Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File:                     SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier:          +zWzSNiCyy4dLuYl3lbqFSHSIAKAjrdy513Elt4y30M=
Subject key identifier:   0B:B7:BC:2D:02:FA:44:51:59:EE:FC:44:B7:C9:A8:D5:57:A9:93:68
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer:       /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial:       01962F7426EB31E56D5A1164F9ED29D5E067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number:          0BE5
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: Rx+TuxTX7bK9cxdguWBWufin1MFTKHIHshmyL+bF+3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:eb:31:e5:6d:5a:11:64:f9:ed:29:d5:e0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=0bb7bc2d02fa445159eefc44b7c9a8d557a99368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:9a:97:8f:0e:c1:0b:57:e7:e2:c2:12:66:
                    b9:dd:1e:90:59:33:e9:34:64:1d:ac:fd:5c:24:13:
                    c7:4b:c7:82:72:13:48:03:53:56:b2:ea:35:ea:b7:
                    0f:6c:e8:fa:37:17:81:71:d1:f9:a0:81:b0:96:c0:
                    40:27:bf:a6:91:fa:9d:56:c2:85:c6:34:58:c4:4b:
                    49:e0:a3:11:34:65:7b:84:a1:73:ef:96:2e:a6:fa:
                    4f:9e:a7:10:bf:61:a0:b5:be:e9:07:61:ea:db:97:
                    46:a0:08:ff:14:5c:e7:a8:d3:5b:79:41:3e:9f:66:
                    70:51:63:e3:9f:96:94:a5:58:99:3b:92:83:11:09:
                    b3:c3:e8:48:c3:59:16:ec:fa:11:a8:1d:17:c5:69:
                    0d:b7:46:51:e5:25:64:a1:de:80:06:74:40:b5:1d:
                    58:1f:b4:31:73:72:87:4f:66:2c:04:87:c3:73:e6:
                    a4:de:78:b7:e5:e8:27:0f:26:96:03:01:46:f9:d3:
                    12:c2:74:c8:de:03:e0:c2:17:62:58:a3:fd:8c:c5:
                    d4:6e:49:64:cd:12:15:79:6b:f6:2f:c2:74:70:a0:
                    30:ec:9d:cc:56:7f:40:4c:ec:56:2b:7b:5f:9c:41:
                    21:75:2f:b4:b9:71:1f:77:19:56:c8:c6:87:74:b8:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:BC:2D:02:FA:44:51:59:EE:FC:44:B7:C9:A8:D5:57:A9:93:68
            X509v3 Authority Key Identifier:
                keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:45:86:8e:3d:b4:ac:62:26:3b:4f:c9:6b:87:38:ad:d0:
         a1:f9:62:cd:42:8e:b0:af:03:27:bf:39:ee:f9:6e:19:a9:88:
         a4:b7:0d:e9:30:8c:29:c1:2e:db:00:7a:28:ee:cf:28:23:70:
         6a:86:81:62:fe:bc:81:97:cf:ee:32:9b:da:8f:7b:fb:c6:c9:
         d4:b0:4d:2f:77:dd:b9:e9:e3:0d:4b:f7:d5:ce:2d:c6:bb:e3:
         ee:35:5c:d1:f3:12:9c:38:1b:4f:bc:96:3c:50:46:f8:26:6e:
         6c:2a:1d:86:00:2d:91:ef:80:5b:a4:52:ac:f6:dc:9c:16:ac:
         f9:a4:e3:35:ae:77:b1:34:08:38:ae:94:f4:ec:12:d7:cc:83:
         78:b4:65:77:72:70:b2:7b:83:00:78:1d:e6:7c:e2:eb:af:f0:
         54:89:a7:74:a7:59:04:06:f4:7f:39:55:28:8d:a8:e7:ba:22:
         93:5f:a5:21:d7:ab:01:11:03:c7:a0:7d:eb:db:f3:54:1e:48:
         d1:9f:f2:03:9f:73:3c:cf:86:0a:fc:0a:c9:0a:93:8a:ed:8c:
         22:ec:55:06:27:26:90:30:c4:e1:50:73:77:5c:a8:f2:5a:1e:
         0f:01:9c:8a:2b:84:7e:6e:09:01:82:19:70:1c:4a:52:64:56:
         c1:36:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----