Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File:                     rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier:          aM3UcXKw5lqVddpS3NH/Eyx+DCjTrgZkyLsVmefy+Vw=
Subject key identifier:   BB:1C:84:76:52:5D:28:B1:34:6A:7C:4E:8B:0C:42:80:29:3D:6A:44
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer:       /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial:       01962FAB3BF923F049A853413D705F1B5CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number:          061C
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: Mw9B/Y/MI6PwZWU3rXwezUWFZpAOjU8f5c6UMWM28uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:f9:23:f0:49:a8:53:41:3d:70:5f:1b:5c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=bb1c8476525d28b1346a7c4e8b0c4280293d6a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:85:61:41:37:5e:21:80:57:2c:2d:32:a0:
                    bb:b5:ba:a6:3d:9b:6d:01:c3:ba:f6:57:7f:6f:7c:
                    10:b9:b6:96:30:fc:4a:0c:ee:3b:d5:18:65:ad:34:
                    38:a4:6d:4a:7b:ed:1c:a1:c5:9b:02:01:10:53:94:
                    04:48:67:a5:f9:04:e8:e5:1c:ce:8a:92:33:ac:01:
                    b6:cf:35:44:17:48:d0:bc:4e:4b:07:c4:a8:f1:a1:
                    89:17:11:16:a6:ee:33:f8:b6:65:82:87:de:c4:65:
                    ef:9e:49:0a:32:4b:c8:54:28:42:34:24:a0:8a:7e:
                    09:8a:28:4a:02:17:3c:d4:80:25:8e:0e:b0:5b:b8:
                    7e:a2:60:b7:4f:9a:78:df:17:91:a8:d9:4e:26:90:
                    99:d7:a3:b4:0f:f3:6a:ea:81:b5:c4:4b:75:35:18:
                    c2:7b:dc:29:d4:3d:4a:f3:dd:14:9c:30:5b:96:8a:
                    da:8b:86:9b:67:bd:33:38:50:0a:6b:96:d5:11:6f:
                    e7:65:9c:7a:ea:85:f4:08:19:b0:e3:71:7c:1d:1e:
                    6e:b8:68:a9:5b:64:5c:9e:b9:8e:c4:02:17:ed:ce:
                    a6:1e:15:ff:f2:b9:d2:bc:e9:ae:34:6a:27:3b:7f:
                    b7:28:a8:b6:8a:21:e1:0d:d9:14:3d:f0:59:48:b5:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:84:76:52:5D:28:B1:34:6A:7C:4E:8B:0C:42:80:29:3D:6A:44
            X509v3 Authority Key Identifier:
                keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:26:4d:de:f7:fd:5d:c9:be:0e:00:3f:19:29:ec:35:6c:5e:
         80:eb:30:c6:47:72:25:2f:59:32:2a:07:bd:0f:20:e8:a7:3d:
         e9:91:0e:41:2f:ed:43:9a:bd:28:64:d5:ca:ef:72:4f:54:95:
         8c:a9:f4:83:46:1d:24:f9:90:24:81:66:b6:51:08:99:90:47:
         f0:a2:15:8c:9c:46:a5:14:c5:7d:24:5f:60:cf:82:ba:49:5b:
         14:d3:18:fa:e7:4c:4f:26:f3:f6:4d:7a:c1:d4:10:53:7e:93:
         b0:37:f5:f0:d3:28:bd:c2:53:57:e2:63:cd:5e:06:fe:29:e3:
         34:7e:6d:ef:b1:7f:7e:d2:6d:84:c5:df:9a:3a:be:9b:1a:7e:
         58:79:60:db:b2:45:35:da:4d:9e:4e:c5:2a:82:f8:9f:85:98:
         c9:d1:34:07:7b:50:8c:34:43:2f:c3:a5:fd:0a:92:3f:a3:81:
         f0:8a:19:8c:ef:82:5a:c5:80:d5:03:af:58:44:ca:9c:c8:ce:
         6d:67:ac:cc:7a:e8:8f:26:24:81:f1:01:cc:c3:20:3f:63:ab:
         d4:f2:5d:17:50:a5:bb:44:13:fd:c9:fa:86:21:f2:c0:c9:85:
         66:7a:12:a7:ab:e4:f3:e5:f5:09:d9:c7:8a:b6:4c:29:24:e7:
         25:70:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----