Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File:                     ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier:          4aNESjPD78UNLFKL6LXZ677B7WqGlGi66aXW+hfD58o=
Subject key identifier:   62:52:5E:AF:E4:91:2F:13:EB:B3:05:37:85:33:A1:1E:E7:5E:E4:38
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer:       /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial:       01962DF3FFC7B09D7F9DC2E4DA84F5D564FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number:          08AC
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: 5J/SoqnsW95wXNoMKfZkjIbpDzJMO1h38kX5dyCCp2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:c7:b0:9d:7f:9d:c2:e4:da:84:f5:d5:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=62525eafe4912f13ebb305378533a11ee75ee438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:9e:bf:44:74:0c:48:d1:f1:62:38:2b:eb:
                    dd:c3:4b:8f:19:e1:5c:08:41:0e:96:ed:61:2f:ae:
                    3f:3a:2d:92:c9:e6:97:8c:5a:7c:80:66:58:1b:e2:
                    95:9d:8c:df:22:1c:9c:c7:b9:8c:ea:40:b4:8a:03:
                    39:6c:0f:76:fd:d4:b3:0d:1f:a0:2f:32:55:6b:21:
                    97:f3:b7:07:84:1c:b5:39:2b:7f:52:2e:c8:5a:82:
                    66:cb:62:57:e9:16:64:49:85:b0:a1:be:01:95:a6:
                    79:ee:e2:91:1b:98:f7:a0:9f:45:cb:47:45:54:3d:
                    f3:7d:00:f3:d9:3c:05:00:24:e5:36:bc:5d:ef:4e:
                    00:74:07:29:a2:a3:03:c5:83:7a:66:2b:35:24:84:
                    a3:db:e9:9a:0f:28:2e:0b:62:41:89:89:ee:1a:0e:
                    28:39:a5:39:75:ec:1b:41:db:e0:b1:eb:9e:4a:62:
                    95:42:5e:79:03:0c:05:30:ee:c7:1f:49:20:6f:61:
                    60:c9:56:42:00:f2:47:0d:85:39:70:da:b8:56:43:
                    c9:ef:fe:18:6c:bb:00:2d:47:c6:e1:6d:10:15:51:
                    c7:0d:6f:57:b7:55:cb:29:72:fe:49:c8:4c:37:95:
                    78:e4:65:dd:4f:cd:da:ea:5e:6d:78:02:90:ac:d9:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:5E:AF:E4:91:2F:13:EB:B3:05:37:85:33:A1:1E:E7:5E:E4:38
            X509v3 Authority Key Identifier:
                keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a3:e5:b0:0e:f5:0c:c4:97:6c:8e:5e:a5:7d:bc:5e:ec:f4:
         75:86:12:62:5e:a8:5d:02:b2:f3:6b:82:fc:3e:2e:16:d4:e0:
         90:7f:92:e2:d1:f6:88:90:e2:70:4b:f0:fe:b7:e7:2e:b6:ca:
         97:34:f7:7e:b8:2c:18:8c:a9:c9:68:62:4f:85:26:a1:98:5c:
         7c:36:b0:55:34:f9:e4:6f:5e:00:b2:88:1a:0d:c9:2f:2f:cb:
         75:b2:96:7f:02:17:c4:e6:e6:d5:62:55:51:3a:f6:01:c3:df:
         a0:7d:59:a3:cf:5b:41:a8:48:d0:ce:cc:2f:26:e9:76:6b:81:
         42:94:9e:76:a7:67:ca:e2:7f:9b:c2:8c:fe:d9:9c:ad:17:e0:
         27:3d:57:e7:38:28:0c:d0:02:cb:e7:e1:88:c8:f2:11:23:17:
         af:4e:63:1a:aa:ee:22:3a:33:84:72:03:c2:c2:e5:73:35:1e:
         fd:9d:6d:17:da:c3:d2:ba:71:de:cd:55:22:ec:d9:63:cc:fa:
         5c:3f:20:91:f7:6c:8f:5f:dc:10:9a:57:fa:3e:00:8e:e1:8b:
         c0:11:76:82:68:25:45:55:bb:50:93:18:59:50:a6:dc:9c:df:
         7a:03:80:0d:53:ea:72:28:f7:39:dc:8c:42:32:f1:71:30:3a:
         f3:72:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----