Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File:                     71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier:          taa1gM+J4b9CEcfGtdMUiArgiZD2Uyy5OBz+VsnSSgo=
Subject key identifier:   EB:44:8B:DC:8D:4D:3B:3E:09:69:3E:4F:47:B2:32:3D:5E:94:E2:BF
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer:       /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial:       01962DF4067E7879D09E2F89FA710912DE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number:          65
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: sdwWiGGZYPlR+BMoDr3PhzN8hZjJC2kqRkS5aR9sdis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:7e:78:79:d0:9e:2f:89:fa:71:09:12:de:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=eb448bdc8d4d3b3e09693e4f47b2323d5e94e2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:33:9c:c1:d9:bf:61:b8:68:ae:7c:6e:22:
                    31:e1:f2:1f:73:39:de:71:e6:17:fb:15:03:ec:f7:
                    f1:d9:32:90:b3:82:da:b7:b7:48:47:7a:06:d2:c8:
                    fb:c1:04:82:49:c0:19:62:9c:47:74:de:61:cd:35:
                    05:d3:8e:fe:1a:1a:35:e0:17:1c:ba:7c:52:ea:be:
                    f2:4d:ee:71:dd:ef:80:5d:45:95:66:8b:b5:25:39:
                    53:bc:17:cb:7e:71:5c:49:d1:d8:7d:0e:54:b8:ed:
                    d1:db:81:1b:da:db:7e:47:83:8f:18:a9:dc:8e:2d:
                    53:18:d4:69:e4:eb:c1:ed:c9:cc:da:e8:d1:40:a6:
                    81:17:2d:6c:ca:01:c3:cf:2a:94:3b:88:75:ab:cd:
                    c5:0d:7f:0c:b3:e6:f7:43:83:0d:e5:b1:2a:5a:69:
                    69:5a:06:93:60:a6:f7:4a:26:90:ed:a7:20:ae:b1:
                    75:4c:c5:21:29:9c:b7:49:53:c9:27:4d:26:b9:09:
                    08:36:38:65:23:b6:8e:48:13:f2:6a:d2:93:96:ba:
                    19:bc:dd:a6:58:01:62:32:9b:73:9e:78:85:a9:8d:
                    1d:2e:46:85:aa:82:6c:79:9a:10:0a:c7:6e:58:64:
                    6a:8d:a9:16:58:65:06:18:f7:7d:d7:a7:f1:99:42:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:8B:DC:8D:4D:3B:3E:09:69:3E:4F:47:B2:32:3D:5E:94:E2:BF
            X509v3 Authority Key Identifier:
                keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:34:26:bc:ef:ef:61:1d:7c:de:d4:5a:75:b9:ce:9f:3f:22:
         27:3e:34:01:29:9c:6c:58:c1:7a:ea:a8:0f:b1:27:ed:1c:aa:
         d1:dd:24:d7:2f:dd:36:3a:d3:fe:17:46:66:f3:08:b8:26:df:
         3a:82:b2:4b:83:98:f1:52:29:00:81:fb:fb:ef:82:5e:95:59:
         c0:cc:ff:d5:62:75:82:08:d8:e3:f7:fa:e4:6b:be:15:8f:17:
         72:6b:f4:2b:24:e3:8f:39:df:2a:dd:2e:51:21:ac:35:11:00:
         cf:d0:64:2f:7a:1f:b8:b7:36:1f:34:a2:95:f6:64:29:05:b8:
         31:f2:2d:72:10:15:cb:15:05:70:61:c6:64:07:a5:b5:5b:40:
         89:19:27:69:1b:fd:80:08:12:16:09:7e:f4:07:a6:0d:6f:5c:
         c5:fc:ff:3d:32:dc:c5:e3:a7:67:c2:25:91:41:e5:5f:22:8f:
         b6:fe:fd:75:96:32:ee:d3:68:eb:72:33:8a:d9:d0:c9:a2:93:
         8a:75:ed:47:76:12:44:27:69:b3:1c:f4:a5:46:85:91:55:70:
         36:7c:63:48:07:c3:db:02:73:3c:09:80:2b:a0:d0:c6:d3:dd:
         07:13:46:a5:17:89:91:83:02:4a:11:6a:d3:14:6e:ed:21:78:
         f8:91:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----