Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File:                     1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier:          eAuQmm1Q+eYO9hM8PttWWS39p1kojS0GHdRsL3fGfeQ=
Subject key identifier:   20:D3:A7:E8:56:62:5F:73:CD:49:9A:7C:7D:45:6A:AB:B9:36:61:EC
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer:       /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial:       01962F06936619196202D3DD13C70ECE6C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: iBUM1RMiRQk32PSUzPkmrAgufXEJ6Q5MOoVkuNPKKDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:66:19:19:62:02:d3:dd:13:c7:0e:ce:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=20d3a7e856625f73cd499a7c7d456aabb93661ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:6b:65:f7:84:58:46:a4:58:6d:e6:7a:d3:
                    4f:7b:61:22:2c:dc:77:37:ac:2a:8a:c6:03:89:15:
                    3e:55:32:13:f8:f9:25:71:1b:7a:9e:5e:ea:93:45:
                    34:66:29:fe:ef:05:14:93:4c:4b:b8:f9:2e:33:35:
                    c4:e5:3f:e8:af:8c:e5:db:87:a4:d7:a0:99:85:f0:
                    cb:12:8b:77:2f:db:bb:24:60:92:42:df:de:5e:2f:
                    d1:19:a9:a4:e5:a3:71:22:20:f5:97:34:22:e9:a5:
                    2e:e3:29:a1:ee:54:01:78:7e:38:88:fb:77:8a:51:
                    98:2c:ba:f2:17:93:a9:6c:d6:13:bf:df:cd:db:c4:
                    1b:a7:8b:7c:58:50:bc:51:99:3b:5b:98:50:dc:f9:
                    75:30:9c:ed:da:75:d3:0f:88:56:c8:db:58:8a:92:
                    a2:cf:4e:13:6e:a5:81:2e:e7:55:5a:63:85:1d:9c:
                    39:14:0a:0d:2c:14:7c:63:15:9e:b9:00:9e:68:41:
                    01:7e:3d:44:68:11:d6:9a:4f:e6:c9:4c:11:24:b3:
                    b4:87:85:e2:22:f4:8c:18:eb:ff:12:4e:90:87:50:
                    00:00:33:f0:73:70:e5:a7:03:7e:35:7e:dc:f3:61:
                    28:88:aa:6d:db:ca:53:cd:bb:04:f1:9c:4a:ce:31:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:A7:E8:56:62:5F:73:CD:49:9A:7C:7D:45:6A:AB:B9:36:61:EC
            X509v3 Authority Key Identifier:
                keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:64:e1:02:cf:08:ee:e4:a1:d1:9f:c9:9f:44:c4:dd:f2:
         e6:75:45:ba:dd:43:bc:a0:c4:63:34:cc:4a:d2:d5:a7:41:51:
         6e:5a:cf:7e:94:31:54:90:60:7e:b4:6d:31:a9:74:99:39:76:
         0b:03:55:f4:36:17:e0:dc:fb:3b:7f:d3:f8:f9:cb:60:5f:df:
         5c:2c:d1:05:f9:d1:ca:e5:c9:fb:2c:65:64:05:91:f6:7d:18:
         6c:ed:aa:f3:db:20:c3:f5:b8:23:72:1c:ce:65:ee:50:a3:90:
         c3:0b:16:25:6b:9d:cd:66:a9:ee:87:da:af:42:41:d2:95:34:
         cd:98:49:3d:7b:47:bf:98:f9:66:83:54:31:4e:97:ff:53:fd:
         12:b0:40:d4:cc:61:58:95:29:4f:a2:a4:3f:ea:67:9b:a9:a1:
         d7:9b:ce:0f:e4:b1:03:4c:a5:ad:12:93:0a:d2:8a:6f:d5:1f:
         c3:e0:d0:cd:d1:a1:23:c2:24:ce:83:5a:6b:aa:4d:08:c9:92:
         ef:6f:10:9e:a8:bb:64:10:bc:39:b3:1b:1b:d0:c9:19:8e:6f:
         5f:9c:b5:34:45:6b:c7:88:ee:96:9b:78:52:fd:eb:29:c1:33:
         c8:a7:3c:01:9e:03:6b:21:86:9c:a5:f2:b0:f6:f1:cf:2c:c6:
         d3:cb:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----