Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File:                     DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier:          gl0gUr6keYxr5WV+CZnk/MDCCoyLCUypIgWzpLTf560=
Subject key identifier:   F9:30:63:81:65:75:EF:BB:0A:38:68:73:3C:3E:2C:9B:D3:99:C2:B4
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer:       /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial:       01962E9863055C5AB1BCBD851368E293ED48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number:          06D6
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: 1cmMDNtvqls9gafbVcWGvpuNctgDBXTd2f0u6yLRFhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:05:5c:5a:b1:bc:bd:85:13:68:e2:93:ed:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=f93063816575efbb0a3868733c3e2c9bd399c2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:7c:68:18:01:6a:80:4f:bb:7a:2a:3f:3b:
                    bd:7b:a8:ba:7c:64:d9:fd:46:51:06:2b:3d:83:56:
                    7a:f5:c2:1e:bf:8a:e6:55:48:1d:c7:c0:43:df:3f:
                    69:18:4b:e8:11:ad:13:71:60:d9:0c:52:79:03:72:
                    6c:c9:81:75:ef:e2:e5:de:0f:fe:6d:30:7a:6d:91:
                    1e:c7:90:13:35:75:94:8b:5f:5f:b4:ce:0e:75:25:
                    16:be:7f:f0:52:ff:84:d0:e3:98:f1:6a:5d:9d:18:
                    0e:1a:a3:e1:f8:11:ce:0d:c6:74:41:ce:da:19:9e:
                    81:ae:94:b0:c7:55:1b:b9:fc:8d:8d:2d:84:27:ae:
                    cf:14:f3:b8:4d:1b:6e:1a:61:5e:20:d4:cd:c5:67:
                    9d:06:00:a1:56:53:6c:31:72:77:b3:f9:82:b8:a7:
                    89:17:a9:46:95:49:18:53:16:d3:89:1e:ca:ce:f7:
                    67:e8:42:e4:99:e1:3d:ca:f8:b1:03:ef:73:c8:25:
                    3d:0e:93:6b:4f:0e:16:e3:a6:0c:b1:ec:f0:a5:23:
                    c5:af:23:a2:5d:df:09:c8:27:11:c7:b8:de:e1:48:
                    74:3d:5e:11:c9:c4:fc:7d:43:07:dc:04:7f:72:c1:
                    83:69:98:ec:41:45:07:14:d6:93:3b:1b:04:3d:d2:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:63:81:65:75:EF:BB:0A:38:68:73:3C:3E:2C:9B:D3:99:C2:B4
            X509v3 Authority Key Identifier:
                keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a3:0d:6c:d2:75:f9:1d:2e:bd:a8:a8:ce:e9:56:3d:30:d3:
         25:f1:23:d2:1a:07:ef:ac:be:32:bd:f3:68:99:80:fe:18:7c:
         46:d4:82:56:7c:06:cd:d4:e8:95:6e:2a:8d:57:09:c8:47:5a:
         66:32:75:6e:4e:35:88:b8:d4:d7:ac:c0:87:f6:ea:3d:90:2f:
         d2:e2:7f:a1:59:f0:9b:3a:a1:ef:38:89:59:1d:20:f9:a6:91:
         84:10:5c:71:4c:46:b0:54:cc:50:8d:71:ea:e7:77:55:bb:66:
         ab:42:d1:4b:0e:d4:3b:f9:25:21:0b:34:6f:3d:46:1c:b2:b6:
         64:79:60:8e:8f:83:2f:80:55:1e:fa:bf:c4:5e:c5:e0:1c:87:
         05:50:d5:e5:4c:36:f0:46:d5:66:44:bb:2f:a9:97:1f:0b:f0:
         08:a1:35:47:19:5e:f1:85:61:4d:06:64:91:5d:9a:e9:fb:cd:
         9b:94:4c:43:df:cf:af:53:54:b4:34:a3:3d:cb:50:6a:d9:a2:
         a6:72:56:50:cb:30:ac:7a:66:0c:89:d8:5b:81:64:68:76:d1:
         26:ef:30:88:62:2d:0b:39:58:d3:5a:54:ae:6e:ac:a7:6e:35:
         2d:11:c1:13:04:5e:a2:2f:07:8f:4f:95:79:b1:36:05:83:e2:
         a6:08:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----