Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
File:                     HR3nlQkjqWQxniwzg0m9Emh75K4.mft (raw, json)
Hash identifier:          jltA3wyPh8byTu9kTnpD1s6q6DtbrSf/Hw/bFypbso0=
Subject key identifier:   97:BC:A3:14:BE:9E:CE:BC:D6:80:35:94:C3:79:E9:59:78:A9:12:57
Authority key identifier: 1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE
Certificate issuer:       /CN=1d1de7950923a964319e2c338349bd12687be4ae
Certificate serial:       01962E9915314ECEF272C1B089834087EA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: HR3nlQkjqWQxniwzg0m9Emh75K4.crl (hash: uz+JudQciV0Du1mSqcj9j4wEo1v2Q6JG7kjFniElEOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:15:31:4e:ce:f2:72:c1:b0:89:83:40:87:ea:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1de7950923a964319e2c338349bd12687be4ae
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=97bca314be9ecebcd6803594c379e95978a91257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:bc:af:bf:68:af:2a:a7:ba:c3:28:f2:8c:
                    1f:4f:59:4c:3e:f5:b6:ab:63:69:17:5d:2c:a4:89:
                    40:08:cf:93:96:89:a5:fc:10:06:29:de:dc:6c:1f:
                    9f:7a:c6:3b:1f:da:fe:f7:90:a7:9f:bd:a3:32:84:
                    33:2a:14:7f:ae:71:67:68:63:9b:83:b0:6f:93:67:
                    c7:de:a7:35:db:0e:72:b9:d2:bd:55:07:90:cd:1f:
                    b8:b2:15:83:5d:18:23:aa:0f:b1:a4:d0:ba:24:9b:
                    9f:e5:be:a6:3e:10:f9:f8:bf:eb:a0:88:10:ef:08:
                    ba:90:69:82:ea:98:1d:0c:75:e7:ab:e0:a5:39:f7:
                    e8:a4:10:75:e5:80:74:ab:4b:95:90:9b:c9:59:26:
                    8e:93:be:e0:0b:11:e8:82:9b:16:e9:d2:cd:49:09:
                    f7:34:2e:bb:15:1e:12:f1:4c:b2:eb:b9:23:13:70:
                    50:3c:51:f9:b0:60:50:ae:62:73:a4:4e:31:f3:6b:
                    38:e0:7c:e1:e0:33:ac:a3:7f:7f:6f:b2:45:37:c0:
                    ce:3c:36:9a:a9:2f:20:4d:44:b7:2b:9d:56:35:d3:
                    ea:bc:24:c4:4c:33:8c:46:73:0e:43:73:fb:0d:c9:
                    cf:61:47:07:b6:84:35:70:ff:45:1c:d2:5d:2a:20:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BC:A3:14:BE:9E:CE:BC:D6:80:35:94:C3:79:E9:59:78:A9:12:57
            X509v3 Authority Key Identifier:
                keyid:1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:55:17:9b:bb:65:ba:78:e9:9c:12:5b:5f:f6:33:30:7f:e7:
         f3:12:58:fb:54:fe:70:e0:85:ba:a2:65:df:37:63:22:eb:47:
         ae:d5:05:f9:2f:35:26:f7:17:b1:62:6b:13:f1:0c:cc:85:6e:
         81:6b:c4:87:bd:b2:b8:18:10:dd:c1:8e:37:56:ff:a5:69:c6:
         40:5c:18:e3:16:39:4f:cf:46:6b:40:e9:e5:be:21:0c:a5:6e:
         25:f7:7c:e6:ea:04:80:d3:d1:ad:68:fb:cc:ae:91:49:13:d0:
         f6:09:d4:7e:08:cc:3b:a1:15:7e:24:de:60:2c:2f:61:4b:ab:
         6f:be:ca:73:4b:01:5f:de:8a:57:b8:c4:ec:a3:09:76:ff:5c:
         17:81:e8:e9:ec:6c:f8:cc:68:dc:de:48:42:40:18:c9:d3:65:
         64:23:4a:22:70:f0:09:23:55:b8:f0:fa:9a:9f:ad:d6:7c:3b:
         fe:49:99:03:17:99:3c:fe:4c:89:04:f5:bd:cb:77:70:f6:59:
         a8:e9:65:71:2e:08:16:f2:b2:ef:7f:7d:25:1c:36:6f:13:f5:
         b6:cd:71:9c:a4:e7:df:ce:2d:59:a3:b4:7e:0b:e3:ed:16:b3:
         f3:aa:63:9d:25:85:2f:85:c6:0e:b4:b0:f8:a9:a6:f4:94:61:
         f2:66:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----