Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File:                     3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier:          8HJTV93C6Zg95eAdqPR9Bm/UwDEpgtWQ/Fqxd3s/4S0=
Subject key identifier:   01:51:1A:1E:65:0D:EA:8A:95:A9:8E:5F:72:02:38:EE:57:E4:44:BE
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer:       /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial:       01962E617E9D210851BFC37D49B343E1529C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number:          0D05
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: XKX9vjWyRCk2WEhhrDWMl3RVk5p8dnHIbP15v8YGkUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:9d:21:08:51:bf:c3:7d:49:b3:43:e1:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=01511a1e650dea8a95a98e5f720238ee57e444be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:0f:1a:2a:f5:7d:0b:75:f6:a9:63:fd:43:
                    d7:0c:c8:80:6b:ae:b7:cc:63:41:28:6f:89:e1:84:
                    b2:55:68:69:b5:08:2f:aa:47:47:f2:53:ba:f0:ef:
                    5b:20:14:29:59:5b:90:b9:40:55:d5:08:21:e0:b1:
                    e0:bf:e7:d1:f9:f0:f7:7f:79:20:47:7e:45:64:e6:
                    1e:e6:f4:59:03:eb:12:63:1a:25:b5:67:03:b7:ff:
                    ab:3e:5d:b3:1a:51:a8:d4:db:4f:2f:97:da:63:5c:
                    5f:e4:f4:f9:47:53:2a:b8:74:6f:dd:42:e8:91:0c:
                    f4:b2:c3:a1:60:5e:42:62:ed:d1:9c:c2:6d:1e:8c:
                    f4:a0:85:ae:3c:2b:48:c0:5c:63:4e:6f:b1:96:d7:
                    eb:d8:75:0b:b9:c3:43:66:ae:4c:d2:3a:be:d4:37:
                    3f:9d:93:82:82:a0:91:72:3e:b3:90:cc:28:2c:16:
                    61:d5:6c:b0:51:8d:27:06:e9:7f:6f:d8:72:df:be:
                    51:3b:05:15:77:d7:00:22:1c:5d:17:1c:c0:f6:bf:
                    09:c8:c2:f6:f2:4e:94:33:68:55:25:f4:a5:ea:9b:
                    a3:fd:be:2b:d0:5c:d6:3a:c2:96:61:c6:ed:5f:52:
                    46:65:d6:62:06:d9:f0:99:3d:ef:02:ab:ce:8f:60:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:1A:1E:65:0D:EA:8A:95:A9:8E:5F:72:02:38:EE:57:E4:44:BE
            X509v3 Authority Key Identifier:
                keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:48:c1:f9:31:d6:c0:54:84:e3:b9:9c:60:3a:50:eb:01:89:
         1f:4b:d5:f2:a6:67:af:86:ab:68:68:47:47:cc:2f:69:13:b6:
         84:6e:ed:23:36:0a:c9:a4:d6:90:3c:5d:9d:ef:1e:47:63:45:
         d4:8b:4b:3f:d7:94:52:8d:cc:37:f4:0d:12:56:6e:c0:35:bc:
         3f:f0:83:4e:cd:97:c1:6a:72:e5:1c:66:22:7d:fc:42:4c:50:
         13:cd:a5:39:5a:29:80:a1:d7:1d:7f:db:2a:97:f7:fa:55:4b:
         28:f5:87:2d:ae:8f:3b:a3:a8:32:ab:ca:1a:39:51:a2:d1:19:
         0a:f6:2a:00:6d:6c:e2:be:40:52:20:f4:52:11:92:cd:47:04:
         c5:62:29:2d:80:a8:7a:6c:6a:04:5c:29:b3:91:79:8d:bd:ef:
         1b:1a:24:e6:0b:2d:c3:26:06:66:0a:0b:28:ba:c4:1d:20:71:
         f6:c7:68:68:84:95:e1:f8:e9:db:52:4c:c8:64:42:8e:c9:48:
         27:68:e0:d0:39:01:15:da:59:69:c5:ef:9f:4d:9a:1e:d2:ac:
         7f:d8:6f:3d:83:de:8d:ab:79:6a:a6:52:e5:2a:36:ac:ac:06:
         a9:59:83:e8:4f:82:e6:5d:a9:af:60:e2:da:7f:c1:c6:3e:36:
         b3:98:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----