Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File:                     SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier:          wu1MZ9h+pGJO3oxHIBrW2w/ywvPVyyAYwcTrNkYfoLs=
Subject key identifier:   6D:A6:BC:10:EA:BA:37:21:DD:17:88:44:72:59:34:CC:B3:6D:E6:FA
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer:       /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial:       01962FAB1D0801DE64043AA562BE6877134A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number:          C9
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: vF2n9BLX4amVC/ZsUMv6SrzAnDEi7hBFhUz1TEcwAQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:08:01:de:64:04:3a:a5:62:be:68:77:13:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=6da6bc10eaba3721dd178844725934ccb36de6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:a2:33:40:9f:56:ed:db:1e:56:1a:9e:ed:
                    e4:6d:65:13:c9:62:fc:c9:0d:b0:72:52:a4:bb:d6:
                    2f:15:02:44:6c:4e:9f:92:e6:85:38:1b:ff:9a:c1:
                    62:fc:b7:7f:75:38:35:f5:71:75:b9:56:16:2b:6f:
                    99:84:30:db:2c:e0:0b:71:2f:0d:26:fa:53:59:bc:
                    fa:b5:07:a1:d1:ba:7b:d4:e4:dc:cd:10:23:16:65:
                    e8:54:20:56:98:ff:dc:5e:15:4c:3f:2e:d8:53:c8:
                    f1:ed:2a:48:fb:ec:ea:d4:04:31:f9:e7:f7:eb:aa:
                    37:eb:c7:b9:41:47:97:53:54:44:05:da:d2:cb:1c:
                    54:d2:e8:8b:9f:b6:0e:a3:3c:f2:e5:9c:04:b8:1f:
                    59:78:34:d1:78:e7:fd:30:63:68:44:44:56:00:64:
                    54:d5:09:25:eb:bc:22:1f:dd:cf:6c:6c:7c:b8:17:
                    48:81:4e:d7:b0:ba:78:96:e2:57:92:17:9e:c1:79:
                    8f:aa:98:a4:58:66:8c:12:82:f2:f1:e3:9d:ba:73:
                    61:35:0d:bf:3e:df:83:57:bf:54:4e:4b:a6:d8:9a:
                    44:8e:9c:fc:fa:db:fe:39:9e:9a:41:d0:56:6e:60:
                    9d:48:0b:4d:a0:33:ac:0a:7e:ac:97:32:40:7a:f5:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:BC:10:EA:BA:37:21:DD:17:88:44:72:59:34:CC:B3:6D:E6:FA
            X509v3 Authority Key Identifier:
                keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:43:d1:e9:d1:bc:79:19:0f:83:78:61:34:68:3a:e9:a9:
         b4:c4:4c:07:b3:34:67:cb:2d:2b:cb:df:52:47:f9:07:c8:7d:
         81:d8:27:9f:1c:78:6f:27:72:66:19:56:4a:34:98:2b:01:69:
         bf:67:28:f2:41:da:8e:7b:d9:9a:48:5c:b2:a1:82:c1:74:a2:
         99:6a:ee:b1:06:75:73:69:97:7a:16:e4:c7:db:bc:30:4d:27:
         9f:60:4c:61:55:22:1b:82:7b:c1:a1:2f:31:2b:9b:31:3f:09:
         e1:3f:08:27:00:7a:15:2f:f4:ce:b3:12:7e:b9:e7:f3:4b:6a:
         b1:cc:ae:f0:87:ae:00:ef:68:73:53:e4:db:dd:37:92:fd:16:
         71:87:3c:0b:29:0c:22:fc:22:8a:66:f2:fd:f3:6d:18:0c:ac:
         c7:f3:18:47:9e:d4:41:93:0d:63:58:2b:4a:1f:c4:89:dc:ad:
         e1:58:eb:f8:df:e8:6c:97:68:0d:84:57:dd:72:93:97:aa:b3:
         17:84:7c:cd:00:37:1a:af:cc:ea:a9:97:cf:03:f7:ad:ca:21:
         56:8a:d8:03:38:a8:08:57:41:ac:db:3f:8e:ca:80:2e:c2:c8:
         f4:49:b5:25:5a:99:5d:e4:2c:e1:e8:12:76:b1:0e:c5:a5:6a:
         36:26:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----