Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          0KMAmyMeBNjjVUJ4pVGPTair9bYgR0i5CeTX6V69L84=
Subject key identifier:   CE:21:A9:6E:CD:12:FA:C8:72:6E:BB:B3:93:A2:ED:21:04:E2:03:13
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       01962E99A189B00702C59DE334904B0B7B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: HW29Gz5KAXJcTcxZjPENpnUk10OnJPWUp4PbAH5uUq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:89:b0:07:02:c5:9d:e3:34:90:4b:0b:7b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=ce21a96ecd12fac8726ebbb393a2ed2104e20313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:d8:28:7e:da:0d:00:c2:20:fd:d8:de:95:
                    fc:f1:0b:d9:46:5d:4f:8a:53:1a:9f:83:39:8a:ce:
                    4a:1e:48:20:e7:17:11:50:52:7d:30:06:dd:12:d9:
                    6e:67:a9:2a:c6:d0:c1:6a:8f:d0:e9:e4:22:68:f9:
                    55:ed:42:a5:71:7d:ff:29:60:b3:53:d0:8d:b0:2e:
                    fb:f1:86:a7:5b:70:c9:61:17:7b:9b:7f:b2:a8:06:
                    e2:7c:28:e9:48:c8:a1:08:fd:9a:d4:6e:bb:88:c5:
                    47:3b:15:b3:32:ca:25:ac:ea:7f:f5:01:c8:64:24:
                    e2:3e:52:03:73:4a:24:0c:25:e3:b5:ac:65:7e:7e:
                    1a:a9:8b:8c:41:bd:cc:d2:b8:97:e0:e2:de:25:61:
                    05:77:d4:4a:d5:0c:bf:a0:f1:0a:9d:fa:e7:6f:bd:
                    49:4a:f1:7a:3f:a6:16:47:eb:40:42:18:49:b2:0e:
                    52:fb:c5:86:17:13:b5:3d:fe:f1:61:66:b3:44:fe:
                    b6:30:91:ee:ad:71:3f:11:5d:aa:90:3d:a8:37:47:
                    2b:8a:00:06:2d:d5:72:34:b7:e4:7c:cd:24:7b:7b:
                    05:02:ab:d1:cd:36:d4:dd:e9:ef:69:68:c3:23:36:
                    73:e8:7d:de:06:75:df:13:72:16:fb:3a:dc:db:cb:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:A9:6E:CD:12:FA:C8:72:6E:BB:B3:93:A2:ED:21:04:E2:03:13
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:13:aa:fa:ad:ce:48:12:e1:f0:46:52:3e:12:1b:8f:1f:
         b5:05:dd:d9:3e:b2:05:91:2e:d8:0e:d7:ea:5d:fb:3f:84:eb:
         83:ae:20:fb:ee:04:51:59:ef:05:ce:73:ad:a7:5b:6d:d5:e6:
         17:12:8c:3c:20:3d:31:bb:33:fc:75:42:e7:aa:b0:4f:73:da:
         47:51:5a:ea:c9:d6:08:8a:67:5a:db:c5:8d:80:cd:5e:a0:46:
         68:f2:8d:74:80:34:e6:b3:61:c7:e5:73:2f:b0:58:dc:df:f3:
         be:7a:54:ad:f7:f7:fc:30:a2:5a:b5:dd:26:2f:b0:cd:21:ba:
         c2:7a:70:a0:b9:a4:d4:a5:20:fe:c8:a1:9a:7b:63:87:b0:92:
         34:8f:a2:71:3f:06:0d:1b:a4:06:6f:45:f2:57:3c:0e:3c:dc:
         e7:d9:42:5b:80:da:ba:d8:4a:84:eb:6d:ed:c2:ff:e4:9d:f8:
         4e:51:ee:b8:13:30:5c:5f:18:8b:ef:9a:2d:4a:62:4e:f1:2f:
         b0:bf:fb:8b:3f:69:a4:66:44:a2:8b:7c:93:bc:2d:a7:b4:68:
         8a:2d:98:7d:16:4c:b1:72:78:7f:79:13:fd:75:f3:ef:42:c9:
         db:32:30:e9:e6:31:32:dd:81:e7:6f:26:67:84:55:c0:58:66:
         61:57:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----