7:0d:09:6e:11:12:32:ad:bc:a8:
         c8:00:b9:95:2e:50:d7:9d:de:92:b5:87:ea:fe:37:af:29:c5:
         dc:16:5b:5f:ef:4e:a1:5b:09:90:ff:7e:b8:bb:bc:f3:38:53:
         7c:7b:6e:9d:c1:ec:d9:83:dc:df:4c:aa:ec:0f:22:78:f0:d9:
         9c:cb:8e:0c:52:39:4e:8f:3d:0d:30:e0:47:89:b2:a0:20:88:
         5f:04:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----