Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File:                     I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier:          dyefLKbK7bV2mPNUu/09E1G1aIlct2nne9WrV3w9sFw=
Subject key identifier:   D4:6F:68:FA:49:B9:53:8A:D1:65:F2:2B:56:53:E9:B6:CE:1B:4D:26
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer:       /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial:       01962ECFF31D10591F852087D815DE3E0C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number:          1209
Signing time:             Sun 13 Apr 2025 11:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:42 +0000
Files and hashes:         1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: Zk7s8Gi1x+64qmJDhmn+WyMNk46W12QLB9bYJTskN7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f3:1d:10:59:1f:85:20:87:d8:15:de:3e:0c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
        Validity
            Not Before: Apr 13 11:01:42 2025 GMT
            Not After : Apr 14 11:01:42 2025 GMT
        Subject: CN=d46f68fa49b9538ad165f22b5653e9b6ce1b4d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:fe:c4:f1:85:5a:dd:c4:12:1f:bc:82:d0:
                    5b:48:d0:0c:fc:db:11:54:de:31:76:41:45:66:96:
                    f0:85:5d:57:33:0a:98:f7:ff:e7:f7:17:57:fe:05:
                    95:fe:7f:c9:69:4f:81:a2:83:63:45:0a:d5:4c:2c:
                    2e:c0:25:3b:e8:8e:9e:4c:38:bc:89:e3:b7:84:3f:
                    c0:ff:59:74:93:81:54:4f:a4:d4:28:90:e3:59:05:
                    f9:99:4c:89:7c:4d:89:16:92:28:6f:2a:7b:51:a3:
                    cf:67:1e:eb:4f:56:d5:5a:3f:1c:d7:0f:90:a7:5b:
                    ac:32:16:3f:9d:13:67:5d:2e:57:8b:02:0b:b7:72:
                    00:43:f9:a5:b8:fc:10:34:9f:45:2a:55:03:04:43:
                    7c:e0:57:bd:cc:94:41:a7:60:79:18:f1:5a:2d:06:
                    5f:88:2f:fb:1d:93:ad:0e:53:c4:2d:4e:4b:73:3b:
                    45:9c:c5:94:8b:69:da:78:03:2d:49:9f:b7:7b:41:
                    e5:be:8d:61:99:9c:b4:23:67:dd:a3:e7:42:c6:c0:
                    f6:2b:e7:29:a9:b1:3f:ce:43:7e:84:76:d5:f5:dc:
                    a5:75:b7:f8:ad:70:12:3e:fe:3c:1e:e5:8a:83:cc:
                    c3:a5:fc:0d:04:36:5f:8d:08:da:53:4b:f0:9d:1f:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:68:FA:49:B9:53:8A:D1:65:F2:2B:56:53:E9:B6:CE:1B:4D:26
            X509v3 Authority Key Identifier:
                keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3e:06:63:55:4f:dd:b9:25:cc:41:1c:27:26:ed:9b:d7:03:
         e7:c6:f8:97:f9:93:7d:11:7a:02:0c:db:dd:67:b8:1e:f7:a2:
         ef:72:b1:01:96:e7:5c:6b:52:5d:17:b2:18:5f:b7:e5:70:ac:
         94:01:f7:6f:93:bb:34:7a:eb:13:4b:b4:fd:5f:6a:ec:28:10:
         5e:55:8a:55:fd:fa:5a:54:0d:9e:79:e6:03:a6:19:d8:8a:04:
         eb:09:63:31:9d:b2:41:e5:b5:e4:50:c9:8b:99:b6:c5:d5:50:
         a9:b7:55:78:b0:3c:cf:26:ac:75:00:f3:62:f5:a1:ad:7a:44:
         3f:7e:88:8c:39:db:15:08:d5:dc:c6:40:13:a4:26:af:8d:a6:
         28:ee:96:bf:df:61:50:6c:75:30:a0:12:16:03:09:51:51:47:
         b4:fc:0c:a2:f3:60:6e:7c:1c:13:33:a0:47:8e:50:5a:2e:79:
         2b:93:74:18:89:78:dc:96:f9:ee:56:f7:11:10:95:ee:82:16:
         2a:b6:62:04:12:17:6c:5d:a9:68:31:3e:01:df:b3:ff:2e:66:
         e8:15:d3:7a:91:85:3e:18:2f:db:93:30:4c:a2:ce:7c:0e:c2:
         d3:53:1e:ce:b0:87:54:e9:49:3c:6a:0f:25:4d:73:69:b8:47:
         b1:c1:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----