Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          YQKEPxKZHlF6QbMCUbLQztO5b5y3nMJE9vFFAYuG3xQ=
Subject key identifier:   D8:3A:65:4A:0C:B4:DA:48:DF:E7:47:2D:5A:63:89:43:E0:01:71:7C
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       01962DF459699E4A6D6CC1408234FC27E2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          1475
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: mC/8Zq8fK7/Tmeal28UO+MOc6q1yMdJoZKQ23O1PYS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:59:69:9e:4a:6d:6c:c1:40:82:34:fc:27:e2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=d83a654a0cb4da48dfe7472d5a638943e001717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:c2:47:55:f1:1b:c0:95:09:d0:e3:e2:68:
                    40:e6:7d:ec:51:42:24:98:2b:73:77:31:c9:be:fe:
                    24:68:18:02:29:5f:0c:c0:20:ff:a1:f5:43:90:eb:
                    b2:d9:00:e6:14:28:34:83:0b:b8:8f:ad:01:be:28:
                    f8:03:e3:ef:2c:81:c2:92:30:38:d8:26:72:3e:3c:
                    ed:3b:4f:d6:d0:ae:e2:e0:fc:26:70:da:76:d0:20:
                    55:75:14:7b:8e:0b:d4:80:1c:30:bd:9e:07:53:99:
                    a1:89:5f:6c:df:07:fd:e6:a4:b5:3a:97:9e:3c:db:
                    c5:05:4d:aa:14:b5:0f:4a:6d:a9:30:72:bb:d4:66:
                    b2:6b:03:22:e2:6e:9b:53:d6:39:e5:95:ce:83:19:
                    3f:c2:86:21:8f:7a:45:33:ab:5e:5b:c4:6a:d8:a7:
                    fb:6e:e8:a9:ff:09:e8:2b:2f:62:39:0e:79:17:aa:
                    a2:4f:62:33:1d:da:aa:2f:00:68:92:40:0b:7d:89:
                    5d:35:70:83:42:d4:3d:44:e4:54:cd:aa:d4:5d:ba:
                    99:b9:5e:d6:f1:01:3c:62:06:14:07:e9:31:15:ee:
                    99:45:61:64:a7:f2:0b:d6:53:37:1a:65:1e:c9:69:
                    3e:e6:57:52:35:73:e0:09:56:a4:09:ff:ca:7a:2b:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:65:4A:0C:B4:DA:48:DF:E7:47:2D:5A:63:89:43:E0:01:71:7C
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:89:03:e6:3e:18:38:da:3d:03:b4:fc:9a:03:04:6a:44:3a:
         ab:36:92:bc:91:af:cb:81:db:37:15:87:c1:55:93:3d:74:05:
         df:78:a8:42:67:ec:1b:81:ba:41:79:dc:3c:1f:91:a7:bc:90:
         73:51:5e:5a:ef:15:b0:c8:81:8a:7e:b2:aa:fc:68:da:ce:7d:
         14:f5:e8:df:e2:3e:a6:20:30:e2:1c:84:64:97:2f:22:a0:78:
         46:8e:65:64:e9:96:bf:d2:65:c6:2e:f9:a5:a2:ee:2e:ef:5a:
         be:12:2c:57:d1:cb:1e:8d:a3:bd:72:03:c4:33:29:4e:bc:96:
         57:43:54:04:12:a6:38:6e:f5:ab:bc:ee:61:35:0f:f6:55:52:
         fe:52:67:ce:2b:ef:5d:da:3c:87:44:2d:71:03:65:a6:3a:34:
         db:06:e3:aa:f1:be:f2:f3:36:db:8d:3f:1c:c6:8d:4f:d2:58:
         14:58:00:78:65:c5:a1:73:c4:36:30:8d:9e:92:06:29:8d:ac:
         7d:75:bb:c4:2f:ca:70:9b:25:c4:ff:33:b0:15:af:15:b8:10:
         62:c3:06:b3:18:cd:a5:d0:8b:f2:0f:81:75:66:db:48:1a:32:
         c1:31:05:d6:8b:05:65:30:fd:85:d2:21:13:c4:57:39:a2:e1:
         95:ed:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----