Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File:                     igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier:          AKC6l/3mRAIRZGcVscyhF5Fe5WW1Bc09CeoHzR/qsSk=
Subject key identifier:   A3:4B:FE:91:F6:24:08:2B:2E:EF:C3:13:55:1D:BF:D3:6A:4F:0F:A8
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer:       /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial:       01962E61DEA100E5365461E1F5226DEB7278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number:          0591
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: cNSbiGdYUnScUJ7BOESb1IT4EfHS6d6xoN5azDcWIEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:a1:00:e5:36:54:61:e1:f5:22:6d:eb:72:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=a34bfe91f624082b2eefc313551dbfd36a4f0fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:b8:72:46:b3:41:6c:f8:44:a9:5e:82:57:
                    a0:3f:0a:39:f7:01:ab:2b:9b:a9:01:2c:60:74:f0:
                    41:c6:db:1b:ff:06:74:d4:ef:5b:58:ad:51:e2:f1:
                    d9:fb:5e:3d:13:0c:10:4e:b1:2e:a1:9d:21:6b:96:
                    37:1a:82:8a:f9:57:56:52:bd:c4:03:d6:8f:da:d6:
                    e7:70:94:66:10:0f:4a:e0:73:c9:e0:ad:30:26:f9:
                    36:ae:0c:78:4b:83:1d:f2:ec:d5:df:1c:ad:fe:b4:
                    34:ce:45:b5:95:60:53:c6:7c:8a:c0:2b:65:39:60:
                    9b:6c:95:80:17:62:4c:84:78:b1:63:86:a7:f8:47:
                    8f:90:d9:04:ac:b1:30:a7:c5:d8:3c:0d:61:c8:20:
                    d2:4c:c2:a6:0e:ab:fa:76:6d:3e:48:17:6f:0c:d1:
                    7f:dc:76:18:47:30:af:6a:2f:ec:9a:18:a9:f9:08:
                    f2:7c:46:ce:92:9a:03:6e:32:56:0b:df:09:3a:1f:
                    6c:9a:17:bf:d0:80:fb:10:41:23:87:2b:9b:29:ac:
                    d8:3e:d5:f3:63:f8:b7:e4:84:c0:6d:80:ce:3d:16:
                    3c:82:fc:a0:d9:bd:ef:b1:96:bd:96:77:f1:11:76:
                    46:bb:80:22:3c:d8:6b:fa:99:c0:5e:94:90:60:1d:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:FE:91:F6:24:08:2B:2E:EF:C3:13:55:1D:BF:D3:6A:4F:0F:A8
            X509v3 Authority Key Identifier:
                keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:b2:44:33:7b:6a:d1:7f:de:ef:f2:4b:ba:48:2d:f5:0c:
         5a:b1:94:6c:e7:db:9d:3a:58:fc:8c:e5:99:ec:76:e3:20:87:
         7c:da:21:f0:a7:2d:45:52:bd:62:f5:cb:e1:a2:9a:99:f8:db:
         50:51:ec:0b:48:e3:fb:62:0e:47:94:e9:ed:e7:e0:fc:64:4f:
         13:32:b2:67:40:2f:75:b3:68:d2:e7:48:17:a0:d3:cc:bb:02:
         ad:3e:59:4a:2c:3c:50:05:4b:41:ca:99:e9:a9:47:9b:53:07:
         26:b4:74:a7:e8:f1:4c:b7:81:10:aa:ac:a8:50:8d:9a:6d:b8:
         94:c2:03:96:36:10:56:1a:2b:0c:02:0d:4e:80:45:1f:95:7c:
         85:1b:dd:ef:5d:2d:b0:46:a4:e1:d9:9d:3d:11:ac:c0:25:1c:
         98:a4:e7:8c:ba:dc:0b:a1:48:7e:6f:09:38:42:63:e2:cd:3a:
         6a:ad:ad:69:2a:53:85:a7:04:ed:d8:3a:dc:31:fe:dc:21:58:
         72:66:a0:e7:c6:5e:0c:65:45:dd:df:4d:d1:b5:f2:3d:cc:bf:
         42:3a:8b:97:79:02:fd:84:1a:3a:f2:8f:fe:1f:da:54:c6:26:
         c2:6b:47:98:bb:54:49:47:7e:bc:24:86:4a:61:0d:c0:4c:5a:
         0f:0a:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----