Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File:                     L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier:          GzgmRaGTjQ1sstXGXpzSRgrZwh7d2r5lTfzWQCxndhM=
Subject key identifier:   D2:DA:67:86:DC:86:E0:53:6C:AD:07:AC:F4:BC:5F:00:7F:7D:8D:DA
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer:       /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial:       01962F0714A888E348D7D82D78B6AC5FB039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number:          0ADC
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: VPP+QoED1W/mtF2us+7PoPOV8MbZGUpBHFFmIGtsWis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:a8:88:e3:48:d7:d8:2d:78:b6:ac:5f:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=d2da6786dc86e0536cad07acf4bc5f007f7d8dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:5d:1a:88:58:a1:59:92:77:1f:2d:92:cc:
                    b5:08:62:ce:8f:34:c2:da:82:9c:57:71:68:a7:08:
                    f8:78:e1:08:b3:7b:94:96:ab:c3:6b:ed:a8:f2:4f:
                    80:f2:86:10:a7:7b:e7:88:e5:1d:d1:7d:41:1e:ab:
                    df:ab:12:2d:8d:25:f0:f7:1e:71:00:7d:00:1d:9b:
                    c6:0b:0a:fd:7b:1a:38:d9:d6:b5:fa:fb:a0:91:96:
                    46:d3:bc:04:75:3b:10:31:55:83:fc:62:96:36:a6:
                    b9:3a:63:ec:12:bb:a0:4d:0f:e2:e3:83:96:c0:2e:
                    4f:92:be:6f:00:65:7d:c8:b0:4a:57:e5:e5:a9:cb:
                    d1:4e:00:80:6a:0f:51:56:75:3c:eb:61:b4:2c:3d:
                    65:a5:e3:77:db:2e:19:47:95:61:ed:f4:6c:bc:65:
                    d7:0d:2c:b1:8f:25:dc:d5:4a:13:65:22:67:79:66:
                    86:9b:93:48:12:02:34:79:b6:21:15:e7:0a:67:1e:
                    bb:20:87:ce:8e:de:8b:8c:6b:25:94:6c:09:1f:52:
                    d2:03:c3:29:91:27:b3:06:7c:2c:9b:89:7a:e8:de:
                    3a:30:30:f2:94:db:5a:f8:83:ef:c7:5c:16:ea:4d:
                    ea:dc:ff:b2:99:68:b5:e1:a7:9f:90:b3:4f:6a:50:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:67:86:DC:86:E0:53:6C:AD:07:AC:F4:BC:5F:00:7F:7D:8D:DA
            X509v3 Authority Key Identifier:
                keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:60:ea:a4:5a:d9:dc:95:a8:98:b6:3a:ae:69:2b:90:96:
         ff:e1:ab:62:99:8e:2c:1e:e4:95:86:1c:25:c3:51:bf:9e:a7:
         03:c0:49:c4:67:01:41:07:5e:23:d8:a5:cb:fb:d8:f7:13:59:
         79:66:fa:1c:2d:94:e7:71:99:e7:9a:9b:c1:ff:3b:ad:51:4a:
         3a:30:ae:a5:ad:22:f1:69:0e:2d:31:25:d3:d7:ef:53:57:af:
         d5:fc:a0:f0:a5:7d:23:66:cf:7b:dd:f9:6f:27:d0:89:84:92:
         c5:a6:49:ee:77:95:61:85:4e:56:2c:70:fb:ef:c9:e7:93:f0:
         37:fb:f2:1f:88:2d:98:53:de:3d:1d:69:6b:0d:ac:7c:58:d3:
         a5:d2:fd:70:11:9c:f5:cd:8c:14:7f:c1:1d:63:22:68:00:92:
         e2:26:59:73:59:72:df:57:5e:8b:d1:41:bf:97:8c:ff:7c:80:
         a7:e1:6a:e6:53:5a:60:db:b8:66:2d:5d:f9:b2:c3:05:87:64:
         22:16:fc:ab:37:89:83:ce:bb:c0:7c:fa:94:17:30:c6:86:70:
         56:39:96:a5:2c:b0:40:c6:d3:53:c2:ee:eb:2b:b5:82:d8:fb:
         b8:6d:f8:fd:86:ec:62:f3:91:25:83:82:d2:f7:05:61:04:08:
         17:5a:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----