Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File:                     sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier:          i8N2A/vmeKONqW2UNLzwS3oe+mLl9mMcBLxSp8zIBuM=
Subject key identifier:   10:E9:02:31:B8:E4:81:3B:E5:B4:5F:48:03:E1:1A:33:A2:5F:D9:5C
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer:       /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial:       01962E988D03F11687F3FC8D7575F6B45005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number:          06FF
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: wl+tQ9VjRf950nn7xN9J/Wno0MM3eVe2U8D9oVyZyfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:03:f1:16:87:f3:fc:8d:75:75:f6:b4:50:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=10e90231b8e4813be5b45f4803e11a33a25fd95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:64:3d:2f:ca:25:73:01:ce:2b:49:41:5b:
                    91:98:13:a5:fb:14:92:46:3f:5e:b9:80:be:2c:e5:
                    07:68:56:b2:74:8e:bb:2b:db:4c:11:d7:76:79:4a:
                    15:06:6d:99:66:df:45:73:11:c4:c1:82:cd:54:17:
                    60:90:11:a6:eb:83:ed:a2:40:42:28:31:ed:a0:f6:
                    a4:83:19:57:20:65:a6:b5:c8:e5:d8:25:e3:a4:31:
                    1c:7d:f2:63:94:6f:09:a0:fa:53:b8:fa:e4:83:98:
                    4b:41:48:1b:41:32:cc:b3:9d:39:22:05:ff:31:21:
                    76:d7:39:8e:8d:38:cc:6e:c7:ee:4e:02:42:f5:24:
                    32:eb:78:b1:b2:3d:2f:61:ce:fb:3f:a7:a9:4c:c6:
                    15:f5:80:4e:f7:37:29:6a:5a:76:79:01:be:59:82:
                    01:ff:7e:a9:11:68:25:3d:0c:4d:f0:e6:18:75:f0:
                    69:92:f8:ae:1b:86:40:c1:fb:46:aa:a6:d9:ac:41:
                    5a:72:63:36:84:49:91:4d:b4:c2:b1:cd:2f:9a:9c:
                    6a:8b:57:93:9e:44:75:d1:b2:9c:ea:28:17:92:8e:
                    36:4e:97:24:8a:28:61:ec:65:41:f9:ea:b2:d7:81:
                    e2:e8:80:b6:4b:9e:14:c6:c9:81:aa:1d:86:79:5f:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:02:31:B8:E4:81:3B:E5:B4:5F:48:03:E1:1A:33:A2:5F:D9:5C
            X509v3 Authority Key Identifier:
                keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d7:e7:cf:4f:a3:51:d6:73:b5:90:1a:6a:9b:ab:9a:a9:46:
         53:b1:f6:10:c0:22:30:1e:06:a4:98:d6:8a:80:d7:a7:5b:59:
         cf:7c:28:dd:76:ee:ed:b7:f3:93:ff:17:42:b7:5f:6b:44:d1:
         2f:21:fc:e7:c4:98:5b:ec:5d:6d:43:ed:9e:2f:d8:be:1a:9d:
         e5:23:75:09:80:2f:86:53:0b:92:2c:ed:06:ea:6d:9f:88:bd:
         2f:f4:8d:21:dd:ba:5f:e3:0a:3f:38:bc:04:ac:65:43:7a:3e:
         9b:f9:42:b5:d0:71:9f:11:2d:22:cc:b8:79:88:cd:0e:c7:c9:
         12:db:aa:9f:39:46:a5:cf:db:f6:dd:69:cd:e4:4f:be:a8:29:
         95:cc:4f:ff:dc:67:bf:a3:49:a8:07:53:7c:cb:f5:24:75:81:
         49:4e:b8:72:19:02:05:1c:24:fd:36:42:7c:ea:1e:53:3d:0c:
         95:16:bb:57:34:e4:d0:20:c9:d2:e8:89:6c:12:f9:0e:b0:8d:
         b1:19:09:ab:36:38:26:0b:fc:4f:0a:56:8f:26:71:04:32:e2:
         7f:e7:1b:0c:5a:08:95:f2:f6:dc:8c:8d:5e:dd:25:f7:0a:25:
         db:0e:73:d5:91:86:d8:fe:18:d8:fd:4f:94:72:b1:03:f0:22:
         48:ed:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----