Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          y+nQtz9vOw975c58kt0CvwE2cw1ce6eYC1aC+FvgE9A=
Subject key identifier:   FF:53:4D:CD:B5:D9:60:32:E8:A5:92:B9:B8:C4:9C:8A:69:8C:B0:BA
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       01962DF3AB1F64D6F969D34D64DC7A85178D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: rIgQZJZ9LSgAsHHQgloTBxtd3F5yCx4+87Zos0r5zXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:1f:64:d6:f9:69:d3:4d:64:dc:7a:85:17:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=ff534dcdb5d96032e8a592b9b8c49c8a698cb0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:05:3d:8e:ed:26:b4:47:c9:38:a0:78:c4:
                    d2:fb:cb:49:ed:09:fe:14:4f:94:9a:9a:c8:d7:d9:
                    08:8c:84:3a:19:1e:95:16:dd:d7:24:d7:7d:ae:7f:
                    f8:6e:f1:82:e2:48:d4:e7:b4:51:b7:c0:41:5d:b0:
                    d6:50:16:d9:25:90:b6:72:e9:a2:1a:1f:59:96:10:
                    25:c7:a3:8e:88:a5:d6:f5:47:57:5f:ae:7c:a7:ed:
                    b9:2c:fd:79:1a:12:e0:43:c5:01:bb:94:94:52:aa:
                    7a:a3:87:7e:60:b2:d0:f1:bc:24:68:c0:45:0a:77:
                    ea:a0:49:19:f4:df:dc:38:7c:e2:cd:18:81:95:70:
                    97:f2:ac:03:01:a3:93:ef:88:db:a0:30:60:31:50:
                    03:73:1e:47:e7:d2:30:b3:f7:97:f3:f6:77:aa:d7:
                    0d:cd:9c:e9:5e:a7:f5:a4:71:dd:4a:ad:da:97:76:
                    ae:fd:fd:a9:a1:27:a3:4c:8e:7f:f6:dd:a8:aa:99:
                    f9:65:34:24:b3:5c:a6:0c:14:d7:12:e9:9e:bc:c7:
                    16:3c:81:7d:d8:b8:56:66:9f:ff:b0:38:c6:52:42:
                    bd:be:70:98:9b:e9:8c:db:d9:79:40:fc:69:49:da:
                    dc:66:3e:35:0b:8a:db:6e:c4:2f:cf:a7:e4:31:7f:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:53:4D:CD:B5:D9:60:32:E8:A5:92:B9:B8:C4:9C:8A:69:8C:B0:BA
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:86:6b:dc:8f:e2:ce:9d:19:4e:36:45:c1:7e:ec:15:d8:56:
         3c:e4:4c:2f:80:49:81:74:fc:e7:0f:f0:bd:8d:f9:ca:28:21:
         8d:e0:bb:0d:25:df:b5:0f:bd:aa:71:da:11:31:d6:f2:2d:c5:
         7a:db:21:fb:f7:57:37:35:d6:71:9b:d6:1f:c4:99:52:14:db:
         31:02:06:1d:dc:b3:36:bf:1d:75:26:33:0b:b8:ae:30:17:d7:
         ca:c0:4c:31:2e:6e:6c:42:9b:a1:b3:2e:14:c4:6a:02:d8:e6:
         71:2f:9d:3d:17:1c:95:7b:35:64:30:5f:9b:78:5d:25:f1:99:
         8f:44:76:9c:17:02:07:16:6b:9d:a1:2d:89:5d:04:7e:b4:ce:
         bc:98:5e:f6:d5:9d:8c:be:59:ef:15:8a:c6:77:24:a2:3b:dc:
         fe:c6:34:12:56:5c:d7:9e:2e:84:7d:1d:b3:bd:52:54:b2:3d:
         96:b5:fa:9b:c7:70:90:fe:ef:db:60:71:b2:ad:96:8e:af:66:
         3c:eb:8a:61:a4:05:80:45:8e:0a:be:7f:e9:6b:2a:33:2d:4e:
         30:b0:4d:80:36:89:41:e3:66:22:ba:1f:c9:0f:0c:4a:40:bd:
         0f:a4:bc:88:de:c5:3e:2a:3c:1c:a7:25:44:4e:fa:00:a2:2b:
         3b:74:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----