Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          9qM3Ckwr9mlxsZzP7MeYdH0fhHsPskzr8VJn2iFyk3k=
Subject key identifier:   9A:26:B7:B2:46:F8:26:25:BB:A6:2F:41:52:B0:09:20:F4:85:04:E0
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       01962E98B9E975A2AC37C29B85FFBC1F9CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: oyKW1BsDu8CIswPtlxXRney0NgMR4c9DO5C8lFBFv0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b9:e9:75:a2:ac:37:c2:9b:85:ff:bc:1f:9c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=9a26b7b246f82625bba62f4152b00920f48504e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:a8:a8:a2:a5:bb:27:18:5c:cb:fa:08:bc:
                    4f:ba:b0:db:06:6c:22:22:42:46:49:6b:3e:a8:bf:
                    d1:09:fe:ac:f7:14:aa:60:7d:fe:d3:ee:ff:90:04:
                    c2:59:d9:30:a8:4e:6a:ee:37:fd:a3:59:b6:41:94:
                    36:99:ca:c2:f0:cf:48:96:ba:b2:32:3f:7b:b9:b1:
                    45:a7:2b:04:6c:a9:6e:fd:36:0b:18:ce:43:74:e8:
                    bc:50:b5:30:9e:89:c6:92:ba:25:98:e3:fc:5e:1f:
                    bc:b8:a2:fa:ab:aa:0f:72:34:f9:e1:89:1c:0c:50:
                    22:4b:97:b0:a0:e6:41:15:e6:34:da:32:65:48:1f:
                    2e:2b:8e:f4:fb:05:01:80:7e:57:2f:66:4e:a8:1d:
                    36:e0:d6:40:e3:6f:69:94:23:b0:f4:2d:d0:9d:e9:
                    0c:9a:42:32:75:5e:31:3b:86:37:c5:35:5b:21:85:
                    e2:ce:c4:a6:85:ee:48:ea:0f:ec:79:29:dc:33:98:
                    bd:32:6d:68:1e:79:88:61:92:e3:9b:9e:d2:6c:e1:
                    3c:7d:ce:4c:d5:5b:a1:e9:79:89:e4:20:95:78:03:
                    3a:c6:38:2f:97:33:2d:58:ee:44:5a:b0:25:39:f7:
                    5f:d6:e5:a0:fe:6b:11:27:db:15:1c:f0:d4:2c:c3:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:B7:B2:46:F8:26:25:BB:A6:2F:41:52:B0:09:20:F4:85:04:E0
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:69:18:c3:85:69:41:3f:97:bd:40:8e:b4:39:0c:6d:a7:
         a2:e9:8c:c3:07:75:d2:6c:7c:71:5a:25:8e:78:01:e8:23:20:
         5a:22:aa:2e:f8:f1:91:c2:58:f4:14:4d:8f:8e:45:33:f3:96:
         3e:31:e0:5c:b2:40:d6:33:63:6f:87:da:77:32:d6:71:59:ec:
         38:c3:93:17:45:93:eb:97:12:46:ef:07:4e:68:87:30:ec:1e:
         00:f4:cc:8a:95:a5:1c:1a:c3:fb:c5:8c:e4:c1:53:fc:7c:bc:
         cd:c2:82:c5:cb:ce:51:24:76:39:d2:f0:96:97:ab:d8:b8:18:
         b3:0e:09:1a:52:76:93:2b:3a:1c:28:de:f4:f0:00:b4:8e:ba:
         ce:c3:e1:78:44:dc:7c:b1:6d:fc:58:72:54:5d:09:58:71:b6:
         f2:87:0b:11:ec:75:f0:61:ea:88:6a:7a:fa:da:c7:f4:96:71:
         e9:a4:19:86:f9:86:3f:fe:f2:b3:12:9f:8f:47:7e:a7:73:2f:
         f0:f1:c8:e3:9e:58:58:e7:0b:b4:c6:26:94:81:9b:53:9f:c1:
         fb:76:f7:2c:18:c3:bb:c3:ea:ec:4c:95:32:ec:7e:9f:37:49:
         77:c5:da:7d:c7:bc:30:d2:16:a9:66:4e:26:3b:03:d7:ca:2f:
         ef:5c:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----