Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File:                     THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier:          +rOr255B+4CtKbi9CUGkpwLTJ/pwrUBHBcIZV0VBLVg=
Subject key identifier:   C0:5C:DD:85:17:8A:DA:71:E5:2E:BC:31:D0:76:92:16:76:7F:1C:8E
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer:       /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial:       01962DF3BDBC4F706E25EF5C9D7D134BDC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number:          03A7
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: mmxFD+sNKNC0HcsOW/O+GPxBDrcCs/qImQ5MMpyBFq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bd:bc:4f:70:6e:25:ef:5c:9d:7d:13:4b:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=c05cdd85178ada71e52ebc31d0769216767f1c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:76:b4:0a:0e:e9:03:7d:f1:50:e2:5e:6e:
                    a1:cc:c1:87:6f:1c:25:1d:cb:35:17:1e:9f:d1:47:
                    4f:6b:48:a9:ab:f6:46:b5:24:54:b9:42:38:cb:ea:
                    87:50:9b:bb:dd:60:15:48:32:f6:d8:bd:8b:d9:4b:
                    79:7a:e2:eb:16:61:ac:ac:fc:f1:35:8c:c2:62:1d:
                    25:f5:8a:38:a5:53:58:36:64:c4:eb:d2:59:60:f0:
                    ba:e4:16:12:28:21:7e:36:1d:ed:d7:11:b5:5f:41:
                    ed:42:da:c7:f4:56:86:d4:5b:b0:45:e8:2f:21:2b:
                    37:b8:3b:c8:bc:7a:00:c1:fa:85:9d:2f:b7:61:9b:
                    54:29:c2:65:34:ad:88:ce:29:d1:d3:e4:b6:5c:99:
                    83:b4:7e:01:67:12:16:6a:a3:25:f0:64:06:83:a4:
                    3c:8a:9e:f7:a6:ce:10:11:67:2d:24:c1:36:26:1f:
                    02:ef:dd:d3:43:2c:85:f9:b1:6a:a7:41:f4:e3:cd:
                    5f:a9:cf:e0:8a:bd:b2:35:b4:50:34:1f:6e:a3:26:
                    8d:b5:ef:25:5a:5b:33:f3:bb:9b:89:43:70:96:c4:
                    99:55:76:51:69:dc:9d:09:f3:5c:d5:a9:87:66:f5:
                    42:54:4e:1e:0b:2f:e4:63:86:9d:cf:60:41:af:12:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5C:DD:85:17:8A:DA:71:E5:2E:BC:31:D0:76:92:16:76:7F:1C:8E
            X509v3 Authority Key Identifier:
                keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:d2:45:ef:b1:d1:00:dc:ae:3f:33:e1:71:f3:2b:05:03:
         e6:fd:aa:8a:84:b6:bc:dc:f2:ea:a9:90:91:61:af:f4:20:d6:
         95:0c:e6:4d:51:8d:bd:e1:a3:f8:1d:34:12:68:6f:40:5d:58:
         d5:28:49:cc:43:c1:21:51:9f:b6:8f:78:0c:4a:28:e4:cb:c6:
         dd:96:45:0f:71:95:8a:3a:c1:10:7f:de:b1:00:cd:13:ab:9e:
         ce:e1:be:6b:2a:c2:08:77:42:a6:ee:6e:34:34:14:23:76:e4:
         1b:0c:26:a6:71:5d:6b:57:22:dc:52:c5:0f:04:0a:1a:3b:88:
         72:12:56:60:5d:bf:1d:53:1b:fc:cf:ee:44:6b:01:d7:17:74:
         6e:f3:06:c6:85:f1:16:b2:88:aa:09:db:b7:1e:b1:e4:6c:01:
         9c:85:d2:e5:9c:c8:c9:4e:d2:05:5d:c8:35:4c:75:5e:1c:2c:
         70:1f:f4:0d:97:1b:9e:2f:93:5f:ef:09:63:39:60:84:00:25:
         49:b9:db:3f:3c:0b:ba:13:e3:82:34:d0:c2:b9:fb:45:e7:6c:
         9e:62:25:39:26:7d:22:d3:e6:30:4e:e8:22:fb:19:f3:68:49:
         ad:13:85:5b:22:61:9a:6d:68:88:87:9f:f4:aa:16:e2:18:6f:
         de:b7:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----