Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
File:                     Vu9y3nfRt-K0RwW2y85jlCHam-8.mft (raw, json)
Hash identifier:          DYwVbX1zJHwocluzRTuJ9+4qQ4oqQFkc85XxkXEDU8E=
Subject key identifier:   1B:60:83:F6:46:BC:F6:D0:9E:04:20:2D:34:68:8C:7A:D9:8B:38:2E
Authority key identifier: 56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
Certificate issuer:       /CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Certificate serial:       01962F06E45C6A19650DAC4EDA79F01E154B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
Manifest number:          032C
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: Vu9y3nfRt-K0RwW2y85jlCHam-8.crl (hash: rt0I6cax4FmNJI88B9F899ZH6l+NJUdpvazl4W2cgf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:5c:6a:19:65:0d:ac:4e:da:79:f0:1e:15:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=1b6083f646bcf6d09e04202d34688c7ad98b382e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:28:63:cd:28:d3:55:83:d4:11:f5:9e:4a:
                    e5:b0:5b:27:f9:4b:59:f3:95:1e:eb:74:c1:f4:26:
                    32:8d:7f:b5:44:af:b8:2d:63:60:84:77:9b:12:82:
                    ae:7a:8c:7b:f6:0b:ca:05:25:52:30:84:17:c2:32:
                    30:a6:c5:45:bd:c6:12:5b:98:74:a1:8a:a5:c1:58:
                    22:3e:55:f9:cd:9f:72:25:97:73:e4:c1:81:9c:63:
                    5a:64:a7:ca:48:4e:6d:53:e7:05:45:14:82:d5:3a:
                    87:e5:00:8c:ff:b1:02:58:8c:6e:b5:bf:7b:b9:f1:
                    f8:63:bd:5d:08:52:18:8e:4e:16:1a:36:ac:f3:0a:
                    35:99:08:96:a4:f1:4c:12:71:db:21:25:d4:50:7d:
                    d6:76:2f:d2:fc:0c:ca:f3:34:a2:49:5c:f1:92:cc:
                    d1:b2:37:90:18:0c:18:13:6f:32:19:d6:98:29:48:
                    2a:ae:0a:b4:9a:3e:c5:08:88:48:89:ca:54:a4:b2:
                    e2:e0:fa:96:99:12:d6:50:ca:46:75:be:b1:ae:30:
                    05:4a:03:08:19:96:90:35:79:86:30:48:f6:b8:05:
                    48:ef:f9:5e:0b:f7:2c:79:59:9f:d8:3a:cb:b4:24:
                    22:09:e4:db:61:a5:97:4b:54:87:13:90:0b:be:ac:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:60:83:F6:46:BC:F6:D0:9E:04:20:2D:34:68:8C:7A:D9:8B:38:2E
            X509v3 Authority Key Identifier:
                keyid:56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:24:8c:df:5e:08:13:8b:e3:26:9f:f4:80:b4:2f:52:1f:
         75:9d:d2:0a:e0:a7:fb:37:e1:e2:7d:f7:eb:0b:ac:be:0e:8b:
         63:dd:da:02:d3:14:72:be:6e:fc:69:82:5c:36:f5:9c:1c:e9:
         0c:98:36:08:b6:08:e1:bd:fb:f4:ff:3f:22:65:2a:5b:d8:0f:
         51:28:76:f7:81:ce:96:a1:0e:6f:00:8e:4f:b8:58:d9:20:fd:
         a2:60:ff:03:01:d9:50:a0:d3:8a:bb:ce:f3:7b:5d:7a:00:f7:
         33:52:32:7c:bb:c4:49:b5:0f:0b:e5:35:13:25:92:f6:c6:6c:
         e9:20:b6:6b:bc:82:63:52:60:88:14:ba:c5:05:ce:39:3b:09:
         23:bc:86:f4:6d:8e:91:90:d0:13:3b:c4:08:46:49:37:4a:67:
         6e:c5:e9:f6:67:55:f9:9f:eb:2d:ad:05:12:17:db:76:e1:f5:
         7b:ed:99:79:cc:64:18:f4:e0:47:bb:a6:dc:b4:52:cb:e9:68:
         01:3e:fa:c1:c7:81:c7:72:2d:8a:0b:23:4f:5e:72:f9:b4:63:
         57:50:f3:cf:ef:6c:7e:9d:6f:dd:ca:f2:f6:ae:56:78:cd:18:
         4e:37:d2:b5:d4:09:55:ac:9a:f0:11:08:4f:c4:76:3d:6f:75:
         6e:1c:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----