Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File:                     rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier:          a3dieP9ByI6/huK0SEDuwYJJRBOPKkbpGkZP2mESN7M=
Subject key identifier:   68:82:92:D7:E1:B7:68:E8:F1:59:FC:62:E5:BD:0E:51:C5:6D:72:70
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer:       /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial:       01962F06CD0C7723D1CE180E579FE6B180E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number:          10A6
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: lqeQVrq/O+Via5RBvoTG94I7IGtSkuIfkCbZdQAV/ME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:0c:77:23:d1:ce:18:0e:57:9f:e6:b1:80:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=688292d7e1b768e8f159fc62e5bd0e51c56d7270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:5c:17:ae:4e:b2:f6:b5:7d:4e:08:89:5d:
                    23:8b:ca:a1:89:d7:a7:d7:f4:27:f6:66:a3:9a:f0:
                    63:d2:cc:92:48:b4:c1:d0:01:2b:25:cb:bd:a6:e9:
                    bd:90:38:67:90:e5:1e:ab:3a:58:fe:cb:07:42:87:
                    92:db:90:fe:27:c0:15:61:79:a2:c0:2d:c2:ec:a8:
                    61:45:50:f4:3d:4f:41:f0:7c:3e:4a:79:fc:50:a5:
                    2e:95:08:b7:12:7c:84:d0:05:d5:e4:69:0f:20:65:
                    26:a5:52:57:d5:52:48:ad:a5:41:00:a3:bb:f0:10:
                    d6:dd:ce:e6:d7:0c:e8:49:f4:5c:5c:72:61:2f:49:
                    f3:e3:08:cd:f9:6b:ef:3f:7c:63:cf:61:8f:f5:7a:
                    06:4f:10:52:0c:e0:05:53:75:51:83:45:f6:cb:16:
                    c0:51:1e:dc:c3:a7:09:c6:dc:f2:34:37:a9:d7:e1:
                    9f:d1:e0:37:80:7b:c8:fa:54:c6:69:28:67:a3:1b:
                    f0:11:6f:05:d4:25:d7:fc:1e:06:cc:24:26:4d:d7:
                    32:63:92:3e:92:1d:81:ba:d7:38:47:14:5b:f0:af:
                    8d:bd:7b:a1:48:43:4f:7e:16:8f:dd:ef:23:45:89:
                    80:11:d4:0f:57:55:fc:fa:cb:4e:b0:28:14:26:e9:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:92:D7:E1:B7:68:E8:F1:59:FC:62:E5:BD:0E:51:C5:6D:72:70
            X509v3 Authority Key Identifier:
                keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c7:e8:32:ea:8f:5e:3f:06:30:25:0b:01:fe:60:bd:60:5e:
         13:87:14:02:8d:25:47:13:94:0a:27:38:ab:9e:5d:17:e8:f4:
         f5:d6:42:ec:6e:46:44:d7:82:a6:d7:9a:c4:9a:3c:8a:4b:c0:
         57:2c:11:eb:c0:a2:72:2b:81:49:f6:ba:c2:8a:c7:81:cb:6a:
         6f:fc:77:96:6a:36:9c:17:d9:b9:d7:de:9d:f2:77:e8:93:9e:
         90:94:5d:30:3d:3c:4c:be:a5:06:23:17:09:50:8b:3f:3b:a6:
         e1:72:80:ce:9e:0d:df:a8:54:65:a6:c2:97:5d:2c:aa:ff:d5:
         b8:bb:13:31:16:5f:c4:df:5c:a7:c4:c0:89:d3:3d:4c:8d:8d:
         67:b7:2c:04:6f:82:7e:13:f7:8b:ca:17:c6:49:85:fe:e4:9b:
         86:30:50:4c:ee:ec:10:5b:74:77:f0:10:2f:07:23:11:d7:7b:
         03:a6:03:73:fa:8f:6f:ba:56:32:31:5a:dd:fe:f5:f6:38:e2:
         d0:e4:27:24:6e:8e:41:43:ab:9a:a8:2e:bc:3f:40:4b:a1:80:
         55:59:4f:21:51:67:bf:95:8c:e3:cb:21:32:88:41:2e:2f:28:
         5a:3c:96:c3:cb:71:54:a5:b8:f6:80:29:f9:3f:16:94:3d:f9:
         47:5a:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----