Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File:                     _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier:          2TjTVGidMae/j8MrRahxSl6Whv6AM3Vqi0pHw3tcZnE=
Subject key identifier:   CC:C0:6F:90:43:BA:70:3F:07:95:80:9E:AD:8B:17:A6:E0:4A:A2:7F
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer:       /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial:       01962E99B9AE9C122BE2D4C901BCB335F8F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: bwHmx73Qc9WGc7N1HQXswrGM4s+GJXJa4Y9R4TPZ9PA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:ae:9c:12:2b:e2:d4:c9:01:bc:b3:35:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=ccc06f9043ba703f0795809ead8b17a6e04aa27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:68:8a:54:b1:21:ca:9d:38:6b:bf:4c:d4:
                    35:93:f4:b1:e9:5d:46:8e:3f:43:ea:3b:59:39:22:
                    f5:81:ff:ac:47:b1:26:cb:8c:06:4f:75:40:5b:4e:
                    f9:5b:12:40:d5:ec:a3:2e:c0:df:c9:af:8c:80:7f:
                    46:bb:41:22:09:ea:95:5f:3a:0f:b3:3e:8b:c2:a9:
                    fd:8d:82:13:31:54:49:10:93:76:39:eb:fd:eb:cf:
                    e7:ec:c4:16:73:73:fe:80:7a:6e:31:ac:57:18:e2:
                    0f:ec:47:12:5a:91:5d:ab:45:a6:d8:2f:dd:00:9b:
                    57:28:fa:c5:d5:02:8a:09:7f:72:82:5b:50:ec:82:
                    1a:56:79:2d:b9:73:a9:f0:6e:3e:a8:b3:34:14:a3:
                    bc:cc:e0:e0:19:e3:74:09:ab:5b:c5:13:63:02:46:
                    90:57:f8:e8:a7:99:e7:6f:de:48:38:2a:b8:9e:18:
                    09:1d:18:1f:4d:75:bb:76:ec:b1:96:35:78:27:c9:
                    2f:95:3f:e0:84:3f:84:64:78:15:2a:21:c5:82:a0:
                    ee:54:2a:3c:46:40:ff:9a:03:a6:b6:2b:38:ec:32:
                    ea:c5:d9:66:3c:33:a7:97:50:10:19:68:9f:57:16:
                    58:ec:a4:26:56:f6:35:d0:bd:aa:19:5b:6a:f9:88:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C0:6F:90:43:BA:70:3F:07:95:80:9E:AD:8B:17:A6:E0:4A:A2:7F
            X509v3 Authority Key Identifier:
                keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:b7:92:22:2d:b4:77:9a:5c:d4:0e:98:64:d9:76:3c:aa:
         ba:07:65:1e:aa:a9:7e:dc:f2:c4:13:6d:c3:1c:94:95:22:a8:
         8a:83:d4:f7:9f:09:1b:ae:81:8d:e1:fb:af:b2:89:fa:5e:a2:
         f9:10:c9:d5:3b:77:69:22:df:72:65:75:da:46:99:0e:fe:ac:
         9d:54:07:4b:f6:f2:1e:0c:3f:c5:79:e9:23:aa:52:93:c1:72:
         d8:e0:07:a9:e3:03:52:68:85:f3:43:2a:24:43:73:d4:77:b3:
         9b:83:33:4d:d7:a2:78:ed:4a:5c:a8:0f:4c:58:40:56:ed:3e:
         34:d8:14:3e:25:e1:2c:0f:15:bf:59:b9:64:82:3e:77:fe:5a:
         53:86:b4:3e:35:3d:2c:89:7a:09:46:06:3a:9d:40:51:aa:78:
         0a:85:22:44:00:d7:b0:6a:4f:36:d9:3f:8a:71:31:16:4a:d8:
         77:03:29:dc:18:1b:32:0d:02:03:73:33:1d:94:35:96:e4:2e:
         4d:5c:f2:0e:a7:d3:38:5b:2d:9b:95:4c:11:92:a8:57:5d:7c:
         66:46:a5:fc:b3:85:a8:58:3a:12:41:4d:a6:78:f0:11:de:e8:
         25:5a:43:00:a4:ae:c1:a4:99:a6:36:02:ba:ed:fc:81:c9:54:
         85:64:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----