Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File:                     PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier:          oOtjIAOXSgGGh2foMlQwiyew+ePvd1l2kW8GQfJwL9w=
Subject key identifier:   A9:8E:17:61:F0:1A:01:69:68:6A:39:90:6C:DA:DB:F3:11:1C:8A:99
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer:       /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial:       01962E994631E1A3B5A51F8960CB3B46CF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number:          11D8
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: KXX1wFy1fENU87HXBzyGXJEfGYkLkM+Oc6jQkQwx3Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:31:e1:a3:b5:a5:1f:89:60:cb:3b:46:cf:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=a98e1761f01a0169686a39906cdadbf3111c8a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:ac:80:aa:98:5d:9c:6a:0a:d2:3c:d2:46:
                    bd:f5:13:0e:10:52:49:ec:a3:3b:ca:91:57:1c:27:
                    c1:f2:43:fb:e5:fd:fa:6b:29:2d:2a:fa:3e:6e:44:
                    b5:55:8a:58:2e:58:0f:42:18:7e:44:96:58:37:a6:
                    e5:33:04:03:85:ae:10:d9:f8:d4:d1:f2:74:49:e6:
                    d7:8b:26:77:25:9c:5f:52:47:72:d4:38:dd:91:6d:
                    89:26:b3:24:df:1b:6c:e4:4c:00:69:91:09:f4:81:
                    74:78:e3:82:cd:b2:92:bb:ee:e4:6b:a8:e3:2e:61:
                    35:09:82:6e:14:45:08:5d:96:b6:cf:dc:22:26:87:
                    bb:41:a7:d0:89:23:84:e5:8e:4e:fc:67:a6:eb:c2:
                    68:3d:79:bd:67:61:3d:dc:7a:ee:5d:56:58:9b:ae:
                    0e:51:db:33:b5:41:02:ea:4e:e4:9c:7f:0e:1a:ca:
                    f6:f7:0b:6d:97:38:91:b8:d5:53:4e:8a:d9:69:26:
                    8c:5a:d1:c4:29:f9:d3:60:cc:c0:84:70:ea:48:49:
                    fd:db:a1:34:22:e3:05:75:49:e6:ac:d7:2f:9d:0d:
                    a0:ad:ab:11:5f:67:d0:08:ef:80:ef:2f:ca:21:8d:
                    cc:08:26:be:06:65:b0:ea:0e:ae:7a:fc:a8:c4:8d:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:17:61:F0:1A:01:69:68:6A:39:90:6C:DA:DB:F3:11:1C:8A:99
            X509v3 Authority Key Identifier:
                keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:60:39:d2:b5:05:f5:9b:95:d8:8f:ab:1c:dd:a7:15:c1:
         1b:a6:f0:eb:7b:97:bc:c6:98:00:8e:ab:da:9e:fe:2f:76:c9:
         b7:8e:8f:a2:fc:ba:b6:32:61:61:8a:0a:84:c5:ec:8e:b9:7f:
         ed:d8:2a:cb:e0:11:9b:5a:db:37:c4:12:2f:3d:df:30:34:72:
         09:bb:6f:7d:49:47:17:69:85:b4:3c:83:f4:18:04:52:3e:fd:
         72:39:5d:1b:f0:0d:47:af:73:99:26:87:80:be:2b:ef:04:bf:
         c7:3f:ea:58:4f:17:4f:81:2f:4d:6d:b4:85:97:2b:38:c1:f7:
         d2:67:44:f5:ee:0e:27:05:bd:85:be:66:09:99:e4:09:e5:52:
         d9:f9:14:95:d3:45:1b:e8:a8:b3:50:5c:47:5b:6e:2c:2f:18:
         d8:7a:27:0d:51:a4:81:d3:c3:1a:86:73:8f:62:5a:c9:6b:60:
         1e:bf:29:e1:94:5b:5e:81:ff:ff:62:a7:51:ee:ae:1d:45:95:
         53:1f:8d:8b:ac:a3:7f:87:ff:3c:92:7b:59:73:d5:3a:d6:21:
         f1:5b:67:82:a8:14:ca:52:0c:d0:83:b9:5c:65:05:a9:f4:2f:
         aa:cf:98:8a:6b:c4:7b:b9:c8:38:29:a0:15:57:cd:f0:5c:44:
         5b:bd:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----