Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier:          SwIfDSSEBsXJJ1VqWVXOPxOx/mkIm946o1DbJCKgj7c=
Subject key identifier:   99:26:58:20:17:2F:93:C5:0B:DA:50:F3:BC:E9:62:CC:05:9F:E3:80
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer:       /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial:       01962E998975FF6ACCE066C9D09ABB51D852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number:          03C1
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: wyLxIxy6PeL2JuJXRhsAlr6031x+H7D8y/Y74QBbkhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:75:ff:6a:cc:e0:66:c9:d0:9a:bb:51:d8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=99265820172f93c50bda50f3bce962cc059fe380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:ff:79:0c:e4:a8:a1:cf:bd:ee:06:7c:7e:
                    d7:c9:bd:a3:25:05:1b:6e:de:93:14:17:99:68:6d:
                    a0:d4:b2:ad:d7:5e:44:7a:ec:46:1c:94:37:ec:17:
                    c4:bb:0a:cf:e9:fe:34:05:0c:4e:19:9c:9e:05:96:
                    60:81:5c:2a:13:af:e8:5d:22:7e:f9:84:f1:9b:99:
                    d5:7c:cd:06:db:9e:9c:83:3d:88:03:d1:5e:25:a5:
                    3f:be:42:f2:fd:4d:4e:3b:25:dd:40:8a:8e:98:6e:
                    a6:e1:77:af:eb:6b:92:c4:51:93:7e:54:1f:64:1a:
                    89:19:95:eb:40:b9:75:6e:5b:77:33:a1:c2:a7:d0:
                    3f:af:67:e2:8a:7b:22:3d:9f:8a:70:ce:aa:1a:db:
                    ca:9a:c0:d0:e5:c0:87:30:05:32:8e:9d:1f:ff:90:
                    b1:a8:05:28:95:77:cf:b1:7f:d2:0b:1c:2f:a5:40:
                    48:65:75:82:47:ec:0e:9f:bb:3a:2d:3b:a9:38:ee:
                    96:db:97:ac:cf:81:86:17:ca:bb:b5:ab:58:f3:9e:
                    25:66:a1:3b:da:31:3d:52:c3:64:a3:f4:56:e4:58:
                    e8:43:bc:c2:8d:c9:8f:7c:50:78:fc:f9:cf:79:75:
                    90:a5:0c:1d:3b:c4:f1:20:54:26:5f:d5:21:aa:a3:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:58:20:17:2F:93:C5:0B:DA:50:F3:BC:E9:62:CC:05:9F:E3:80
            X509v3 Authority Key Identifier:
                keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:be:e0:72:f7:08:0c:ab:f8:a6:d7:8c:7f:d0:ce:37:ac:fd:
         6f:72:f7:8d:3f:27:9b:c7:8a:8c:1f:09:50:6e:c5:30:e0:be:
         60:f1:b6:ae:27:6f:e0:2a:00:c1:3b:05:7e:1e:de:89:d4:ff:
         0a:e0:fc:60:05:08:42:17:fc:c6:0c:17:f9:bd:ae:fe:57:6b:
         c9:a6:bb:51:33:2b:c0:4e:d8:d1:cc:df:ef:b4:51:61:97:15:
         a6:c2:1c:37:b0:b1:a3:f7:2a:6e:aa:f7:18:12:67:ff:6b:ac:
         cd:54:89:80:c3:cd:79:cd:33:65:62:ac:a7:d4:c8:9d:8e:85:
         16:c7:25:0f:a0:b2:28:79:46:22:ee:8c:e0:5c:67:af:d1:cb:
         29:fb:11:5d:c2:4d:88:bc:6f:b1:6e:85:89:2e:63:a7:a5:9f:
         5e:b9:4f:28:8c:1b:4d:ac:89:c7:d2:ef:d0:a5:5a:77:ee:3c:
         90:c5:0e:a4:6b:2e:0f:eb:12:cd:e7:eb:1c:c8:bc:4d:80:10:
         4a:64:24:b3:89:20:a3:32:01:46:02:4e:eb:8c:be:0f:ff:d7:
         07:68:9f:79:28:9c:f2:b0:b1:84:e8:fa:f8:3f:03:11:ca:d4:
         24:65:6e:3c:40:d8:0f:ef:60:70:a4:84:ea:25:88:1d:1d:50:
         7b:5c:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----