Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          IdlX5UfeZkPgyGFc4zDFp53mb9o8EbKEf6EVPwr7Wjk=
Subject key identifier:   01:CA:30:85:16:5D:3B:31:EF:D3:33:8B:DA:69:8D:CF:85:A2:29:75
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       01962DF3E269DE433EC788480127E01A87B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          1009
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: 0tRfxze3QzuSovkHqZ3EfJkteUMiwveNfKEwZcNYbGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:69:de:43:3e:c7:88:48:01:27:e0:1a:87:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=01ca3085165d3b31efd3338bda698dcf85a22975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:ad:81:d7:1e:89:20:6f:56:ab:75:74:99:
                    06:32:72:ed:22:ca:03:6e:33:7a:84:c6:cf:93:3d:
                    16:e9:94:fd:d3:7d:01:8d:a4:09:53:37:91:ab:5c:
                    3a:cd:d3:a9:e5:3f:e4:a2:fc:9f:c5:1c:d1:73:0a:
                    ce:9b:0e:c0:fa:2c:20:3d:98:68:2f:18:6c:1e:ad:
                    11:18:db:d5:b1:9c:e8:ee:26:5b:b5:ab:db:5c:d5:
                    73:41:7c:ba:be:7b:34:ec:de:40:f9:cf:34:72:2f:
                    63:37:9f:b1:5a:ca:f5:30:a7:41:8e:8c:0d:0c:cf:
                    45:86:a9:ac:13:20:d3:1c:b3:52:3b:00:a6:0d:65:
                    f1:0b:e1:e6:43:14:6c:45:c9:f7:07:72:11:31:8c:
                    b3:c2:ea:d4:65:38:48:d9:8c:88:54:b6:18:34:0e:
                    ec:93:96:25:48:88:68:d4:2f:40:ee:0c:8f:a7:ad:
                    d8:57:f5:b5:11:87:6c:9c:9f:71:d4:be:0b:79:27:
                    35:ef:e6:07:11:7e:e4:15:1b:d1:87:7f:8d:19:11:
                    b4:c4:0d:a2:ae:85:38:4b:c4:83:28:2a:c9:5f:8f:
                    e4:4d:cc:94:a2:6c:4b:91:3e:d8:71:fe:63:78:1f:
                    38:28:0f:ee:58:df:89:d2:10:0c:b9:86:1c:2c:0a:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:30:85:16:5D:3B:31:EF:D3:33:8B:DA:69:8D:CF:85:A2:29:75
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:43:d9:3d:1e:f7:01:ba:6a:dd:e7:32:4f:9b:27:c7:58:
         75:c5:39:0a:69:10:3c:6a:c8:74:8e:88:b5:93:39:4b:a3:f8:
         ff:c6:ad:b8:32:61:e1:46:81:af:32:65:0e:b3:7b:24:d9:42:
         22:65:13:7e:0b:9b:92:28:8c:b0:bf:cc:6f:a3:22:44:11:dd:
         f6:46:b1:03:19:b7:90:f9:4a:1a:8a:8e:d5:b3:e6:8d:f8:50:
         11:b8:ea:c8:67:62:68:a8:91:02:bc:f8:b2:0c:03:c0:ce:f7:
         4e:a1:96:d5:72:1f:b7:61:bf:99:1a:18:15:49:30:99:83:ab:
         c3:1d:48:46:d0:18:12:82:1c:e7:bc:81:4d:7a:9b:ab:aa:7f:
         ee:74:52:f9:c0:07:1a:08:9c:ae:6c:12:ab:5a:e6:eb:2d:7c:
         d6:ea:34:3f:98:11:8e:87:03:97:0e:02:2c:61:b6:6b:b0:ec:
         64:d0:b2:ab:83:7e:85:76:f9:a3:73:bb:4b:4d:c1:1c:9a:fe:
         f3:0e:30:01:ee:2a:1b:ed:54:5a:8f:f5:89:b9:c8:3a:91:1f:
         3b:99:23:09:75:ab:3c:19:be:98:e9:23:c3:e0:4c:bb:d9:f5:
         ce:94:f9:d8:d6:23:66:82:9b:9a:d8:35:0b:6b:e9:a0:d6:df:
         34:31:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----