Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File:                     l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier:          40rFmDoVjPJB7gEwkMlJNhmQByodtDxChF/ixNHOmt4=
Subject key identifier:   AD:F9:4E:00:14:42:5E:16:5E:9E:BE:54:6C:B2:C6:DA:C0:E6:44:FF
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer:       /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial:       01962E988A518D95EB9A5ADD6AFCA08C5789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: TGUdd52kH7zp5SJhnoOpEctTaKfUUMdwsz3RIbqOtMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8a:51:8d:95:eb:9a:5a:dd:6a:fc:a0:8c:57:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=adf94e0014425e165e9ebe546cb2c6dac0e644ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:f8:16:96:3c:bb:b3:b2:bc:fd:58:b0:06:
                    11:26:c6:6a:5f:31:13:d1:f2:c1:0e:af:24:f9:06:
                    cd:b2:c8:d8:5f:b7:a2:23:b0:a1:f1:a4:6d:4d:1e:
                    11:65:b5:69:47:67:58:c9:81:2d:82:6f:c1:2f:ed:
                    6c:de:68:19:4d:01:f7:7c:5d:0e:d0:74:59:59:79:
                    e4:5e:ee:0f:b7:11:87:e0:c8:b5:bd:ff:84:76:ae:
                    5e:09:3b:ee:d5:05:4a:6f:7c:47:62:33:00:68:79:
                    5f:a2:37:88:52:4a:cf:dc:15:d9:7b:99:ab:7e:4a:
                    16:1e:b3:f5:39:f1:55:fa:86:76:20:e9:36:5b:20:
                    ca:51:45:b1:69:3f:cd:44:57:30:7f:51:05:67:0f:
                    03:56:7e:2e:0e:9b:df:d6:8c:cc:1f:79:85:c2:4d:
                    0a:4d:75:34:bc:f8:96:15:1e:24:51:8e:a0:d2:bf:
                    e4:8e:80:21:82:54:38:10:63:cf:42:48:e4:d8:11:
                    ac:08:93:95:37:3e:fb:78:07:1a:19:3f:da:e0:9f:
                    86:2b:af:64:ad:04:d3:8e:03:33:e6:09:61:db:26:
                    fe:7c:ac:e1:42:02:77:9a:bb:4f:78:6d:14:48:15:
                    50:f9:2d:a5:de:a6:a8:e3:d9:17:6d:2e:43:45:c7:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:4E:00:14:42:5E:16:5E:9E:BE:54:6C:B2:C6:DA:C0:E6:44:FF
            X509v3 Authority Key Identifier:
                keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:36:10:fb:d9:95:c0:7a:b0:9a:dc:1b:bc:6c:bd:d1:18:b4:
         61:c9:a6:88:82:7c:3e:f8:b3:2b:0d:e8:d4:1b:64:7a:c0:f1:
         bf:d4:ad:ef:5e:7c:ae:f5:73:6e:62:f8:a6:11:5e:9c:1b:6b:
         fa:12:21:b3:6b:9e:07:45:2e:c3:b9:cb:d2:a0:9f:95:eb:8e:
         ed:1f:5b:24:39:6b:22:3e:50:68:c7:f3:32:64:71:14:6b:fa:
         70:1f:bb:26:98:d8:11:2b:10:41:db:e2:1a:b0:9b:e8:55:0d:
         b0:c8:7e:3e:72:c4:9f:f0:20:28:42:a8:7c:91:87:64:b4:a8:
         bd:b9:fd:31:55:97:1e:33:7d:e7:e9:df:e4:4c:ae:e5:4b:7a:
         be:23:d9:d6:1b:16:19:66:83:0d:4b:c4:ba:62:5e:f6:aa:10:
         cc:d4:db:92:ab:f3:48:8c:a8:ba:20:15:6d:54:d2:76:ae:51:
         7d:1d:e9:0f:ba:ac:ce:2a:b6:a6:d2:05:a5:a4:81:6a:3c:9c:
         62:28:c1:1f:20:29:c2:71:9c:2b:d4:67:6c:ce:86:b7:a4:9a:
         4c:35:a3:69:c9:b0:34:2f:20:b9:27:6d:ca:0d:53:1e:13:fc:
         cb:84:32:f6:94:a3:23:d0:bc:a2:94:b4:dd:27:19:36:6e:bb:
         b9:01:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----