Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File:                     DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier:          xRtaMYiL8CrO72gTg7bSYRldEojfNafTZu7HlCEF2ss=
Subject key identifier:   F7:5A:68:0D:9D:F8:18:16:AA:FA:CC:22:18:C6:3B:A8:02:E0:B9:D2
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer:       /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial:       01962E98B68E6D02888ADC5125E694AEB621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number:          1222
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: oQua0X+PMCp7MNY+mE2pTt/9l5Qv00ubfXo7Qf+QIpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b6:8e:6d:02:88:8a:dc:51:25:e6:94:ae:b6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=f75a680d9df81816aafacc2218c63ba802e0b9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:79:12:63:2f:3b:0a:20:67:71:1f:f1:99:
                    ea:c3:3b:c8:e2:0d:ff:a2:f8:e5:69:31:66:fe:5e:
                    19:07:76:e7:5b:02:22:44:b1:76:4e:ce:28:d2:9a:
                    47:41:fe:57:88:76:29:79:92:03:09:c9:4a:e7:b0:
                    ec:d9:56:59:5d:1b:3f:92:f6:aa:65:7b:03:3c:6e:
                    c2:b3:22:a5:e3:30:a7:23:f3:04:4c:45:86:c4:51:
                    b4:22:c0:5a:82:63:c4:f2:c8:04:9b:f6:b5:cc:d8:
                    5c:cc:88:9b:3d:b2:74:fa:86:ca:3c:bf:8f:29:a1:
                    1c:c1:f6:f0:95:26:38:5d:11:28:2e:20:57:fd:61:
                    79:54:c0:54:7f:c5:bb:26:19:9f:30:fd:e1:55:66:
                    96:66:97:02:b3:c2:18:e0:50:c9:10:89:c6:5f:6b:
                    83:79:d9:20:fd:74:07:b7:0f:83:05:5d:b9:93:61:
                    80:91:e2:2d:76:80:a3:93:57:8e:82:ce:ad:c3:e8:
                    5e:df:ee:1b:2a:3b:8e:58:f1:00:5f:85:86:07:4a:
                    28:44:af:9a:81:ef:9f:e6:21:67:42:6a:28:01:cb:
                    e1:0f:32:b6:d8:16:1a:cc:80:39:b0:db:10:e3:74:
                    8f:b7:ce:73:6a:b9:35:68:11:92:4f:99:48:39:6d:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:68:0D:9D:F8:18:16:AA:FA:CC:22:18:C6:3B:A8:02:E0:B9:D2
            X509v3 Authority Key Identifier:
                keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:88:97:f1:e6:98:ac:27:90:03:f3:b3:f9:f6:8e:b3:6a:69:
         7a:fa:e8:42:6c:9f:ac:cb:41:f4:26:3a:85:11:10:d1:80:1d:
         16:8c:f2:22:76:23:ca:89:14:03:2e:9a:40:c8:db:4b:d5:bc:
         13:25:11:0c:c5:31:b0:b2:5d:e8:43:b0:67:ea:ea:b4:b7:3b:
         88:30:12:c4:7b:fb:0a:3e:b9:d6:ba:ca:56:ae:bf:50:dc:1b:
         6d:0a:82:d2:55:c5:32:c7:05:d5:98:9f:e5:b7:0b:25:3c:d6:
         4f:62:46:15:5c:84:c8:ff:84:f4:c8:2d:66:31:52:48:6c:9e:
         24:64:70:d7:94:36:88:de:ce:af:e3:aa:25:90:b1:f6:aa:f2:
         9e:b8:68:e7:7c:36:c4:5b:b1:1a:23:55:bd:67:a5:5c:7f:47:
         ed:c7:53:08:da:12:45:a3:0c:72:9c:4e:80:6f:5b:92:2d:94:
         d7:91:a2:b9:ee:53:9b:8b:9d:7e:33:b5:2f:d1:1d:30:5a:6a:
         47:4f:a9:4d:05:2f:d4:d2:ce:89:9f:1c:89:77:d6:05:31:05:
         e4:2d:31:82:bb:93:bb:0a:3b:59:5e:f4:d1:89:d6:1e:cb:4c:
         74:58:a5:e3:31:dc:6e:b3:01:02:a0:24:55:9b:ae:5c:08:9f:
         72:ec:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----