Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File:                     lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier:          I0WO3ycXVp5NkINp9v1fmTk/KoYqofP+n/mRlumdAVU=
Subject key identifier:   F7:1A:4F:18:E1:B3:0F:6B:4F:91:B6:1E:62:3B:AC:F6:28:6E:E3:28
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer:       /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial:       01962E992E4A75B6C01AC6896E68F4E73FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number:          1371
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: 9MYkFGu2vQhJumd7PdbSAMxbnEqcjjPs/6b8QDOmUe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2e:4a:75:b6:c0:1a:c6:89:6e:68:f4:e7:3f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=f71a4f18e1b30f6b4f91b61e623bacf6286ee328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:15:e7:e1:95:c4:49:31:67:e8:2b:8e:54:82:
                    4c:1a:b0:c6:d0:24:0a:1d:de:cb:dd:4b:2f:12:ee:
                    55:85:df:2e:9c:9e:24:7f:87:c8:fd:a5:ed:2a:ed:
                    16:41:51:da:cc:70:11:22:ac:6e:32:b2:14:91:22:
                    09:bc:41:1a:fa:50:53:9f:d3:5d:e0:f5:a0:37:15:
                    9a:cf:2d:32:e0:99:6a:fd:ae:61:c8:ac:04:b6:bf:
                    ca:c2:30:a0:e1:c7:55:c2:15:bf:ec:32:17:69:cf:
                    0b:c1:df:dd:88:de:f4:19:33:8a:db:5d:69:72:dc:
                    ff:d6:1e:50:1f:54:cd:b7:97:e0:08:b1:aa:27:6c:
                    3d:b9:29:af:d5:09:d1:43:36:9c:63:6f:5d:79:be:
                    79:a6:de:0d:1f:eb:38:27:15:65:4c:81:27:1b:e1:
                    36:0f:72:b5:59:5e:69:6d:18:17:61:94:d1:07:25:
                    10:29:17:87:fa:ba:4f:01:47:b7:8d:ce:b2:f4:a3:
                    c6:25:73:fe:a4:47:cb:f7:64:f1:ba:c5:95:db:26:
                    ef:84:b4:ef:b9:e4:ef:62:ff:96:ab:bf:84:66:b0:
                    ae:53:7a:73:0b:40:47:2c:10:95:85:d7:7d:50:5b:
                    51:de:d8:64:b4:a9:ab:40:c8:ea:6f:97:76:1c:fc:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:4F:18:E1:B3:0F:6B:4F:91:B6:1E:62:3B:AC:F6:28:6E:E3:28
            X509v3 Authority Key Identifier:
                keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:66:bc:a4:63:39:09:25:23:70:fb:30:46:80:22:dc:a0:
         4d:64:61:c6:cb:8f:0a:91:5a:c9:64:7b:42:ca:8f:5e:0f:d7:
         de:f4:e4:a4:ca:5d:d5:71:02:27:a4:67:bb:2d:ec:48:ff:b2:
         7c:20:a5:6b:c2:cf:8e:e0:62:5c:36:f8:20:7b:a4:90:28:13:
         3d:fe:c7:5f:be:e8:63:48:32:d9:9a:15:f1:cc:bb:88:59:c5:
         a5:b3:cf:b1:4a:ff:b7:7d:d4:22:07:3c:fe:24:7d:36:6a:8a:
         8b:04:1c:de:6a:2a:13:69:23:f3:9c:7e:9f:6f:aa:45:87:57:
         52:08:cc:83:2c:59:0a:8e:00:25:58:bb:0f:2f:9e:70:09:f0:
         32:a4:fe:97:98:17:70:e1:90:62:50:fb:42:9a:a2:b7:f0:62:
         f0:17:5b:75:eb:56:33:25:43:8c:00:38:bf:b4:a7:c4:a6:62:
         c7:c6:74:bc:1f:9d:ae:f6:cb:df:dd:c8:b5:d6:0c:c6:d6:6c:
         d4:89:51:d8:c1:45:70:8e:de:fc:24:e0:f2:de:f6:22:fd:dc:
         24:b3:b4:82:5c:93:f4:54:7c:aa:ee:90:ed:b9:ff:df:56:f1:
         76:d8:0d:47:1a:ad:6f:5a:bc:29:25:f2:dd:9d:ee:08:eb:ac:
         9c:bb:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----