Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File:                     9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier:          a5BPU+V5Sz1h5RIs0F/o/cOBZqxi5i4SxWtG0AiInZM=
Subject key identifier:   26:8A:F4:99:DD:4E:D9:E3:FF:35:6B:73:0B:E2:AA:79:66:C6:C1:A6
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer:       /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial:       01962F0722B1937E4F2E57881AFF52A9B761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number:          1257
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: BATX7kGCy/U+b0ObVmMeQVi6fUT5NUCGVUkn+Kv48Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:b1:93:7e:4f:2e:57:88:1a:ff:52:a9:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=268af499dd4ed9e3ff356b730be2aa7966c6c1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:0b:9f:a9:f1:6f:13:7b:15:75:e4:9c:e6:
                    9b:fe:58:32:03:2f:4f:11:c9:cf:34:9c:47:fd:ac:
                    06:2d:1f:83:10:aa:64:03:cb:ee:ee:e4:4e:19:2c:
                    17:ca:96:9d:37:aa:1b:67:23:c9:b7:f7:c8:e9:a1:
                    f3:51:b6:eb:50:3c:a9:10:33:5b:d1:54:b3:e1:77:
                    d2:33:00:52:9e:8f:2e:a8:45:15:50:2d:df:7a:4b:
                    44:af:f2:31:eb:9e:79:14:73:46:62:57:ce:b5:bd:
                    0f:8a:dc:0a:db:d2:1f:e9:02:d0:f8:15:d4:8a:6e:
                    ed:e7:d5:73:03:dc:ee:78:f7:d3:af:d7:1f:97:5d:
                    9d:1e:15:18:60:62:05:42:e9:88:6e:0d:d7:4d:92:
                    7b:dd:ce:47:6a:ff:c6:79:e6:ec:e4:3f:af:69:2a:
                    3e:f1:8e:6e:6d:8e:19:f3:33:c4:c3:d7:59:b1:85:
                    a4:59:f9:7a:73:40:b9:5a:25:ed:9d:37:32:f6:1b:
                    5f:d5:39:de:49:ca:bc:4e:e5:1f:e1:c3:96:2b:1a:
                    d0:c2:a1:bc:b8:8c:07:b6:3a:1f:89:9b:67:8e:f1:
                    cb:c7:8b:c0:9c:26:00:04:ae:40:31:d1:f2:23:c7:
                    7b:77:e1:af:df:b7:42:42:db:ef:07:b2:7f:bd:f3:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:F4:99:DD:4E:D9:E3:FF:35:6B:73:0B:E2:AA:79:66:C6:C1:A6
            X509v3 Authority Key Identifier:
                keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:0f:45:c5:57:b9:8e:4e:78:2b:fb:f2:72:b5:30:13:c4:
         44:6e:4e:a7:e5:cd:f1:28:a9:5c:58:d4:bc:d3:62:0c:17:d3:
         b5:47:85:2d:05:b3:af:8f:eb:96:8e:60:22:12:62:6b:ae:14:
         97:79:b3:17:d0:8c:01:20:e6:f3:be:e2:2d:be:43:f9:2e:c3:
         18:e3:ab:5b:db:d9:f7:cd:4f:9e:c3:20:c6:df:39:82:24:1a:
         ad:46:db:cf:06:ba:9a:7a:b0:d8:4f:51:6e:10:7d:9f:cc:36:
         e4:4a:eb:38:0d:e5:4a:cb:53:a1:9d:41:f9:07:ff:4b:63:eb:
         5e:f2:a2:22:b2:e1:27:9f:fd:59:46:f2:90:9c:69:8c:2e:f4:
         26:17:94:70:e1:3d:f6:f5:33:59:20:d9:8f:33:c1:77:11:6d:
         9a:df:02:d9:16:95:70:39:93:45:5d:42:07:49:d7:46:9c:b9:
         3d:e5:ea:4a:de:e4:f2:27:0a:cb:eb:09:19:15:ff:8a:62:dd:
         f0:17:f7:07:31:63:cb:3a:3b:75:89:d8:0b:f1:ec:39:24:62:
         99:9d:8d:04:c5:b7:a0:a3:79:39:1a:bc:e6:22:ad:20:83:25:
         a8:db:54:9e:ef:00:c3:89:4e:8b:a0:56:ce:7e:5c:bb:28:57:
         bd:8c:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----