Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
File:                     DU7kd6rb1vbH8sonqPohowxrNXw.mft (raw, json)
Hash identifier:          WEUb/OdYPVX5j32tZUcaMx0ryJI6rDbHpwyScuGVgl4=
Subject key identifier:   59:F7:98:68:AA:C8:89:70:AA:EA:31:39:2C:76:41:43:44:B8:96:2C
Authority key identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
Certificate issuer:       /CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Certificate serial:       01962E98BE97F0460BF020A3B1B12B2315D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
Manifest number:          1079
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: DU7kd6rb1vbH8sonqPohowxrNXw.crl (hash: 4mc/1jcL4D1h7ltrAfHP/BqTG5pQnazbiAsW7ys+MkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:97:f0:46:0b:f0:20:a3:b1:b1:2b:23:15:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=59f79868aac88970aaea31392c76414344b8962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:c9:ef:b8:a3:ec:1d:e9:c0:23:43:a1:9f:
                    16:45:c3:2e:61:4b:71:8b:58:91:0a:07:fe:7f:f8:
                    a9:7d:ca:60:f8:e7:5d:97:ae:cd:8c:01:0d:26:3b:
                    7a:e3:3e:bc:dc:f7:ec:19:96:28:80:69:8d:c9:6b:
                    c9:c0:76:f0:bb:fe:16:ac:59:29:59:44:0c:b0:75:
                    2b:16:5c:28:d7:18:9a:85:1b:a3:34:51:25:54:04:
                    b5:68:f6:7c:0e:05:9d:52:ad:1a:d7:5c:56:d4:75:
                    5c:e3:bb:b3:44:99:0d:6c:48:48:8c:dc:56:e8:50:
                    e7:a5:63:79:94:aa:7e:fa:8d:85:39:30:a8:b8:c3:
                    da:f7:26:a6:5b:13:cb:55:b6:fa:69:cc:89:e2:f0:
                    52:d7:e2:8e:8e:38:bd:3d:e7:db:38:3a:f6:13:5e:
                    e3:48:28:56:35:ef:5d:69:71:26:d8:8a:7f:88:23:
                    cf:e5:e6:d0:82:5f:2a:b5:e8:f1:27:c7:a3:d7:02:
                    f5:71:3a:80:fd:79:ee:ab:77:2c:65:7d:c2:58:d4:
                    e3:5a:68:a7:ff:5d:40:89:ce:69:42:df:00:09:ba:
                    5d:02:20:3a:93:4d:c7:8c:38:6a:f9:55:c9:94:fe:
                    c3:d5:92:90:19:5a:45:5c:dc:93:e3:bb:c7:ae:36:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:98:68:AA:C8:89:70:AA:EA:31:39:2C:76:41:43:44:B8:96:2C
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:d9:86:16:d6:d0:c9:79:0d:0e:7f:03:08:6f:cd:cc:e6:
         a7:0c:a3:84:bd:fc:32:d4:dc:c3:19:96:ba:2b:f8:d2:14:db:
         e6:a2:32:fd:d2:19:c9:27:07:2d:0b:90:21:17:81:cc:ed:ce:
         fa:bd:bb:a8:60:5a:67:05:f0:9b:77:ca:09:61:cc:b8:77:01:
         90:7f:76:b6:bf:f4:fa:75:66:8d:5f:2a:3a:e6:b9:9f:e6:5d:
         e6:6a:36:c1:c4:0f:db:f0:e9:d6:e8:2b:c3:86:f5:20:13:7f:
         06:7a:8c:8d:96:4a:80:21:b0:c7:29:b1:95:d0:f8:b4:27:2b:
         04:20:5a:fe:01:a2:3c:06:c4:c9:d5:9f:4a:23:2e:78:d1:38:
         2b:35:69:e7:42:3f:f7:ae:34:59:12:35:6c:d6:2b:33:6a:13:
         9b:68:3b:41:07:0e:5d:76:65:5d:4f:6e:b9:20:5c:c5:b9:e9:
         e4:41:9c:84:5b:77:6a:51:2f:9c:01:0a:43:01:3f:55:dc:25:
         65:d0:a5:49:11:ef:19:ff:e4:eb:02:cc:7a:db:8a:51:4f:94:
         1e:6a:04:c1:82:32:9a:6e:b5:c0:48:69:99:b3:f8:7b:b0:02:
         d5:fe:62:93:14:4a:45:2f:27:22:a9:4d:99:37:90:6f:c2:56:
         fc:cd:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----