Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File:                     0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier:          bQoi2DRp9Ylg8DmoJ5Lf5lApxNYZbsuBNns/Q+EvdQU=
Subject key identifier:   EA:F4:02:75:3A:79:D4:36:D7:47:86:A2:51:B7:E9:B6:DA:E2:4C:82
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer:       /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial:       01962F066E3EB062662D71E4FDA39B296519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number:          081A
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: W0ovuigaMR7hiPCxxQLSXUYG3Q/9OEfA5pB9egXJnzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6e:3e:b0:62:66:2d:71:e4:fd:a3:9b:29:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=eaf402753a79d436d74786a251b7e9b6dae24c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:0d:60:83:4f:2e:90:5c:62:8f:28:5b:43:
                    62:2d:1d:3c:5b:a6:4e:7f:1d:2c:b3:81:ff:e7:e7:
                    d9:6e:ac:85:05:76:ad:48:06:9f:98:38:b5:93:07:
                    71:be:c8:ba:95:f5:77:1a:a9:70:28:f1:01:45:60:
                    74:d5:2d:b0:86:aa:3a:4a:ba:4c:fc:9c:63:4b:35:
                    b0:5c:27:6d:f7:42:c6:fa:7b:d1:31:d8:20:c3:42:
                    cf:7e:5c:47:7b:b3:f4:6b:4b:fb:89:77:8f:a0:3d:
                    4e:3d:37:00:a1:eb:12:7c:f1:df:d4:b7:fb:83:be:
                    b6:2e:38:66:40:e7:64:77:f8:34:7c:69:e8:3a:3a:
                    67:c2:26:0c:66:4c:b4:4d:83:12:43:05:20:f2:5b:
                    74:0b:c5:02:f3:55:3a:30:bb:b1:21:65:99:fa:aa:
                    63:af:e6:76:02:97:28:84:96:df:62:00:98:fc:c1:
                    7d:3d:31:e3:1e:68:db:3d:12:77:71:f2:00:cb:59:
                    ad:93:11:6a:c2:82:66:57:91:af:ae:06:87:d0:41:
                    db:9d:37:e2:8c:9a:f7:b3:1a:0e:94:bb:f9:77:9f:
                    e5:88:20:e8:e0:ca:74:86:c2:4a:cf:2c:15:ec:80:
                    ad:3b:77:94:c7:60:df:16:94:82:d4:eb:fc:29:6d:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:02:75:3A:79:D4:36:D7:47:86:A2:51:B7:E9:B6:DA:E2:4C:82
            X509v3 Authority Key Identifier:
                keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0b:38:ae:af:71:b3:f0:b3:1a:a9:75:71:4a:bf:6e:a6:d9:
         c7:6b:74:e5:74:04:68:24:a1:e2:6b:b2:2a:09:a5:82:97:d1:
         bd:18:f7:3f:7d:9a:c5:93:51:17:59:f1:47:3e:41:fe:66:dc:
         b3:d8:62:c8:87:c0:eb:2a:c1:6f:65:3d:f3:4c:59:ed:82:55:
         89:d7:16:55:d8:a4:af:b7:5c:04:82:b5:eb:2a:e2:8c:17:c1:
         ae:35:46:ea:54:17:db:c2:a9:29:82:70:73:b8:dd:2a:c2:d3:
         56:b4:eb:57:34:9a:3e:54:42:2d:e4:0b:f2:a3:70:30:d6:19:
         08:2c:94:49:9a:2d:22:2b:62:0a:1b:d0:6f:54:3d:ef:23:55:
         2a:ac:76:31:d5:b8:3c:5b:52:2e:fa:c2:de:21:e9:df:42:39:
         11:35:ac:ab:6b:81:08:56:8f:4e:0a:60:ce:d0:88:42:fe:fe:
         54:69:87:68:02:bf:3b:dc:7c:36:b6:75:ab:4b:2e:ff:2b:e0:
         bd:74:c4:1e:5c:22:43:52:20:8a:f5:87:73:af:d5:74:f8:18:
         a7:6d:56:b0:c0:15:d2:e5:45:b7:dc:2c:58:53:79:09:3e:bd:
         b7:83:97:f3:dc:60:cd:ae:3f:e4:80:b7:6b:f0:1b:b6:8f:de:
         82:b9:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----