Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File:                     8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier:          riTp3qqN9OpBH9Ck1X1BVW1ee21Opd0Jqp4e0FZpqVo=
Subject key identifier:   12:3F:E8:8D:3F:A9:E5:87:81:62:02:49:93:04:6C:A2:20:65:FA:0D
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer:       /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial:       01962F06AFA082DC86CB5805CB2DF7760C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number:          109E
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: v7jRwdWxF7YnHqPbAGRUn84ue25xYJAmTXz4GURAKuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:a0:82:dc:86:cb:58:05:cb:2d:f7:76:0c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=123fe88d3fa9e5878162024993046ca22065fa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:04:43:82:6f:5b:97:cb:a2:20:20:d6:bd:
                    07:9f:b2:03:09:9e:b6:2c:2f:d4:f4:4f:8d:2f:6a:
                    1d:e5:55:6a:91:43:34:09:7d:42:c0:8e:6d:db:9f:
                    3c:36:6e:0a:f3:ad:03:bd:75:0b:c2:9f:f4:21:a7:
                    80:f4:08:51:bb:2a:0a:91:e5:57:aa:f9:00:1f:8e:
                    c8:ca:fb:30:a2:fd:4c:a1:69:f3:2a:36:84:3d:87:
                    ac:6d:e5:9e:4e:4d:59:40:b7:32:64:99:2b:fd:43:
                    dd:6f:68:c4:53:b6:5c:00:9e:32:0c:27:97:74:a8:
                    58:bf:bc:bb:f1:73:a5:60:05:28:1a:5b:08:21:79:
                    45:17:d8:cf:af:72:c0:3e:b9:0b:73:c9:77:a1:23:
                    e3:2c:bc:3d:4b:5d:d8:a3:54:61:2c:19:95:58:09:
                    72:a1:2c:02:f7:3c:69:11:8c:a1:cf:21:f7:8a:bd:
                    a8:ff:1f:a1:a2:dd:3b:42:62:15:bb:9d:6e:9c:ed:
                    c6:4c:05:e5:95:e8:e1:4d:19:5e:cc:ee:c1:a3:78:
                    93:7c:9c:8e:bd:de:aa:2f:be:e4:62:ff:7e:53:2e:
                    54:c3:3b:a1:18:c6:5e:85:e2:c7:05:58:e4:c6:11:
                    5d:d4:73:bb:3e:e8:28:e8:1e:99:e3:c8:6b:ab:fe:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:E8:8D:3F:A9:E5:87:81:62:02:49:93:04:6C:A2:20:65:FA:0D
            X509v3 Authority Key Identifier:
                keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:2b:45:58:91:9c:83:0b:46:88:f1:d3:5d:ff:5b:c0:b8:
         84:75:cf:12:35:ae:08:e0:3a:73:95:6a:ca:20:ee:ad:72:0c:
         28:61:c6:a1:c7:4d:be:04:dd:19:ce:e3:6b:44:74:1a:b5:c7:
         b3:07:8d:7a:16:48:cd:87:e2:c6:53:ef:fa:a4:50:50:81:64:
         3b:13:f0:51:f9:62:a5:b6:34:82:7e:0f:d7:93:cf:b9:93:3b:
         30:11:8f:21:94:54:40:41:c0:4b:82:a4:f4:49:7e:9e:3e:ff:
         b3:ac:d2:fd:69:17:d7:ed:a7:5a:59:c4:cb:55:4e:4f:61:34:
         09:a2:58:82:5f:92:41:2d:dd:08:97:7f:f2:5b:99:05:98:61:
         68:ee:6c:2b:21:f9:00:87:0b:84:91:bb:31:ae:f1:7d:69:80:
         e1:f3:09:ef:94:4a:71:53:21:44:31:40:45:d5:ca:c1:72:c6:
         32:2c:a5:fb:3b:06:38:b0:6b:4b:88:a4:ff:95:6f:c0:cf:ee:
         0c:46:ea:b5:9b:b9:66:20:27:07:b8:e0:f9:54:3e:58:c4:86:
         41:5d:08:3d:5e:92:b1:45:5e:ae:bc:40:f3:5c:ef:5a:20:43:
         07:d8:66:d6:9b:50:9b:76:f1:1f:0e:f3:b1:82:cc:74:72:ca:
         45:b8:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----