Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File:                     ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier:          Hjhd3n3LR5+MH2uxXvPoD0DMn2cy2MwjUA4jRcSesAk=
Subject key identifier:   2B:DC:1C:4D:88:C2:58:61:DE:8B:26:4F:05:54:0D:FD:4E:51:E1:DB
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer:       /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial:       01962E99A76AB8CC7A3D2E91CFEFC580A349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number:          063A
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: DBPVlQC7ZhMb8IS2Qv9jLXt2BvTZlisOmxEgu2p9Igs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a7:6a:b8:cc:7a:3d:2e:91:cf:ef:c5:80:a3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=2bdc1c4d88c25861de8b264f05540dfd4e51e1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:ab:8a:1b:8c:51:7c:d3:f9:7b:b8:d5:bd:
                    b7:25:40:c8:0a:87:9f:0b:d2:5a:b7:20:70:ea:70:
                    00:19:0a:90:aa:5f:5d:50:b4:10:3d:dd:05:46:c7:
                    1a:a6:17:af:14:8b:47:d1:e0:36:9c:8e:d5:42:d8:
                    fe:93:24:58:c6:03:e8:a7:64:86:7b:64:8b:ac:68:
                    ef:5a:20:84:2b:ae:dc:76:5d:9d:15:e7:0a:41:2c:
                    49:18:b2:86:cd:dc:c7:be:4c:34:29:5d:51:20:a7:
                    b9:4c:42:54:0a:8b:e3:af:9d:ba:8b:e8:bf:61:c4:
                    12:c7:4e:44:1f:25:11:92:74:12:9a:26:ec:26:27:
                    6e:f4:b2:69:ef:18:17:a3:b3:ef:d2:05:06:c6:7c:
                    58:54:f1:b5:b3:e0:f2:a3:f9:94:e5:9a:81:b6:1e:
                    30:56:4f:08:db:b6:73:1d:57:03:12:c1:b1:4c:18:
                    7c:0d:3c:a4:8e:0d:52:da:ba:e5:ee:54:02:72:86:
                    3d:b3:8e:a2:61:30:7e:29:53:cd:fd:14:d8:81:b2:
                    0f:70:97:ad:88:d2:b2:d2:5f:fa:07:c2:ec:8b:92:
                    4d:31:40:49:c9:6f:a1:83:df:7a:3c:21:23:5c:44:
                    a2:a4:18:9e:5a:7d:04:62:c2:0b:08:a1:86:8e:a0:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:1C:4D:88:C2:58:61:DE:8B:26:4F:05:54:0D:FD:4E:51:E1:DB
            X509v3 Authority Key Identifier:
                keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:42:61:00:a5:f7:26:bf:84:70:46:7c:86:25:f2:00:ab:
         e4:96:fe:9d:d2:be:91:2b:db:ee:94:e1:65:e9:21:48:3d:00:
         cd:a3:81:7f:8a:72:29:fc:c9:ab:f6:92:b5:b5:77:59:ec:21:
         54:06:ee:6a:72:9a:3c:a3:03:a0:8b:94:bf:1a:29:b6:6b:a3:
         97:ef:9b:66:8f:d9:72:da:95:67:49:9b:aa:f2:e8:0f:ec:fc:
         a3:db:a1:78:3d:b1:17:f5:a4:07:b4:14:7d:e4:e6:bc:5b:25:
         48:45:a6:e3:fc:cc:ad:14:8c:54:e6:d8:26:b4:27:d0:b2:96:
         5b:49:1b:4e:64:53:32:df:0b:e4:41:46:26:30:51:ed:90:71:
         55:b4:b0:ed:78:c6:d3:28:39:dc:fc:c7:81:3b:c4:41:d8:b7:
         07:fa:a4:52:82:28:34:fb:80:1d:d9:5f:74:03:e2:ad:41:f6:
         62:c0:55:85:38:6c:fa:e6:15:4d:2b:e9:58:08:05:c0:a3:aa:
         54:c6:53:4d:e1:33:17:e0:6f:c5:dc:85:a1:76:c3:d4:89:3c:
         78:7a:4b:da:38:8c:67:ed:63:92:4d:e8:01:59:29:40:43:45:
         da:06:60:07:7e:4c:cf:a9:7b:5d:a1:96:77:94:42:4b:d2:a9:
         78:eb:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----