Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File:                     04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier:          mYBfNOtmvWggmjqjaKnw3VoNF+TiNpR+G3NDSBoQ9H8=
Subject key identifier:   9C:16:C1:39:BD:2E:C9:4C:76:BB:06:27:7B:D9:60:CB:51:0C:3F:2D
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer:       /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial:       01962E996CC7DE938352CA7BB833F62A5DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: PfIMFUCvIM6i074e/CnicBDiuDbcEg6hQm2D6hHya/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:c7:de:93:83:52:ca:7b:b8:33:f6:2a:5d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=9c16c139bd2ec94c76bb06277bd960cb510c3f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:83:30:49:82:9d:cc:5c:55:50:60:08:c5:
                    a4:d1:b5:ae:70:cf:f8:d3:2f:30:eb:f7:b6:0b:61:
                    f5:6b:2e:31:aa:22:76:6e:a0:8b:1f:0a:89:e4:a5:
                    29:68:fc:2a:b5:10:ce:12:c2:e7:b0:20:5b:6e:fe:
                    13:3f:8e:15:bc:14:bb:71:25:fb:2e:ec:5b:7f:96:
                    20:a6:78:21:84:a0:f9:32:e1:ff:aa:26:88:aa:11:
                    8c:fe:ef:ad:d9:71:ba:13:a2:9c:30:fb:08:03:72:
                    3b:8f:a1:af:e0:28:bf:82:8d:a4:07:07:93:dd:68:
                    b7:c7:16:11:37:97:12:dc:f1:f1:7f:f5:b8:72:79:
                    08:15:5e:62:be:92:c5:ab:f5:d5:21:fa:95:c7:93:
                    a6:95:bb:33:a7:21:c2:ff:a9:8c:fe:61:1a:39:87:
                    33:24:3f:99:88:fa:b4:6d:b9:c3:f3:9d:52:20:c9:
                    e5:23:7b:10:ae:e0:d2:fb:e6:48:4f:4a:c0:f8:3d:
                    0f:b7:2a:c6:22:b9:cb:45:38:d6:84:ba:20:ca:47:
                    82:a9:59:f3:e9:bd:f1:55:4c:f0:41:a5:6d:28:ce:
                    e5:04:10:22:f4:a1:bd:c6:4b:7b:a3:68:2e:c3:48:
                    ae:f0:38:c3:37:02:3c:77:7c:57:e3:99:c3:68:40:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:C1:39:BD:2E:C9:4C:76:BB:06:27:7B:D9:60:CB:51:0C:3F:2D
            X509v3 Authority Key Identifier:
                keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:09:ec:d7:88:ec:47:8f:1b:53:f8:c2:41:1b:50:57:3f:
         40:d2:52:e2:3f:dd:50:d0:fc:dc:fd:af:b4:5f:e7:61:91:3d:
         63:d6:af:b6:30:c5:b0:83:50:55:30:ea:9d:c8:1c:cc:54:b1:
         ff:9c:d3:52:88:a8:86:ab:7e:83:a0:74:48:02:5a:f0:17:30:
         d9:cb:d6:e3:89:7f:61:03:1b:14:eb:2b:04:45:be:e8:73:fd:
         f4:96:07:59:ff:5b:40:ce:05:aa:c2:94:87:bc:68:70:23:98:
         94:c0:a4:03:96:cd:c8:fa:1c:09:f3:87:4b:25:a4:a0:c3:ff:
         9a:7c:ab:f6:f7:d0:cd:56:95:b9:e1:ca:de:74:07:31:44:67:
         f2:ad:dc:f5:08:71:db:fd:d9:dd:ef:ce:9f:8b:36:8b:65:8f:
         18:21:aa:9d:35:55:14:d5:39:20:d6:05:47:1a:9a:d7:18:3a:
         08:de:e3:41:fd:7f:f1:fd:52:7e:e8:1f:da:a5:03:b2:2b:f3:
         e9:a7:89:19:a4:1c:3a:3c:86:d0:39:d8:e0:98:95:67:1e:76:
         ef:f3:8a:f0:dd:51:10:ce:5d:28:ca:f5:fa:50:6d:e2:1b:5f:
         fe:da:dc:c7:5b:22:d6:5d:6f:f8:7c:97:29:ea:18:d5:d3:5e:
         8e:7e:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----