Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File:                     t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier:          0DJl2OXKSEOCTtMNU8np0Jbz/kFwJ0Zg5DKGf7KuSxo=
Subject key identifier:   ED:D3:A1:C6:F1:17:44:74:19:B4:09:27:44:4E:BD:62:B6:E8:3A:9C
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer:       /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial:       01962F0656F9A0284A829FFC050C5A128D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number:          05DC
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: N/fS3ng+KPa6iHdNeGOc7eqm/oVX2w+45tPNQzebK5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:56:f9:a0:28:4a:82:9f:fc:05:0c:5a:12:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=edd3a1c6f117447419b40927444ebd62b6e83a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:fe:fd:1c:ec:09:3f:45:b4:a2:fe:25:af:
                    0f:9b:0d:8d:c2:09:0b:30:03:85:28:d0:40:46:24:
                    02:ce:17:61:2d:ce:c4:aa:1a:34:69:c6:dd:9e:64:
                    59:a5:82:fe:7e:95:7f:f6:d8:1a:cc:72:0d:c7:e2:
                    70:87:65:f0:0c:84:51:f7:2b:13:b1:1d:0b:ee:73:
                    36:5d:b6:e3:ee:6a:c6:0f:95:ad:f2:6b:05:17:9e:
                    d9:3b:68:16:dc:ce:b5:d0:12:26:4e:3f:95:2d:58:
                    f8:2c:c4:7a:db:e3:65:da:12:f5:bf:76:77:72:1c:
                    e0:63:dc:2f:d2:6b:4e:f5:3d:f0:d9:32:98:18:60:
                    46:97:10:54:47:10:be:6f:90:71:04:4d:0d:09:db:
                    a6:ce:f1:47:59:db:82:14:be:01:a4:b2:6e:33:7f:
                    0f:45:68:b9:94:56:fb:8f:e2:d3:af:0a:33:33:d5:
                    9e:a0:8a:e7:21:f8:63:f2:e9:2b:57:3d:11:ea:c5:
                    23:5b:5d:ec:ff:04:9e:2f:07:8d:0d:4d:a0:a7:64:
                    6e:88:2e:6e:4a:86:73:c3:8b:34:51:91:bc:5a:d7:
                    85:3f:f6:ef:8d:1f:91:37:4d:52:9c:a3:b2:e8:97:
                    d9:44:b5:fb:6b:6a:19:13:6b:4e:2d:14:d2:ec:8b:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:A1:C6:F1:17:44:74:19:B4:09:27:44:4E:BD:62:B6:E8:3A:9C
            X509v3 Authority Key Identifier:
                keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:37:cf:ff:f1:b0:98:9b:27:2f:b2:9d:1d:7e:f7:2c:ae:
         23:44:8b:a3:9d:6a:91:f6:38:bd:fb:44:2f:39:09:be:3e:22:
         df:80:40:8d:d6:7b:59:5a:9b:cd:5e:26:cd:56:f6:24:90:1f:
         8e:fd:1e:76:9b:3e:5e:2f:78:4f:8a:40:34:dc:e8:a1:62:97:
         01:23:08:92:99:de:c0:62:84:c4:f5:0f:e3:a0:d7:aa:26:10:
         dc:99:22:bf:cc:79:e1:f0:df:ce:ea:e1:72:52:6f:19:17:ff:
         9e:68:b8:4d:82:4f:c3:b9:3a:8a:b8:87:fc:3c:92:48:f5:a4:
         96:e8:1c:c1:57:01:06:52:3b:fa:b4:1a:55:33:26:f9:1d:55:
         5f:1a:56:bb:e0:6f:8d:5f:9c:00:44:35:7d:30:2a:0d:68:2f:
         0a:ef:c0:53:e6:fe:e3:bd:3d:f7:b2:52:34:9d:6d:90:1c:11:
         14:ee:96:28:d6:43:d9:f5:d6:62:99:df:fc:20:ea:bb:51:58:
         a5:17:61:cd:3d:cd:1a:88:14:9e:03:5d:74:ee:4a:e8:1a:4a:
         35:24:c3:2f:3c:11:34:44:0e:f0:a8:21:fa:ff:5a:d5:08:0c:
         09:12:d1:58:3c:f0:e1:4f:5e:bd:8c:6d:c6:b8:fb:d0:92:f5:
         e3:f9:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----