Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
File:                     IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft (raw, json)
Hash identifier:          tcEifzTjiPmteZRoiwKEc/+iPnAjbk8j2DY9zoQLcow=
Subject key identifier:   29:A7:5C:D9:69:BC:53:0F:35:92:9F:2A:0E:8F:B8:6D:A1:B5:1E:CA
Authority key identifier: 21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
Certificate issuer:       /CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Certificate serial:       0195C83E2CFCA649E580E4DFA4C684C6DE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
Manifest number:          14B1
Signing time:             Mon 24 Mar 2025 13:01:12 +0000
Manifest this update:     Mon 24 Mar 2025 13:01:12 +0000
Manifest next update:     Tue 25 Mar 2025 13:01:12 +0000
Files and hashes:         1: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl (hash: 6aZCrD3xpBeycn+fXW9db9T/m60vfy04qk8rdeIAeaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:3e:2c:fc:a6:49:e5:80:e4:df:a4:c6:84:c6:de:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
        Validity
            Not Before: Mar 24 13:01:12 2025 GMT
            Not After : Mar 25 13:01:12 2025 GMT
        Subject: CN=29a75cd969bc530f35929f2a0e8fb86da1b51eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:0a:a1:b4:6f:95:de:2a:25:72:b4:82:bc:
                    54:5a:15:83:d2:99:2c:5b:fe:98:d1:9e:d4:b4:1d:
                    16:91:9c:05:d7:4a:6c:88:15:06:7e:d2:11:1c:e5:
                    70:89:31:d1:84:49:8f:b1:b0:cb:64:1d:54:b9:65:
                    34:9f:5e:22:67:d0:b0:c6:28:e9:82:58:36:79:6a:
                    6c:94:87:bb:27:bf:b0:82:9f:31:3a:b3:db:66:4c:
                    30:dd:5c:36:25:2f:76:f7:ab:f5:5b:a3:0d:ef:e3:
                    82:92:6f:15:38:39:d9:2c:66:22:8a:c9:58:6c:a1:
                    79:4a:7f:b3:8e:1b:47:e2:d2:1d:8b:3f:85:fe:17:
                    f5:27:84:fe:6b:a7:61:8e:04:04:85:e8:82:f2:6c:
                    d0:a6:f6:21:fb:b7:13:12:d7:20:1b:e3:63:62:5b:
                    69:65:00:e4:a5:67:42:db:20:78:cb:e8:1c:04:25:
                    e5:1f:1a:10:c3:da:de:92:21:38:43:46:ce:c0:cf:
                    49:ea:cd:57:db:39:84:1b:c9:60:73:70:73:59:b1:
                    eb:32:dd:5b:40:5f:39:e5:09:01:87:41:22:3f:7b:
                    03:da:50:1a:30:24:6e:a8:cc:7a:06:e3:af:7a:2b:
                    38:24:e7:4f:a8:6b:12:ce:49:dd:e5:52:f2:de:60:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:5C:D9:69:BC:53:0F:35:92:9F:2A:0E:8F:B8:6D:A1:B5:1E:CA
            X509v3 Authority Key Identifier:
                keyid:21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:f5:37:50:a7:e9:7b:27:6f:02:58:5c:db:41:cc:9d:b3:
         5a:0b:8b:95:9c:a9:d2:90:34:c3:d4:fd:da:57:95:74:dd:ae:
         fe:ae:21:e4:04:8e:90:43:79:dc:ba:80:82:74:83:ae:9c:be:
         8b:47:63:86:74:1d:da:8c:b7:7d:03:6d:2f:e2:7c:9e:ca:d6:
         99:c8:2b:14:1a:b8:09:79:5f:2e:c6:9c:ee:16:26:b3:be:be:
         a4:23:28:a3:5f:17:02:a3:76:36:d1:86:c8:48:c4:25:2b:13:
         cf:3e:e1:16:2f:4d:76:0c:29:9f:0e:ec:c1:c5:10:e8:04:5f:
         5d:ac:43:13:fc:0f:aa:8f:e6:60:e0:75:7e:1f:2a:bb:98:6a:
         3f:a7:84:66:b6:de:8a:77:2f:76:ff:b8:68:1b:2f:a2:3a:1d:
         c5:63:fe:bc:41:f9:bf:32:a7:69:6d:66:00:42:08:4f:be:a9:
         29:2c:ae:20:78:ac:14:32:fb:f0:bc:d1:aa:cb:67:c4:62:1a:
         27:5f:0d:e3:f1:c7:aa:03:52:7c:6f:bc:14:02:1b:fe:97:b7:
         75:05:18:97:d0:05:d5:65:03:ff:46:e3:97:2a:d1:7e:1c:6f:
         79:8c:44:13:5d:11:49:7d:95:9a:85:85:6e:58:8c:85:d5:aa:
         dd:b5:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----