Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft
File:                     sd_KrmUzbQycpCWFpG2Yyawk9eU.mft (raw, json)
Hash identifier:          rNChKM71ui4AqxrKcKU9CDDrcWeIQAmbtmvGrnAFUDA=
Subject key identifier:   FB:09:9E:7C:52:F6:34:CD:4F:15:AE:80:EC:24:2E:BC:B2:53:16:D5
Authority key identifier: B1:DF:CA:AE:65:33:6D:0C:9C:A4:25:85:A4:6D:98:C9:AC:24:F5:E5
Certificate issuer:       /CN=b1dfcaae65336d0c9ca42585a46d98c9ac24f5e5
Certificate serial:       01962FAB226FC09F19CAEF2D75B13A30A699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sd_KrmUzbQycpCWFpG2Yyawk9eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft
Manifest number:          0131
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: sd_KrmUzbQycpCWFpG2Yyawk9eU.crl (hash: nY1m9kZHXvAA/+BNK5CwaJAJNVAbU+Cft9LhSguF7vQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:22:6f:c0:9f:19:ca:ef:2d:75:b1:3a:30:a6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1dfcaae65336d0c9ca42585a46d98c9ac24f5e5
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=fb099e7c52f634cd4f15ae80ec242ebcb25316d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:c3:95:23:6d:84:ec:17:9f:49:8c:13:ce:
                    02:cd:ba:95:6c:c2:9f:1a:1e:b2:22:95:9a:a0:01:
                    00:ac:0b:cd:f5:62:8b:c3:12:dc:a9:79:fa:8f:05:
                    0b:fe:97:fa:89:bc:63:36:ab:18:e6:34:29:f2:79:
                    4e:3c:f8:0f:5f:9e:80:94:91:b8:fb:cf:e1:95:7f:
                    17:a7:92:2d:92:cc:d7:2a:8f:ff:e2:c6:f7:43:9c:
                    49:57:bf:cd:d3:c2:e8:62:f7:f7:34:cf:43:8f:66:
                    e5:c8:95:ab:60:21:c5:5a:f4:13:a6:d1:c3:a4:af:
                    42:f1:93:27:1c:ce:b0:db:ab:21:12:b8:a8:05:ac:
                    0d:c3:cb:b9:6d:33:bd:70:8b:93:cb:01:2b:f8:5b:
                    21:cf:a4:5b:c4:92:16:30:19:7e:9f:fb:7f:6e:de:
                    fb:8d:00:06:65:c3:ab:78:1e:e2:b9:fd:de:8f:1e:
                    34:01:e7:14:ac:0b:d1:8d:5c:93:8b:89:02:06:f7:
                    56:67:9d:28:19:07:44:77:62:72:d2:1b:9f:f4:0d:
                    3a:84:73:f6:52:86:00:3b:78:22:af:56:ad:86:8c:
                    2e:88:02:b4:52:3f:4b:e2:cd:bb:6f:ad:42:a2:6a:
                    d8:4f:2b:ae:b7:b6:b2:8d:83:07:e2:96:c9:66:79:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:9E:7C:52:F6:34:CD:4F:15:AE:80:EC:24:2E:BC:B2:53:16:D5
            X509v3 Authority Key Identifier:
                keyid:B1:DF:CA:AE:65:33:6D:0C:9C:A4:25:85:A4:6D:98:C9:AC:24:F5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd_KrmUzbQycpCWFpG2Yyawk9eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:54:ec:eb:a4:25:86:43:47:2e:ee:86:f1:50:1d:f5:28:84:
         5f:d2:00:71:ca:ac:5e:85:a4:ef:78:e5:5d:38:e8:4b:dd:bc:
         2d:e3:9d:45:f6:ae:d2:2e:4e:bc:35:e6:07:6e:24:32:40:a5:
         b2:3a:ee:3e:d3:70:55:2f:87:eb:dc:5c:88:7a:b1:16:68:0e:
         23:d7:05:50:66:a3:4e:b8:5a:72:83:8f:dd:ae:6f:96:e1:93:
         ed:d8:fd:85:97:cf:22:b7:04:32:77:6a:06:86:73:25:5d:d5:
         84:47:d3:9a:a2:d2:09:35:3c:5b:fe:9c:ae:67:f2:35:87:2e:
         af:b4:e6:90:cf:50:a2:90:2e:32:ee:74:ff:7f:6a:6a:3e:e1:
         08:23:d1:b8:01:2a:88:2d:38:bf:a6:43:92:5f:0e:76:29:0b:
         d8:95:a0:a8:1b:87:06:8d:e6:fa:4b:96:ad:71:ac:81:5f:a8:
         e5:96:24:38:3c:11:f3:95:a6:6e:f2:2b:99:d4:7e:49:b3:ad:
         dd:ee:10:ea:ad:5a:2c:c1:d2:e8:d3:b3:e6:a2:8e:eb:6b:dc:
         6a:bf:47:6a:2f:b7:76:12:b8:23:06:c8:d7:84:9c:b8:a9:42:
         c1:1b:02:7d:4f:7a:d5:4c:0c:dc:49:a6:6b:0b:10:d7:d5:68:
         cf:ce:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----