Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File:                     q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier:          ZbbIRCC9ujtblNJSZIi3vw7m/mU0PVAgrqZShuzS+Jg=
Subject key identifier:   6C:7A:9F:87:D7:AD:A3:14:FC:92:1B:31:DD:E5:B3:9F:21:15:40:F2
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       01962F073D698B64ACE65CEC6B1CB70D2050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: Go6OnTKrdAaeJJixMoU1rLKeiXR11x3MWriclDyjv1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3d:69:8b:64:ac:e6:5c:ec:6b:1c:b7:0d:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=6c7a9f87d7ada314fc921b31dde5b39f211540f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:07:c2:41:f1:86:19:7d:08:ec:65:ee:1c:
                    79:35:c6:92:5a:79:2e:97:be:37:e1:63:4b:cf:06:
                    5e:e1:95:6a:bc:42:3b:23:55:ac:2d:12:c3:ee:67:
                    a6:99:52:81:e7:a5:63:d6:11:ed:ac:74:79:ac:ea:
                    48:4f:0c:60:b2:7a:fc:38:d6:4a:45:a5:d5:d4:a1:
                    88:8f:ec:00:4c:3f:29:a4:8e:ed:28:ce:91:ce:bb:
                    79:e2:6c:ec:5e:52:77:83:a7:07:d3:1b:0d:64:3f:
                    1a:ac:2b:65:bb:e7:ed:de:4e:c0:f7:4e:e5:dd:ac:
                    f7:7f:3e:99:d3:fb:2c:16:0e:a1:97:2b:97:3a:34:
                    38:9f:13:5e:17:4f:b7:3c:41:25:6f:4b:33:71:48:
                    64:52:c5:3e:c6:2f:b8:eb:20:01:aa:b8:4d:f3:43:
                    3b:e5:a9:18:6c:ad:96:42:da:2b:3a:f8:4f:60:31:
                    4b:43:f0:28:fb:64:22:a5:9f:9b:f9:42:33:aa:63:
                    12:fb:12:66:74:08:59:c9:1d:27:59:d3:e9:bd:1d:
                    82:ad:2c:19:40:e8:56:c5:9d:c9:18:37:24:69:2f:
                    19:43:9c:ad:60:98:77:8e:f7:93:c1:0a:e1:01:59:
                    a8:f2:e8:34:37:d9:4a:05:65:d9:56:26:de:34:40:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7A:9F:87:D7:AD:A3:14:FC:92:1B:31:DD:E5:B3:9F:21:15:40:F2
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:0e:d0:6c:7f:f2:28:0f:6f:e7:3a:bb:15:28:3a:21:73:
         98:78:81:4e:ee:28:31:d1:a5:a9:4d:ea:70:76:fd:48:e1:3e:
         4b:d8:51:d9:d9:1c:a9:87:5c:8d:b5:e3:b8:31:e5:8f:a2:9f:
         49:ef:7a:7c:f6:62:36:e5:b1:98:47:8e:8b:f9:75:04:e8:e2:
         48:9a:be:c4:e0:de:55:59:a9:6f:13:c4:b2:53:8a:a5:5e:25:
         31:2a:af:09:53:30:eb:78:ac:8c:f3:c3:12:4e:cb:2a:1f:18:
         fd:70:eb:4b:f3:7c:12:9e:9d:52:96:a1:ea:f4:4b:dd:51:60:
         1b:8e:20:94:fb:a2:57:24:5c:f3:2b:8c:89:f9:41:a9:92:9c:
         d9:b2:60:89:b3:b3:92:df:db:e4:ab:f5:2f:63:20:df:b1:fe:
         48:04:0f:65:b6:a4:6a:10:40:10:59:d9:18:e5:fb:6c:d5:28:
         36:af:8d:ea:5c:9c:4c:ab:29:81:eb:bf:08:6a:1a:7f:f7:1c:
         64:5f:e9:75:9b:ba:5f:b8:39:17:2c:48:02:0f:c3:2f:5e:eb:
         00:5f:ac:ac:76:9a:6f:fd:cb:a6:1d:ec:a8:9a:55:5e:2a:d5:
         46:b8:d8:13:b4:e5:2e:9b:67:de:82:a0:86:47:47:19:b0:75:
         d8:76:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----