Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File:                     a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier:          DFAWiM25rI8ERa1YYEP1AKbhek/qkO4++k96Nbx0rN4=
Subject key identifier:   CD:84:2B:A4:81:7C:3F:97:6F:57:C8:67:85:F7:5B:19:4E:E0:92:28
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer:       /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial:       01962DF3A80FFF1D9BFCCC52A816A1B2B11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number:          0B80
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: VrhwulUFiCbIYSop+KSNtr/B0eTnPKACDg6HNKF64nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:0f:ff:1d:9b:fc:cc:52:a8:16:a1:b2:b1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=cd842ba4817c3f976f57c86785f75b194ee09228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:f3:00:07:b6:95:49:bc:ad:0e:5a:63:86:
                    df:5a:85:d8:29:62:0d:62:39:c8:51:ec:15:b6:60:
                    ce:33:86:92:c9:06:ae:6f:21:2f:2f:b6:9f:23:d2:
                    ed:08:53:a3:c4:03:e3:a8:7b:37:5a:0e:af:0d:8f:
                    fb:90:63:12:8b:64:a6:d1:e7:2a:0e:76:1a:05:85:
                    3f:ba:d3:e8:86:1a:75:31:d3:6e:4d:a0:60:4d:93:
                    8c:9a:73:46:22:50:b6:e3:24:f7:3f:50:53:8e:54:
                    06:97:54:ec:2c:5d:9b:64:79:77:cb:fd:79:fb:b1:
                    60:7e:ab:21:b0:e8:27:fb:41:da:a6:8b:36:1c:1c:
                    50:4d:e2:49:ad:dc:2d:f5:6d:14:63:61:4b:71:b9:
                    44:f0:7c:9d:21:ac:3b:e8:42:a1:4b:d7:e9:b2:3d:
                    18:4b:8f:51:87:a8:e2:8d:59:e5:c4:54:58:32:70:
                    4d:ab:91:b3:bd:ca:d1:44:ee:7e:ea:6b:a2:32:e2:
                    3b:00:8d:e2:15:83:80:56:66:fc:ad:98:e6:32:bf:
                    f4:04:6d:f7:ac:f3:52:ad:3a:be:45:4c:30:ab:58:
                    4e:cc:6f:f7:fc:f8:82:ca:41:a8:6b:50:aa:28:05:
                    56:d8:b3:ef:42:c5:79:6d:e6:8f:b7:55:f6:2c:d6:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:84:2B:A4:81:7C:3F:97:6F:57:C8:67:85:F7:5B:19:4E:E0:92:28
            X509v3 Authority Key Identifier:
                keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:86:c9:ad:b0:cf:68:da:04:45:c3:4a:85:45:ed:a0:d3:
         40:43:15:07:62:3d:45:00:88:2d:cb:49:a4:a3:7d:d8:aa:7c:
         79:56:e3:0e:e4:0b:0f:30:63:61:ef:55:00:f5:db:4c:0c:7c:
         ee:91:45:c5:69:82:7c:65:ae:8e:38:92:cf:1a:27:0e:fb:dc:
         81:fd:34:cc:38:70:d7:7b:a4:e4:e7:0c:00:e6:d1:d7:8d:14:
         17:a1:ed:1e:98:a2:9a:a5:a1:61:56:2c:84:73:11:19:1a:b8:
         ff:6d:51:c4:b6:0b:44:8b:03:dd:a3:7b:6b:fd:a0:95:6b:a8:
         8d:21:ed:46:11:e7:b8:89:1f:b6:58:17:ae:be:58:cb:b0:57:
         60:86:f1:f0:5f:0d:c8:df:f2:1e:e8:e6:d9:34:53:35:b1:e5:
         4a:af:6d:16:7a:78:67:dd:87:46:e6:99:8a:fa:20:19:a6:a2:
         9b:eb:a8:33:fa:35:17:da:d9:86:b8:b9:08:95:fa:e9:9c:f3:
         8c:74:cb:b5:0c:3c:00:4c:a2:0e:7e:20:9f:e7:f9:38:26:4a:
         eb:f3:16:63:3c:7c:ab:82:e9:8e:74:99:ff:c1:b7:45:af:ac:
         47:99:a8:33:d9:87:8c:72:91:ba:29:cd:fe:dc:e2:67:36:ff:
         e3:67:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----