Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File:                     d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier:          qgQx9vZ/Mi4OM6aaYhG+SSNaJ1MdgLz4nq8oMslNThI=
Subject key identifier:   D4:32:00:35:C6:EB:9E:03:A5:F9:D8:AB:4D:21:A6:47:25:70:39:AC
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer:       /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial:       01962F74A32F0B6F40888DD3DF7DD3AFD268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number:          118F
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: 4jJjKWWRj3F1djI2jXSNUO4PVlsXQu9q6dSaOioPasg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:2f:0b:6f:40:88:8d:d3:df:7d:d3:af:d2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=d4320035c6eb9e03a5f9d8ab4d21a647257039ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:10:59:a6:59:f6:3d:a6:68:e0:2d:53:3f:
                    bf:b7:9b:b6:cb:ab:94:41:a2:9b:86:8c:a5:95:f2:
                    e1:a9:c6:ec:0b:b6:24:1b:20:53:cc:09:00:7b:18:
                    5e:77:d9:79:5e:0d:d3:65:8a:19:70:85:74:e1:01:
                    e9:ef:f2:3b:58:fe:87:25:f4:e9:4a:38:57:d1:e7:
                    bd:b8:a3:64:47:38:3e:dc:14:db:25:aa:f2:0c:40:
                    01:30:63:f5:d3:da:a3:e8:f7:c4:ff:68:cd:5d:cb:
                    38:9b:3f:1c:08:7f:72:b3:73:60:31:c2:33:59:3a:
                    23:d1:93:c8:56:3c:5b:bb:8f:a3:f2:09:ee:b5:04:
                    25:d7:16:bd:f8:58:f3:48:67:5d:62:67:6d:56:5f:
                    29:5b:f9:56:81:93:91:ce:f8:2e:dd:12:b8:37:6d:
                    90:af:6b:a1:e9:45:3a:0c:2d:3d:4b:62:36:25:52:
                    8e:e5:91:d3:ec:02:eb:a3:70:82:9a:19:b0:87:80:
                    5f:1d:17:aa:46:45:5c:e1:76:21:db:01:fe:f4:aa:
                    36:62:a8:a2:55:d6:d8:bb:ee:15:d9:da:59:06:16:
                    13:2b:7a:65:b9:b9:fb:b8:3b:58:88:a1:f9:2a:ad:
                    97:e8:e6:dd:54:66:69:71:83:5e:b9:aa:79:28:ac:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:32:00:35:C6:EB:9E:03:A5:F9:D8:AB:4D:21:A6:47:25:70:39:AC
            X509v3 Authority Key Identifier:
                keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:73:d2:51:36:a6:e5:9a:16:b1:07:d1:8b:f3:08:c9:0c:61:
         e0:eb:ad:ba:15:e8:2d:42:99:78:f6:20:1b:5d:2c:db:63:61:
         d6:4b:c0:aa:58:c8:10:9e:c9:0b:f8:56:79:f7:b5:14:77:8b:
         33:1e:97:bc:37:42:23:51:78:6a:cb:5e:8a:10:14:a8:5f:32:
         7d:c3:c9:58:97:e3:6e:d5:71:66:9e:0c:f5:32:17:fc:45:5a:
         3b:f2:ab:6e:92:4b:d9:32:1a:9a:0b:ec:45:11:6a:71:82:83:
         44:41:35:fd:40:79:8c:69:64:9c:bd:96:b9:20:6e:b9:e4:c2:
         5d:9d:fc:b7:04:14:44:89:a8:37:40:89:da:b3:d4:20:d6:8f:
         91:9a:3c:3f:3c:73:42:31:cd:54:9a:d8:69:3f:ed:9d:5b:8f:
         90:4c:8c:bd:9c:67:10:07:6e:44:c7:0c:69:10:95:aa:eb:74:
         ff:d6:22:59:20:d8:01:f3:66:23:88:c1:04:e2:66:a3:7e:0b:
         ed:29:59:49:a5:71:8a:20:15:08:bb:a5:c9:59:d7:8a:01:ff:
         9f:66:86:d3:de:7f:87:3e:77:60:f2:51:da:a8:39:28:d2:12:
         0e:f2:bf:7f:d6:43:60:ef:d1:43:a9:59:ea:4d:f2:80:b3:55:
         62:25:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----