Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File:                     FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier:          2716PfjXWITBsbH014A2u6gLdi2PXIsXClR15xQs4+k=
Subject key identifier:   1F:65:8A:E3:AC:6E:E8:6F:D9:1D:7F:4C:30:F6:29:CF:E8:62:CB:B7
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer:       /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial:       01962E99A02F3F25BD62790270B1C2C1F5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: hnpefb8kJCJz0+mJTv9BAJj3osUdQ3TcGg6S5GYz5Ww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a0:2f:3f:25:bd:62:79:02:70:b1:c2:c1:f5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=1f658ae3ac6ee86fd91d7f4c30f629cfe862cbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:bb:e7:2e:ee:67:44:d5:15:18:c8:dc:67:
                    71:4f:2b:6f:51:2a:41:9a:97:7a:cd:b8:ce:f3:5b:
                    5a:a0:d6:0f:0d:d4:70:c9:7c:e1:88:e6:29:d7:45:
                    6e:ce:5e:62:52:82:01:e3:4c:54:98:83:93:c9:d2:
                    6c:0c:30:88:d2:65:25:d5:c2:96:07:98:3e:83:2b:
                    21:8a:d6:6c:94:7d:01:ab:7f:8e:87:33:25:4b:b2:
                    0f:7f:32:77:a9:96:b6:5b:0d:dd:3e:f6:13:c3:d3:
                    cf:ef:fe:03:83:14:89:55:06:d3:92:e3:24:e0:e2:
                    29:e2:50:bc:78:45:e7:ed:cd:3b:2c:8e:da:50:1d:
                    24:85:0e:77:ce:f5:c8:99:22:41:7b:a0:cc:44:fa:
                    4a:2a:2e:83:84:b3:86:ec:ab:21:29:f0:16:1b:b0:
                    68:73:79:5e:64:56:48:f1:ec:e7:64:cf:27:8e:ea:
                    d4:5e:8b:c0:5a:aa:4a:c9:03:8f:6b:1f:d3:41:36:
                    a6:ee:27:cf:7b:7b:5f:4b:af:a2:a2:e9:41:30:d6:
                    45:e6:2c:d4:c0:fa:32:9a:b9:4e:9f:c3:3a:93:5e:
                    5f:6b:14:2d:90:04:d9:ae:0e:d3:3b:4c:af:f9:b5:
                    d2:89:98:25:c2:64:1a:53:44:50:7c:29:1e:4b:6b:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:8A:E3:AC:6E:E8:6F:D9:1D:7F:4C:30:F6:29:CF:E8:62:CB:B7
            X509v3 Authority Key Identifier:
                keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:e7:00:6d:f2:0d:d1:d1:ee:fa:23:6b:33:a7:f8:6c:50:
         56:8b:0a:de:50:30:1a:8d:cb:26:bf:75:5f:7c:c1:3e:a2:51:
         d5:82:22:b3:a0:62:06:c9:c6:0a:6c:14:a2:bc:13:e2:0b:e5:
         de:8d:11:b7:77:3b:73:8c:72:39:49:9c:ba:5a:c4:9d:e1:ed:
         0e:1f:b8:b9:7c:54:e0:cf:13:3e:47:4f:68:4e:1c:87:74:da:
         94:a2:7e:64:5c:88:60:f8:79:d0:5e:42:3c:6c:ff:24:9d:25:
         94:55:20:62:94:4a:c5:d1:0b:c4:38:b9:97:83:1c:79:a2:53:
         44:06:0c:52:9e:18:7a:69:b3:5e:f8:93:b4:55:c4:d8:f3:b4:
         22:3b:c7:d5:51:2e:f5:45:1d:30:86:b6:2f:33:41:cc:31:d1:
         a9:ae:f5:84:f6:37:ff:63:8e:f8:90:d4:8b:c9:88:ef:f9:58:
         78:d6:c0:1c:4a:5d:c4:89:03:23:4f:ec:81:b2:5c:8a:a9:b6:
         b6:87:ab:fc:57:70:23:15:d5:c6:e2:c4:00:74:30:f1:20:d4:
         9b:4c:ab:01:d7:3c:94:b3:2f:66:06:39:e0:45:fa:93:15:ce:
         48:11:97:ae:ac:d9:76:fa:97:46:9e:98:9f:1b:a3:37:59:a0:
         d0:9d:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----