Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File:                     mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier:          57WE89HEfoA3avez2UJ8GarSx7QeSNwFQPTrV477VyE=
Subject key identifier:   D4:56:C7:9B:FF:5B:46:E4:F6:FE:31:93:26:7C:ED:27:9D:EB:EA:17
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer:       /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial:       01962E618FB60752E165E2EA2926CB7831D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: YM0ST+6Wg2jQ3qs3pwHuXvwihAD9K8Znb1V3YOKy8rQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:b6:07:52:e1:65:e2:ea:29:26:cb:78:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=d456c79bff5b46e4f6fe3193267ced279debea17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:f8:ff:17:ce:ac:88:0d:07:ec:7c:3f:11:
                    6a:fe:0b:7c:10:32:37:fd:63:6f:4b:16:7a:b7:48:
                    20:e9:a0:c8:f5:70:c5:36:64:bd:a1:83:99:e3:23:
                    d8:15:5e:7b:45:e6:11:6b:df:3d:f7:2f:9d:10:cb:
                    20:54:01:40:f7:ad:8e:e3:10:24:6d:27:d5:d2:24:
                    fd:73:c5:56:3f:dd:01:f0:7c:5a:91:7e:34:06:92:
                    84:29:df:66:20:2b:64:79:04:c6:e7:13:54:de:ac:
                    a9:04:cb:9f:7c:c1:90:af:77:24:92:a0:03:b1:84:
                    0e:20:30:2a:e1:4a:46:3e:35:bf:16:ad:22:54:49:
                    e1:b1:7b:7b:29:b8:2b:56:ba:c8:0a:9f:c0:bc:6a:
                    11:60:77:b1:06:df:43:42:5a:93:7d:66:31:11:d3:
                    43:3a:4a:3f:c9:0e:8b:ef:f4:39:9e:e7:55:45:6f:
                    4e:a7:0b:a6:49:77:0b:71:5f:4f:cb:d8:63:f1:32:
                    11:00:3c:ec:d9:9d:f6:3e:61:41:22:d4:0f:ed:37:
                    d4:3b:bd:2c:96:d2:c1:53:9b:90:f4:45:58:dd:12:
                    dd:b2:7d:50:b4:95:bf:28:3c:d9:99:35:f7:dc:12:
                    6b:c5:8b:a9:f6:5d:3c:03:b3:fd:a6:b9:db:ff:76:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:C7:9B:FF:5B:46:E4:F6:FE:31:93:26:7C:ED:27:9D:EB:EA:17
            X509v3 Authority Key Identifier:
                keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:79:08:98:01:44:84:d0:41:72:81:80:3f:0a:a3:b8:08:
         b0:f0:73:d2:4c:27:c3:39:84:c5:b5:ef:d0:22:90:d6:41:64:
         f4:84:fb:0e:66:17:b5:a6:c1:0d:09:73:0d:a2:42:75:c5:af:
         8b:f7:1f:94:1a:1b:72:79:5c:5d:bd:9e:d5:f7:84:d3:53:f9:
         63:e6:84:df:b9:73:49:20:03:ff:e1:76:15:dd:ec:06:71:d0:
         d1:96:a9:d8:b0:e4:cf:7b:b4:50:81:a1:9c:67:e9:4a:b8:39:
         1a:41:ec:84:ac:a0:0b:21:05:61:13:fb:11:67:a3:4e:92:4e:
         6c:97:db:61:a5:9c:d2:c1:f9:9f:5f:40:20:74:f4:a5:57:65:
         08:5e:4c:8d:c2:e0:ed:ce:05:f0:7d:ff:c7:55:e6:a6:e6:4a:
         c7:5a:a1:92:74:3b:ac:b1:b3:ef:78:5a:f5:96:42:8c:b8:36:
         15:f9:0f:ca:18:a6:d3:c5:f1:67:7d:50:87:aa:94:54:fe:8b:
         29:04:9d:f6:dc:9c:6a:81:3b:72:61:c2:5c:f6:41:fa:b5:f4:
         96:12:e1:2c:72:8b:d2:28:8b:97:6d:4d:b9:8e:4b:3d:13:8e:
         58:06:c6:ef:9c:6e:11:7e:94:f0:25:0d:7d:9a:74:e5:81:77:
         5d:7d:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----