Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File:                     3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier:          zhJrEUob6EpMSEyhswahUM1PVbZ+FKRqW4YRUMiG4jE=
Subject key identifier:   19:56:56:BD:19:9B:B5:5C:E1:FD:86:86:E1:2A:43:73:F2:4E:8B:84
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer:       /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial:       01962F06A1ACF63E3E8ACC3E77B25BDDC38D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number:          0421
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: pMQv7p31gGKSerNKopyepbYzXWm9fBGGoV7V3qKK7Z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:ac:f6:3e:3e:8a:cc:3e:77:b2:5b:dd:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=195656bd199bb55ce1fd8686e12a4373f24e8b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:3e:e2:1f:0e:4d:f4:47:c6:28:30:ca:aa:
                    9a:c9:8f:a4:3b:db:f3:eb:4d:94:6a:8d:a7:0e:60:
                    a2:36:03:ba:fa:a9:61:fd:a3:1e:4b:e1:39:0a:65:
                    ff:ad:f0:af:4f:67:20:25:78:70:6a:00:c9:3d:22:
                    bf:b6:ff:16:c9:d9:ba:86:e5:cb:08:32:8b:2a:a2:
                    c6:95:24:e4:61:97:94:8a:7f:56:ac:a4:79:db:a2:
                    47:6b:47:69:cf:17:05:c7:f1:99:00:e7:0b:e0:78:
                    87:f9:d4:ed:1a:d2:0b:ff:4a:fe:c7:c3:67:ba:79:
                    42:0e:e5:64:73:44:74:ab:3a:9f:e3:53:cd:9f:00:
                    cd:8c:9e:01:6a:0e:9d:80:e9:a0:54:58:71:0d:27:
                    31:87:ab:39:dd:b1:73:5b:c3:2e:43:fd:a5:18:27:
                    bd:c2:13:ed:2a:52:28:f8:e9:a1:de:ef:a0:00:1d:
                    33:b7:a3:10:e9:51:e0:d2:91:bb:01:14:e3:09:7e:
                    46:24:d5:2c:e5:ff:85:49:dd:b0:ab:19:27:c5:a0:
                    3c:67:75:77:fc:b4:ea:71:ee:5b:8c:9b:ae:ac:ae:
                    12:5f:4e:67:a2:3b:bc:4f:50:17:73:e1:7e:a9:2c:
                    93:d6:8e:a1:83:97:bd:c1:c2:73:e7:36:be:f2:b6:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:56:BD:19:9B:B5:5C:E1:FD:86:86:E1:2A:43:73:F2:4E:8B:84
            X509v3 Authority Key Identifier:
                keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:a6:fe:1a:05:15:04:01:cb:9d:6f:ce:bc:9c:49:7f:da:
         20:df:d2:77:aa:39:9a:9e:97:ab:f0:f1:81:a6:99:60:f5:26:
         08:93:21:a6:32:98:57:36:7f:8d:f0:e2:23:69:96:3e:32:0c:
         b6:97:62:38:3a:ab:da:43:90:e4:9e:b8:bd:c2:83:5d:bb:c5:
         19:92:3d:35:db:b7:73:73:78:5b:c9:35:9e:7b:ee:50:83:e8:
         7c:91:0b:fa:29:22:0b:38:ce:f4:9c:64:66:2f:30:a0:21:b9:
         6a:6b:53:9c:72:f4:fc:72:3c:e7:11:85:b5:c9:ca:6b:b4:8d:
         6c:9d:c0:5d:51:2f:8b:2e:3c:67:c3:03:fe:24:71:d4:12:0c:
         5e:7b:be:cf:85:60:e2:4b:35:65:9f:f7:1c:ea:fd:cf:10:95:
         8d:4c:68:11:44:1b:51:25:15:a2:38:ef:8e:69:4d:10:99:fb:
         eb:d9:0b:d3:4a:a0:44:ea:31:f3:e2:cd:f1:a3:9f:00:52:be:
         ec:1a:b5:d1:42:f8:2c:67:cb:d6:63:c5:16:b6:20:61:c0:9d:
         c7:c0:86:bb:5b:c9:18:74:01:9a:02:4f:f7:4f:39:69:ce:f6:
         14:b4:52:dc:e4:a0:5b:0e:b8:8c:e9:d3:3a:86:e1:1a:b8:14:
         9f:41:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----