Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File:                     cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier:          Kto2IrTyp/b3RHUtSTydS3uI9fMFEyeg3p2DyRJFgUA=
Subject key identifier:   4A:CB:A8:BA:5C:98:4B:6D:96:8B:B5:2D:C8:AB:BB:51:7E:94:BA:EA
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer:       /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial:       01962DF4543191978C92EDAA9412CD0E7488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number:          116F
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: /PNHzvxCmTofUpY5ds7ftmDxWypthamzqnjYAGFLiZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:54:31:91:97:8c:92:ed:aa:94:12:cd:0e:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=4acba8ba5c984b6d968bb52dc8abbb517e94baea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:5d:30:d5:b8:03:e7:f4:17:a3:0c:f8:28:
                    51:2d:7f:61:d4:b0:48:b4:a2:5b:10:29:c6:4f:e3:
                    f7:7d:2e:65:e4:b4:7e:e4:0b:35:95:7d:d6:41:81:
                    11:22:56:65:e2:10:ce:93:5f:95:1c:1f:eb:db:7a:
                    10:f7:2f:c5:38:b5:ba:61:cc:10:b6:50:3b:01:4a:
                    30:0e:3f:3c:3f:a8:73:08:38:48:7e:ec:ab:bb:24:
                    c5:e0:c7:af:d4:b2:a8:c8:9b:6e:50:09:10:f3:ab:
                    6d:40:50:0f:a7:12:0f:fc:83:41:d3:96:c7:0d:51:
                    33:d1:ec:f1:c8:f6:12:94:67:ad:23:22:77:d5:91:
                    ca:98:ce:52:f4:a8:eb:cc:ad:63:e8:b1:ca:17:f3:
                    e4:dd:76:5b:6c:4e:c0:fe:78:33:b3:a5:35:c3:10:
                    3f:24:85:33:33:a9:a0:88:b5:5d:cc:df:77:ca:1b:
                    e4:7b:7b:52:71:3a:b7:b0:0e:fb:ac:87:33:42:48:
                    f8:bf:a9:74:bb:32:be:96:f7:f1:14:4d:e0:2d:ca:
                    5d:3d:4d:83:e1:4e:2f:b3:5c:41:0c:aa:60:e6:1e:
                    31:2d:73:ba:39:9d:c8:df:66:23:12:d0:0f:59:b4:
                    bf:89:43:c3:25:b8:d4:76:d9:a9:11:68:6d:0e:92:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:A8:BA:5C:98:4B:6D:96:8B:B5:2D:C8:AB:BB:51:7E:94:BA:EA
            X509v3 Authority Key Identifier:
                keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:58:81:86:6a:05:bb:bf:d2:02:17:79:ce:97:a5:ac:86:cb:
         42:6b:a4:17:bd:07:81:23:6c:0d:76:04:56:c2:54:df:e3:57:
         f7:e3:d8:90:63:f9:ea:d7:94:06:77:f6:70:9c:ef:69:36:9c:
         84:62:bd:f9:9d:7b:4c:2e:b4:d2:3c:61:a5:88:7f:fa:ee:12:
         6a:ec:3f:c5:95:92:f6:e9:9d:94:1d:89:3f:5a:5d:5f:31:0d:
         0b:dc:9f:06:4c:03:1a:0d:63:c8:ac:65:d0:44:8d:94:42:00:
         e0:30:c1:b7:db:bf:af:9e:6c:b0:78:4f:b6:2d:ed:26:27:6a:
         e1:61:62:fd:a9:88:5d:fb:51:8a:c9:59:56:b1:ac:99:3f:87:
         cc:4f:c8:0d:30:14:c7:25:c7:a4:af:eb:39:fe:95:d6:98:ea:
         2f:2b:84:c7:44:73:f6:15:4d:cd:4f:79:aa:f8:e9:a6:3a:09:
         2b:61:08:42:b5:e5:c9:f1:67:0e:22:55:b2:a2:91:25:12:2d:
         92:aa:1c:85:10:c0:b6:28:29:6c:6c:78:56:91:2b:c8:28:33:
         ee:be:83:d3:45:f7:37:44:7a:dd:f3:72:36:ca:6a:2e:e7:d5:
         0a:e0:ae:6a:ce:d7:b6:2c:2d:ff:14:23:f4:71:41:ec:25:a4:
         ba:e0:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----