Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File:                     N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier:          GDKNkA/3IBZtPsl4A40esk7L/N35lLnzE4nBOpFIX8c=
Subject key identifier:   71:6A:50:16:00:A7:B2:8E:C5:92:E7:4A:B1:3E:39:B1:39:65:1B:CE
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer:       /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial:       01962DF3D9B6491C32E41C1DA187AFD1E45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: 4K2uhPo0L5djBr4FSAKbupnfRmH9BaZwyoKxfyJ5vCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d9:b6:49:1c:32:e4:1c:1d:a1:87:af:d1:e4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=716a501600a7b28ec592e74ab13e39b139651bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:38:76:9d:0e:05:1e:5b:05:67:3c:61:a5:fa:
                    bd:5e:ef:5f:5d:97:48:e9:19:9f:1c:f7:2a:13:bf:
                    32:8c:eb:a2:6e:bd:00:60:d3:60:0f:71:14:43:16:
                    d5:9e:46:a4:d2:4f:76:22:12:9f:9e:55:d9:48:15:
                    2a:f9:12:4a:38:73:2c:30:58:91:84:78:da:11:5c:
                    6c:86:4e:69:e4:72:01:e7:31:3d:51:8a:90:80:81:
                    06:16:47:5c:29:0c:9c:59:02:57:d1:91:fa:25:9d:
                    1d:0e:2b:eb:93:67:26:d5:af:37:9f:9d:af:04:af:
                    1a:0d:c6:35:10:dd:a5:4e:08:42:cf:5a:10:21:17:
                    03:a1:1d:bd:41:49:dc:99:a5:b7:f9:fd:8e:39:4c:
                    da:63:38:d6:69:fc:a5:ab:26:5b:d9:c0:fe:17:f5:
                    4c:73:81:e1:57:64:17:a5:11:32:2e:15:5b:5f:9b:
                    42:6a:99:a7:ce:ed:02:c8:ce:21:d7:47:fc:d8:0f:
                    dc:0f:8f:4a:75:07:39:b1:92:12:9b:b9:7f:91:c7:
                    7b:88:74:2a:64:14:1c:23:34:c7:e6:b6:da:eb:13:
                    21:33:de:c2:e6:4f:0b:94:e6:f9:12:7c:0a:d3:9b:
                    81:55:9e:f7:9a:5a:3b:c9:48:df:4d:9f:c6:f3:79:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6A:50:16:00:A7:B2:8E:C5:92:E7:4A:B1:3E:39:B1:39:65:1B:CE
            X509v3 Authority Key Identifier:
                keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:81:09:a6:2c:5d:a9:6f:b9:64:05:2b:1c:32:40:e6:10:
         28:5c:95:77:48:d3:d6:f8:7a:c0:13:35:8e:c2:a7:85:84:53:
         6c:b5:63:11:34:af:21:a0:53:9c:db:ae:86:82:9b:e8:75:96:
         9d:f0:95:0c:2b:93:20:2c:d4:e2:58:0f:d5:24:07:6a:f2:47:
         24:67:ee:fe:23:9d:93:af:6c:cf:9b:8a:a7:14:1e:0f:b0:f3:
         8f:2b:a4:10:cf:92:73:cf:44:6a:8e:92:f1:7c:a3:70:89:0f:
         5f:f4:c7:34:c6:f4:0c:92:35:98:6e:02:b7:9d:4a:41:61:53:
         88:62:2b:27:64:1a:23:23:9f:33:cd:26:ef:dd:a9:6c:5e:5b:
         af:6d:c5:dc:fc:f8:00:78:dc:e7:07:c7:80:8d:05:f1:44:00:
         f4:2e:86:fe:37:0d:be:f3:34:16:74:10:99:69:eb:58:fd:a2:
         66:ce:ed:c2:a3:6d:6b:fa:06:c0:d9:74:1f:4a:b1:68:ee:77:
         29:00:19:63:22:70:1a:58:e8:c5:2e:42:5d:24:fe:0e:01:8c:
         3e:0f:00:20:23:e2:ec:20:97:a2:b1:c9:6b:6b:39:fe:5b:09:
         9b:dc:65:ec:b7:e5:07:69:c9:c6:d5:1d:fc:cf:4e:50:94:1e:
         e7:47:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----