Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File:                     t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier:          oMEd1UBEBSWVBL3ME2bFdq3Uf/pRhDnU2uxLd49hiRY=
Subject key identifier:   06:59:4C:A4:D7:6A:01:B1:E5:6B:F5:73:BF:57:C3:54:60:28:00:71
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer:       /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial:       01962ECFA5862589D87FFFCAF568E4D44714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number:          049F
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: VIbmxGXvBRZffBXjpNMAjWwxy1AveGTGVKWeF0H0SJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a5:86:25:89:d8:7f:ff:ca:f5:68:e4:d4:47:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=06594ca4d76a01b1e56bf573bf57c35460280071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:76:79:3e:60:26:27:fc:00:1d:3a:a2:cd:
                    38:90:93:1b:3a:b6:df:8c:30:48:aa:2f:ad:e9:7a:
                    c3:c1:b6:0a:18:22:3e:db:ff:34:98:a8:d2:bf:99:
                    be:ae:e4:00:86:54:03:6d:06:83:ba:89:ac:2b:25:
                    f8:4b:93:ee:ef:1d:aa:ea:99:6a:ca:fa:88:97:3e:
                    da:97:95:36:8b:09:7f:63:ab:92:09:9e:44:51:05:
                    e2:0a:bd:8e:6d:fd:af:ea:35:f7:b1:34:b9:a0:5b:
                    ce:7e:7d:1f:9b:68:fc:67:7d:e5:d9:3c:00:b6:7f:
                    91:8e:d4:3b:5b:84:10:6e:e2:0d:74:af:f4:b2:f3:
                    26:a2:e6:a4:b0:7e:f9:a9:0c:7b:6d:ac:55:f5:60:
                    0b:2c:a2:09:d6:78:8d:88:d9:87:33:0e:6d:8c:63:
                    8a:d1:a1:8f:e7:80:eb:b2:00:74:6d:df:9c:50:ec:
                    b7:a0:01:fe:7e:ec:3b:fc:7a:78:66:2d:1c:57:96:
                    12:c9:e4:4d:7c:5b:5e:5e:fd:2f:db:54:40:8a:cd:
                    cc:bd:bb:a5:b1:06:5c:94:c4:d2:ec:02:3a:bf:55:
                    27:ee:fc:92:8d:5c:50:ae:3a:f6:5a:c8:06:8b:27:
                    fd:ec:bf:e6:19:32:e8:d5:df:4c:01:69:85:b8:53:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:4C:A4:D7:6A:01:B1:E5:6B:F5:73:BF:57:C3:54:60:28:00:71
            X509v3 Authority Key Identifier:
                keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:85:58:b1:22:c6:ec:18:b5:1a:04:1b:09:38:cb:9d:76:c2:
         6b:78:4f:00:37:bc:1b:69:ab:5e:47:31:d9:ab:1e:a8:09:d5:
         07:ad:0f:5e:96:ae:61:71:a3:f3:50:73:22:39:0e:1d:1b:67:
         26:59:50:81:cc:ae:aa:d8:85:2f:d9:64:5a:e1:a5:a2:5a:66:
         9d:08:bf:1f:ed:0f:a3:0d:f9:48:c8:d8:5e:f8:05:89:9a:49:
         f1:ad:51:fb:26:5a:78:98:ff:91:c2:88:4f:06:e3:5d:b8:6d:
         ba:5d:12:8e:58:61:11:a1:e2:6d:ca:ec:63:b7:97:d7:68:c6:
         18:3c:36:50:a5:4f:32:4f:8a:cb:74:47:c7:42:bc:31:10:31:
         b7:6d:4d:67:50:59:a1:61:0c:df:7c:37:58:ab:bc:91:6f:8c:
         46:8a:d2:61:bc:5e:e2:83:10:85:aa:8d:69:fd:91:6e:2e:ec:
         69:64:c1:99:35:b2:16:79:e6:43:7f:23:6f:ed:75:03:ae:98:
         15:48:42:46:a3:e4:c0:6d:2d:81:9c:d8:0e:74:56:48:5a:dd:
         81:e0:61:ae:14:b9:9a:90:d5:55:45:be:32:02:41:7f:07:ce:
         cf:9b:f2:dc:a2:92:52:8d:c2:ec:cb:9e:56:4d:2b:84:ab:46:
         12:2b:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----