Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File:                     ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier:          1b5ZkrmoafUHXf5JX2oypJqrmtkhBFIjUNGZISvbc0w=
Subject key identifier:   CF:09:B7:65:31:FB:3F:60:E5:6F:99:39:2A:DB:B9:F2:D5:8D:2D:65
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer:       /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial:       01962E98888B807491906E0012E8B203B289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number:          0C80
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: PiUIit7NvBgV4C7FJuMz0nNi907Fwcm0f+9LZKGZZyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:8b:80:74:91:90:6e:00:12:e8:b2:03:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=cf09b76531fb3f60e56f99392adbb9f2d58d2d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:ba:37:17:53:56:7a:67:b3:a0:38:5a:ec:
                    a0:94:a0:56:2c:03:51:b9:a9:71:5c:45:11:42:de:
                    e5:e2:07:f9:f8:fa:a8:fa:60:0e:5d:57:23:a5:fa:
                    6f:d0:93:12:4f:78:69:f5:2b:ba:55:b8:2f:d4:fb:
                    ac:76:91:1e:49:af:7f:5f:5e:35:7f:30:66:63:19:
                    b1:0c:ec:88:13:14:f7:05:09:7e:2a:84:d7:2f:94:
                    92:03:17:fb:94:b3:be:6f:8e:b3:2b:14:11:b1:19:
                    1d:cc:9b:bf:c3:ac:ae:9c:54:e6:84:77:b3:a0:c7:
                    bb:13:7d:41:0f:d7:39:fb:82:dc:e8:05:73:f1:52:
                    d1:75:61:12:c8:26:41:19:13:1d:6c:ea:b3:bb:34:
                    57:82:b3:c4:28:f9:59:f1:35:2b:aa:55:b0:03:01:
                    80:2e:9a:e2:a0:12:43:7c:ec:ef:23:45:d2:ca:ee:
                    f2:38:b6:9d:c5:61:3b:b5:a6:03:fe:e5:85:80:a4:
                    ec:60:8c:25:ba:a5:26:38:1b:c8:b2:95:cb:0b:91:
                    bb:f7:2f:50:a6:7e:43:4b:25:7a:11:a6:9d:73:70:
                    1c:d5:ff:9b:40:16:88:48:a2:77:a2:f2:27:64:0c:
                    5b:6b:03:e3:be:7c:43:cb:7a:cc:36:f3:83:7a:63:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:B7:65:31:FB:3F:60:E5:6F:99:39:2A:DB:B9:F2:D5:8D:2D:65
            X509v3 Authority Key Identifier:
                keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:29:db:46:df:22:93:50:46:3d:02:8c:57:32:0b:68:3d:
         d2:5d:71:d7:3a:37:fc:30:1c:12:e9:8a:3e:90:b0:61:84:72:
         e8:11:2a:36:81:46:5e:cf:d3:da:7f:66:dc:07:c8:e9:f2:48:
         24:be:5b:e4:0a:e0:e3:bb:b9:d1:f3:bd:9d:8b:5f:ee:8c:36:
         00:d6:85:ca:6b:cb:55:da:6f:54:8b:4b:ec:5e:22:5c:ff:a3:
         fe:b0:b8:8e:0f:f2:aa:77:ea:5c:5f:9f:d1:8f:95:d0:3d:14:
         2e:34:73:b3:ea:70:7d:8d:7c:25:dc:44:b1:c4:a3:88:a3:6a:
         19:40:ae:5a:89:a3:61:42:10:c7:ea:e7:92:98:57:9a:08:ce:
         8c:e6:d8:75:30:49:87:40:7b:56:42:24:e6:31:6f:1e:4e:1f:
         02:d1:0f:80:9e:18:a7:34:d1:28:ca:d8:b0:c6:94:6a:73:6e:
         0d:d9:df:3c:61:d1:94:18:9a:6a:cf:de:98:97:6a:77:a8:98:
         30:7a:39:91:e0:c7:5e:72:1d:15:5e:92:dc:39:4d:fd:32:d0:
         31:91:97:e5:50:1d:1e:ab:ed:73:ce:99:b4:6d:89:b3:3e:2f:
         85:0b:bc:29:80:a8:b2:60:be:e6:83:dd:a1:8d:54:0b:61:10:
         7c:e9:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----