Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File:                     axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier:          EOOz6I+etpZCoyg1lsjeRLGGRYVPLQ2Dm7pN9vpMuRc=
Subject key identifier:   CB:10:E0:7C:FD:92:70:94:B6:42:2C:D5:70:02:98:F7:21:50:40:BE
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer:       /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial:       01962E991B57F6777570CAB27096E66226A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: o37hyCtA4GSVS5ijHVPHdkzYplQzCamP3Ae7oNRVuoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:57:f6:77:75:70:ca:b2:70:96:e6:62:26:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=cb10e07cfd927094b6422cd5700298f7215040be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:a8:38:ed:57:4c:c7:59:57:7a:e6:46:9d:
                    09:7f:34:e4:48:62:57:5f:57:aa:63:74:88:2f:d7:
                    66:98:50:ff:6f:90:6e:8d:9a:67:88:e1:e6:41:f0:
                    38:fd:6d:64:a4:72:27:0d:dd:2e:c1:46:49:41:5a:
                    36:07:7c:44:c9:0b:50:23:2e:b1:76:a9:cd:61:88:
                    2e:88:72:62:56:37:91:ff:8d:88:f2:5a:17:13:a7:
                    4e:6c:da:4e:e9:44:54:ee:c6:a4:96:34:11:42:8e:
                    fd:20:f7:3c:fe:60:d3:48:d7:0c:a4:9e:54:23:98:
                    1a:6a:d3:a6:fa:eb:d3:a1:59:0f:ad:34:c9:25:73:
                    b1:6e:a6:de:62:cd:a0:78:9b:a5:27:03:d4:8b:f2:
                    7d:3a:d7:3e:2a:a2:de:2c:a6:c0:9a:2a:0d:3f:6a:
                    70:e9:10:08:71:2f:fa:87:d9:f8:76:cf:b3:d5:48:
                    d6:fa:5d:c3:3c:ff:e5:0b:20:e2:1f:32:6f:de:14:
                    2c:fd:cd:98:9b:96:4f:ac:d4:64:6a:d5:95:da:60:
                    c7:17:91:e5:97:ab:aa:26:ea:ef:e1:da:50:4c:fa:
                    ee:3e:14:52:0a:51:d7:27:1b:9c:7b:5b:98:78:4c:
                    3f:6c:88:b6:d6:64:bd:76:0c:b9:86:71:9a:4b:d9:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:E0:7C:FD:92:70:94:B6:42:2C:D5:70:02:98:F7:21:50:40:BE
            X509v3 Authority Key Identifier:
                keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:93:10:89:a6:e6:4e:7f:2b:7e:97:1c:10:99:b6:c5:cd:
         4d:a7:58:e5:7d:40:68:43:18:44:2e:56:9c:75:63:7b:fc:b7:
         c0:d4:5f:80:b3:67:3d:f0:43:b1:b3:d7:21:8f:3d:36:74:2e:
         71:27:8d:c5:6b:94:07:de:65:0e:ea:79:06:a4:09:da:31:8d:
         cd:43:b6:a0:96:1c:c9:71:9f:e2:ac:fb:ff:9f:f9:c2:c1:27:
         14:35:e6:51:4b:f3:e7:a1:45:d2:b1:a5:91:2b:92:dd:f4:f5:
         41:f9:50:05:7f:13:89:bf:c6:49:68:25:b8:61:3c:b1:74:4c:
         d1:f5:fd:ff:00:e2:fd:11:2c:68:c3:42:3e:41:f5:28:bf:b2:
         3f:fe:8d:d1:cb:05:90:42:2f:80:56:24:57:d9:69:4b:21:ed:
         b3:a8:a7:ff:b3:fd:b1:b7:bf:84:0b:37:32:b6:42:87:90:25:
         99:f4:e1:75:51:81:cf:20:03:35:47:6b:e1:1f:7e:fc:2b:ef:
         63:db:94:5a:5a:28:6a:cb:bf:c8:9e:6b:b7:13:43:47:d6:32:
         91:ba:fd:7d:7c:c5:65:98:48:8a:4e:7a:e7:eb:e1:37:a5:42:
         65:88:5a:17:0a:52:12:df:a8:ae:36:83:0e:54:bd:9d:d1:7e:
         dc:4c:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----