Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File:                     1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier:          JSg/HsfWeoZZwcpy9QG9mtKNjTLe35Jl66/z8HRzeXM=
Subject key identifier:   55:D1:66:C0:B3:35:16:D4:A3:A6:7D:44:7E:E4:AF:2C:46:58:3B:0E
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer:       /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial:       01962F06F7EF459807A422C7B6E4190EC0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number:          0438
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: guSsKDXz9/drrLljfuPOB3xaAhl5T9rh6TWBSq02GY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:ef:45:98:07:a4:22:c7:b6:e4:19:0e:c0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=55d166c0b33516d4a3a67d447ee4af2c46583b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:3a:0c:87:0c:0e:84:2a:25:1f:92:63:a2:
                    05:e9:cc:b8:92:05:75:e3:34:e3:53:ae:83:c3:4a:
                    84:a6:78:19:3c:c2:c1:e5:bb:6b:39:8a:29:b8:71:
                    79:3f:f8:fc:b5:a1:df:4d:16:56:5e:7f:25:3a:73:
                    d7:53:e4:56:f3:49:04:6b:24:c3:73:46:22:ad:24:
                    db:c7:05:53:54:38:5b:6d:00:01:90:57:e6:ce:25:
                    ac:31:06:63:03:ad:40:a5:3c:6a:de:b9:a4:80:03:
                    45:3a:43:30:4f:2c:8e:02:6b:3e:49:39:13:a0:86:
                    16:ba:3d:29:44:8b:aa:87:6b:6d:05:6c:ef:bc:3d:
                    72:32:82:17:d2:da:55:65:9a:98:fe:eb:f4:f4:5a:
                    2b:36:33:ef:4a:39:dc:a4:68:87:f0:e6:e6:a3:5a:
                    ce:4f:e3:95:67:48:30:7b:3a:38:94:c0:fd:95:fe:
                    00:ed:8c:f3:a3:90:c9:b0:a2:1c:50:4a:41:52:a5:
                    01:f6:05:b3:0b:68:ca:7a:57:54:57:d0:77:05:ec:
                    a0:d3:bf:c8:9a:bf:0b:b5:a5:0e:57:31:16:2b:33:
                    7a:ce:f1:92:9c:c3:96:76:9c:31:97:6c:a9:a7:29:
                    ed:3c:5e:a5:06:89:68:44:68:55:26:e5:d2:72:3d:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:66:C0:B3:35:16:D4:A3:A6:7D:44:7E:E4:AF:2C:46:58:3B:0E
            X509v3 Authority Key Identifier:
                keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:a6:21:01:22:54:55:49:a6:4e:11:8e:72:2c:b8:3b:73:
         f1:6e:cb:2e:8d:13:79:6a:f2:62:f6:66:95:c7:66:7e:55:d0:
         55:31:8d:04:73:ee:e0:21:d7:e8:f3:71:21:b4:ba:80:86:8f:
         a9:22:75:1e:f6:72:0d:32:0b:00:08:8d:ad:8b:05:46:a2:cf:
         ab:66:8e:35:11:25:2d:e6:56:3f:de:a0:56:0e:4b:49:ae:e1:
         c3:36:f6:26:d9:05:10:70:80:77:57:87:e3:70:9f:9b:f5:55:
         88:b7:45:3c:03:2a:77:02:f7:a5:7d:6d:11:f4:92:f6:19:5c:
         5e:48:e7:67:42:b0:76:e0:4c:9f:25:c8:62:7b:10:35:12:c4:
         0b:58:40:8c:39:06:74:32:c9:89:17:79:89:9d:95:13:83:60:
         57:e8:cf:94:6d:ce:b8:1d:e6:44:75:af:00:de:65:c1:aa:a8:
         d4:f3:de:27:13:f6:0b:0e:35:55:f1:d1:05:b9:08:0d:4f:16:
         73:d6:14:de:64:44:60:02:c1:98:56:05:5f:97:6c:ad:f6:04:
         b1:82:5a:05:43:9d:92:57:95:ab:42:73:3d:c1:ba:44:6f:f7:
         8d:b5:5c:00:12:6d:e0:b6:ed:85:7b:78:8c:14:43:9a:44:b6:
         bc:5e:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----