Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File:                     F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier:          5ZkMRJ2NHbZl00lFBQQKuQqNx2T7KHKAR/99f/W17cg=
Subject key identifier:   ED:35:93:3C:D9:8D:0B:54:67:14:B4:5B:23:FA:AE:AF:88:38:68:D1
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer:       /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial:       01962F3D8F0B162265A79DE14DF13EFE79AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number:          03B5
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: F3rCA0hWjdqCfWjn4acR40JnHRMF5coUKrgKOe4oWsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:0b:16:22:65:a7:9d:e1:4d:f1:3e:fe:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=ed35933cd98d0b546714b45b23faaeaf883868d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:20:53:06:cc:91:9d:af:b7:27:80:51:31:
                    74:fb:f6:e4:87:09:0f:d1:e4:89:ce:48:72:7a:30:
                    79:2e:c2:1e:c8:8a:05:75:0e:08:75:47:e1:1f:3e:
                    3a:25:4e:fb:7e:67:1d:dd:35:19:0b:0f:92:fd:18:
                    49:68:32:77:44:4f:42:3c:f7:b1:6d:38:25:fc:89:
                    be:d6:3c:d5:43:0b:ee:3b:d3:5f:16:ac:18:37:08:
                    55:0d:5e:3d:5f:72:9d:1d:26:32:34:bd:e3:9c:a9:
                    32:f0:e8:01:9c:19:6d:c6:0d:68:a0:5f:55:bd:fa:
                    65:e9:df:8b:07:18:22:bb:b0:78:cd:ee:b9:fb:76:
                    86:56:8b:bf:0b:5e:88:1e:b4:e1:76:af:9f:08:63:
                    a5:71:f8:16:50:47:fb:f0:1c:7d:ad:e9:e0:c8:89:
                    4c:9e:d6:03:89:0a:af:cf:de:73:b4:e3:fc:7e:93:
                    9b:5d:38:ff:a6:39:89:d7:80:b7:e3:93:55:cb:43:
                    f1:60:ac:f9:55:53:5a:29:e3:1b:b9:13:db:35:70:
                    a7:59:33:35:2e:99:cf:dc:5e:a0:28:13:e0:d8:cb:
                    6d:9a:a4:da:2f:08:45:f3:f5:46:da:af:da:0d:3a:
                    26:a7:47:aa:8f:4a:4a:43:a1:df:a9:73:c5:04:f4:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:93:3C:D9:8D:0B:54:67:14:B4:5B:23:FA:AE:AF:88:38:68:D1
            X509v3 Authority Key Identifier:
                keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:b6:65:ae:83:b1:a0:5a:b2:dd:c7:c7:d6:1e:e7:fc:a7:
         6d:a6:98:9b:98:cb:76:bf:43:c8:89:a6:ae:2e:76:d8:ae:b3:
         6b:90:8a:06:5b:7d:9a:b4:b2:c4:aa:a6:f9:1f:d4:16:b0:cb:
         4c:86:94:07:83:24:d5:63:e8:3b:d1:5e:88:cc:3f:92:f7:8d:
         84:5e:3a:d5:70:bd:8c:8c:98:60:1b:b2:99:79:fa:79:df:e7:
         82:06:79:05:9f:ad:96:87:55:3b:1a:16:51:bf:a7:e4:e5:65:
         76:a0:e5:66:ac:6a:90:15:89:86:e4:6e:f2:86:2c:08:23:f7:
         4c:a3:7c:f2:81:50:20:46:e5:b1:9a:bd:3d:30:53:56:5c:a9:
         28:23:e0:7a:26:e9:61:e0:88:aa:28:ff:e8:99:81:10:26:5c:
         ef:12:f5:79:d8:87:c6:c8:54:38:41:bc:1b:e8:97:cb:b7:17:
         13:79:d5:22:f7:a1:6e:af:84:5c:fe:fe:2d:12:cf:4b:e9:5c:
         c5:88:86:f0:e9:62:85:bf:d2:dc:1c:82:bf:55:82:ac:3a:d5:
         bf:1e:e6:36:2d:57:7b:eb:50:65:31:ca:b3:b1:69:4c:86:fb:
         96:01:58:c0:fa:f8:2b:b7:0c:0f:85:20:2b:7a:ff:e0:c9:88:
         7c:90:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----