Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File:                     cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier:          FN1DTWLBlv8qI3EeH4QL2ibq1PglXOtPTapUMlR9Gj4=
Subject key identifier:   30:FC:AA:3D:CE:20:85:EB:2B:DC:EC:2A:66:10:14:A8:BB:45:C0:06
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer:       /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial:       01962E61DF198742FE362E9993195F9B3F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number:          BE
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: 1IndU3R3KIGVPASCdKOski+qz3wb+htTLFRggi3k9U8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:19:87:42:fe:36:2e:99:93:19:5f:9b:3f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=30fcaa3dce2085eb2bdcec2a661014a8bb45c006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:09:e9:99:b7:1f:19:2d:c5:de:be:cc:83:
                    c1:72:bb:a8:cb:66:cb:e6:2d:b3:15:a3:ea:80:10:
                    d4:0c:54:7b:cb:3d:2a:e8:ce:bc:1e:bb:f6:9b:ea:
                    a1:cb:b4:df:4f:a1:0a:b6:c1:3a:26:c1:70:a1:09:
                    39:5d:a1:f2:ac:cc:be:0c:3c:f9:83:d3:70:52:df:
                    d7:7b:67:28:8a:47:bf:7b:fa:58:3a:8d:50:db:e2:
                    0b:9b:7c:2d:f2:78:5d:6e:28:be:c5:0c:17:80:31:
                    2b:51:77:d4:b4:e9:91:e3:00:b8:09:7a:5a:1c:92:
                    aa:ca:4d:a4:93:a0:3c:39:f5:a8:88:86:af:ed:7a:
                    dc:7b:9d:6b:e7:eb:ec:f4:64:13:fd:d2:f4:ca:c0:
                    69:0d:1a:69:d5:b5:18:e4:cf:f8:48:7f:92:a6:d4:
                    48:e4:78:df:79:71:4a:b4:8b:50:48:56:b0:09:cc:
                    09:6b:6b:4c:92:cc:ae:0c:5e:1c:47:a3:3b:05:66:
                    e1:d4:40:5b:e8:09:ea:ed:9e:54:7a:6a:97:fd:6b:
                    1b:44:0d:22:b8:7e:fb:8f:24:a5:a3:d4:8c:0a:19:
                    ab:63:0e:c5:47:05:3c:aa:e2:a0:9f:cb:e4:88:8a:
                    03:c4:22:0a:1b:8f:51:35:a3:83:c3:f0:42:1a:32:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:AA:3D:CE:20:85:EB:2B:DC:EC:2A:66:10:14:A8:BB:45:C0:06
            X509v3 Authority Key Identifier:
                keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c1:f3:8e:92:c3:56:02:1a:90:51:09:67:6e:b1:84:2d:47:
         aa:6b:62:26:dc:2a:79:ec:2f:64:5e:80:d8:ad:f6:ae:e5:06:
         84:f7:fa:2e:db:3d:26:0c:f9:b1:e9:d8:f7:98:56:15:89:4c:
         39:f1:29:79:69:16:00:fc:63:e0:6e:71:58:5d:4d:71:68:bb:
         0a:1e:33:6d:04:cd:88:08:09:6b:e3:6f:6e:94:16:3e:14:07:
         d8:72:ca:77:e1:0a:65:84:c2:0a:d3:9f:8b:9a:5b:1c:13:6b:
         5e:09:8f:e0:25:16:9f:42:bb:fc:dd:60:f4:c9:1c:48:0a:3a:
         7f:d5:fc:31:9d:a5:e2:0e:be:54:1d:38:a7:24:d5:2b:b9:3f:
         1b:c7:a5:ef:5b:7c:ec:06:f9:a2:98:42:e1:80:92:39:8d:14:
         b2:07:0b:91:74:09:16:9c:37:a7:39:f9:f9:0a:28:e1:c9:79:
         d1:9d:e7:ce:6d:b9:24:f9:53:2e:5f:0d:9b:b0:9d:d6:93:93:
         96:d7:dc:8f:cb:60:44:47:77:40:48:f0:32:82:eb:44:d1:b5:
         2c:99:c0:df:ce:ff:c9:8d:0b:09:0c:85:38:3f:57:db:e7:73:
         c2:90:40:0b:a4:62:aa:b7:c5:98:bf:21:47:23:47:97:ef:65:
         32:71:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----