Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File:                     1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier:          8JeTsCQ55TfGBE7ZsZbqkanR8gSORSMCOEh4b+35RUs=
Subject key identifier:   16:14:E4:82:CF:0B:8F:B1:00:62:7F:C9:CA:D2:03:D9:FC:A6:C0:11
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer:       /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial:       01962F06C4D4A7B5936CFC505DC8BD65B998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number:          0202
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: bJP6aDOiRS1aFCWj4K8S4MTSFK47gAn9WyHftV73O+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:d4:a7:b5:93:6c:fc:50:5d:c8:bd:65:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=1614e482cf0b8fb100627fc9cad203d9fca6c011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:e4:8a:95:19:85:66:9a:66:4d:3e:e3:4f:
                    d9:6e:78:f5:9a:06:e5:81:7e:be:fe:82:7a:86:32:
                    b5:b3:2e:15:fc:86:b4:31:39:b9:ac:73:0b:b3:55:
                    a6:41:07:e4:dd:16:a1:8e:ef:2b:ba:9f:0c:27:2c:
                    95:d3:ed:72:97:67:85:d6:67:ff:b3:0f:ba:3a:3e:
                    9c:6f:da:5e:5e:2f:93:1a:cf:98:92:67:f5:e2:00:
                    c5:0b:d9:e3:cd:ba:f0:d7:88:17:65:0f:73:48:9b:
                    ba:83:ff:ed:23:5d:b2:d8:36:43:af:87:00:8a:e5:
                    dd:02:38:a6:90:70:1b:33:9d:94:82:a8:43:77:c4:
                    41:68:6f:0c:c2:27:e3:0b:a4:c6:3e:03:81:35:dd:
                    47:86:ef:13:72:f4:61:39:56:8e:36:e5:2d:ee:98:
                    45:c3:b0:7d:42:d2:7f:35:12:87:c2:9b:26:b8:c7:
                    80:94:5b:be:56:d2:26:b6:2e:94:9e:f7:75:85:0f:
                    b8:2c:5d:1f:5c:fd:a8:ef:50:6b:49:21:b2:a5:32:
                    2e:22:9a:36:92:1f:4c:db:46:72:7c:84:0a:81:d6:
                    71:2d:af:49:dd:7f:b0:44:dd:06:5b:94:04:06:23:
                    ef:0d:4a:f1:ad:f0:1f:8a:1c:67:3f:f1:2c:0f:bb:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:E4:82:CF:0B:8F:B1:00:62:7F:C9:CA:D2:03:D9:FC:A6:C0:11
            X509v3 Authority Key Identifier:
                keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:28:79:48:a3:3f:2d:56:dc:49:d1:ab:d6:4a:28:8d:9e:
         fb:e2:3f:2a:6f:9a:64:56:52:66:6a:03:fc:c9:e3:34:23:c8:
         fe:61:8d:9c:78:d5:6e:63:45:3d:8b:d7:9d:d2:dd:a3:16:97:
         d2:bd:8a:5c:3d:20:85:05:5e:ad:79:64:6c:90:32:1a:9b:78:
         87:fc:3e:01:0b:e2:a5:70:62:74:7a:0d:7f:09:05:4a:84:69:
         70:99:fe:b5:ce:2e:ae:56:b2:67:cc:9b:97:2a:5b:f2:c1:d7:
         25:fd:4c:51:c7:1b:62:ca:3d:b5:30:cd:14:5c:1a:4f:8c:79:
         98:4b:01:c2:16:f6:82:f5:50:55:c1:a7:99:e1:94:4b:3d:6c:
         63:70:7f:61:24:bd:47:e2:1a:ff:1c:91:84:53:18:7b:6a:97:
         fe:c4:71:d5:e1:23:e4:cf:a0:5a:90:6c:e1:ad:e5:8e:2d:1c:
         72:88:73:dc:fb:de:7a:4e:46:92:0e:d7:ed:53:dd:c2:9b:66:
         05:19:72:ef:d5:5d:47:b5:95:c3:c1:98:d1:22:cf:bd:89:d8:
         62:a6:59:48:5d:ba:5b:e3:5b:51:ff:63:0b:8b:4a:8e:9f:c1:
         52:dc:b4:51:9a:51:12:a6:38:c1:5e:35:74:91:75:e7:8c:7c:
         ba:fc:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----