Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File:                     0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier:          nzfWDT+yen0XO4cLa2ZBdVW+kA7MQer82cFBBdTqmF4=
Subject key identifier:   88:4F:75:2E:57:16:78:B6:57:11:DD:20:BE:7A:D7:27:48:09:FF:A3
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer:       /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial:       01962DF3E63E05ACAB4818899AB94C5B453D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: n5w8WF6euizotgPKA2rZdXGGqtsMDA6ftGwXs8vBKjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:3e:05:ac:ab:48:18:89:9a:b9:4c:5b:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=884f752e571678b65711dd20be7ad7274809ffa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:98:7e:06:08:95:8f:15:13:1d:c6:23:0e:
                    98:5b:f5:25:6a:d2:ad:4d:41:5d:b0:49:ee:ab:df:
                    d1:a7:ae:0f:0c:96:5f:4a:b5:45:91:a3:b8:ad:81:
                    6b:1a:91:21:3f:c3:5e:70:f9:57:ac:34:de:e1:64:
                    97:1d:09:15:73:11:ad:f1:2e:40:a6:b6:4d:16:d1:
                    8e:f2:ef:c7:91:e4:31:33:bc:9a:d0:f3:81:be:70:
                    fb:55:20:1b:93:d0:26:29:61:1d:40:6e:04:88:35:
                    75:1f:1a:19:f5:b4:00:e0:b9:f2:45:fb:1d:6d:53:
                    04:bb:ae:f9:4c:1d:8f:86:cc:89:61:18:7d:2f:89:
                    1c:d6:db:23:91:c7:b9:96:00:76:ea:1b:4b:8b:86:
                    b1:19:e6:0f:d9:db:58:d7:dc:9e:ba:77:43:74:90:
                    8a:aa:03:76:26:2e:d3:6d:c9:a8:1e:ba:d4:f4:dc:
                    ce:fc:ba:3f:8d:22:6b:e7:a1:84:bd:ee:0b:ae:95:
                    f8:7e:8e:72:8e:ca:88:c7:be:17:5f:dc:85:aa:ff:
                    81:e4:f4:0f:f2:56:b1:76:70:5f:c1:5f:b4:5e:0b:
                    7e:ba:27:46:70:f1:72:9c:1f:85:cf:7a:e7:cd:56:
                    24:7b:f6:0f:8d:76:de:da:c2:55:2b:ab:67:97:4b:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:75:2E:57:16:78:B6:57:11:DD:20:BE:7A:D7:27:48:09:FF:A3
            X509v3 Authority Key Identifier:
                keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:90:c7:ca:98:1d:6a:4d:8f:f7:14:3f:c8:95:30:ae:60:
         37:2e:a2:7a:8c:25:21:15:ee:5f:2d:0c:80:a2:2c:29:57:0c:
         7b:be:d1:6f:3a:34:09:a2:eb:04:f4:e9:00:6e:2c:87:ea:75:
         3a:fd:9c:74:ec:71:7d:e1:b4:d1:d5:07:db:b7:0c:49:1a:b3:
         53:58:09:28:9b:6d:9f:e6:01:fb:9a:c4:e0:05:fd:63:4c:f7:
         c1:e4:e1:fb:77:ac:14:1d:57:bc:95:44:13:4a:e4:89:af:d8:
         d4:62:7e:ee:af:3a:dd:85:fa:2f:9a:26:91:be:04:02:34:33:
         17:5b:84:5f:1e:32:41:bc:d8:56:97:c4:d8:82:8a:a2:14:6a:
         64:26:8c:61:97:c3:e4:39:6f:39:25:e6:68:19:4d:25:e3:0b:
         ae:26:6e:d0:66:02:02:04:b3:97:b0:e1:55:19:63:34:4f:e0:
         d5:ab:c6:a4:2d:65:ec:47:e4:fb:f6:ff:bd:9f:76:af:3b:8f:
         f5:5c:8b:62:07:73:d1:86:3f:42:16:c7:a2:86:3f:8c:a2:28:
         53:fe:d9:23:46:b4:78:19:66:b4:fa:43:c8:77:a6:c8:33:f9:
         b3:30:89:75:a3:60:d1:ae:a6:42:16:32:e4:8b:9a:da:8d:d8:
         97:59:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----