Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File:                     l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier:          lLDc5+LnJcmH+zrKfyLbT4S0W4F7MPwqQCBAP+jK4QI=
Subject key identifier:   C0:C1:C2:CB:C5:43:5C:21:6E:1D:5C:1D:EF:79:28:9C:75:87:A6:30
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer:       /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial:       01962F74F1D99B2D50BFB0B50BC99078EEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number:          0695
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: Qc3W0lcJa5JUzlsG8Zh5RlqKflLt7AAHxxXRk03YruI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f1:d9:9b:2d:50:bf:b0:b5:0b:c9:90:78:ee:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=c0c1c2cbc5435c216e1d5c1def79289c7587a630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:bd:1a:dc:c7:ac:52:f9:ba:b0:70:fa:bf:
                    b7:3f:cd:e1:23:20:65:e0:50:ab:51:10:6f:b2:fe:
                    52:be:7e:25:b1:38:15:a1:30:46:a0:14:15:dc:73:
                    47:1a:e3:fd:fb:c9:91:98:35:f8:40:e4:88:13:81:
                    04:8a:67:70:65:3a:d9:8d:7c:f8:87:24:c6:b5:cd:
                    6c:98:2d:9a:4d:98:64:db:49:31:fb:d5:8a:be:5a:
                    21:38:bf:c0:c4:85:20:b4:47:2a:3e:a3:d2:a2:19:
                    60:ce:fa:9c:f0:45:55:7b:c7:4f:56:2f:f1:a3:16:
                    fc:95:c3:95:41:5b:f5:9b:1a:10:2b:1a:de:be:0d:
                    cf:51:f7:75:f0:63:d9:ec:c4:a6:cf:6d:f8:3c:3d:
                    0d:00:60:a7:ae:ed:98:33:4e:a4:b7:21:4a:f2:ee:
                    2b:c3:31:09:d8:76:96:63:77:74:1a:90:6f:fe:64:
                    44:e6:6c:b2:36:a6:8a:68:62:72:1f:86:d6:d9:03:
                    2d:4b:a4:86:c7:4b:29:d8:ed:d2:08:be:e9:08:84:
                    92:6f:b8:36:19:8a:54:ae:f8:9f:d3:98:f7:e2:f4:
                    97:c9:77:70:11:90:71:33:86:ff:a0:c8:29:6a:92:
                    18:d2:fb:64:69:20:60:8a:29:e4:ee:ee:aa:bc:55:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:C2:CB:C5:43:5C:21:6E:1D:5C:1D:EF:79:28:9C:75:87:A6:30
            X509v3 Authority Key Identifier:
                keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:2b:1b:d5:ec:bc:80:78:e0:30:7a:10:6e:30:15:ae:63:
         06:8c:ff:3e:e3:6a:a6:e2:d2:14:ba:47:f3:97:80:d5:d2:be:
         58:08:ef:21:76:29:50:8b:dc:bd:24:a2:8e:8f:00:10:a5:2f:
         09:69:23:97:a3:7c:e9:1d:8e:31:4d:08:f8:1b:13:53:81:7b:
         fa:63:1b:67:33:e1:c2:88:48:4b:7e:64:04:9a:2a:4b:1d:67:
         cb:93:a5:c6:e3:01:5a:9c:cf:ae:80:9a:b3:cf:20:9e:99:40:
         49:9a:bd:76:d8:2f:7d:76:a3:dc:23:8d:be:75:30:7e:f4:7b:
         fa:d8:ae:37:ac:62:dc:e4:16:10:64:fd:9e:b2:6f:45:cd:2c:
         4b:ba:ad:b5:31:68:4a:d7:46:12:63:bf:75:31:86:70:1a:05:
         e2:39:93:de:05:ea:28:f9:5a:8c:19:0b:00:cd:22:0d:48:4a:
         23:4c:14:84:f7:9f:d7:46:da:b5:8a:f8:02:8a:5c:0e:88:ac:
         61:e9:55:e4:77:6e:74:5a:db:08:c8:3e:57:ab:43:b5:aa:c2:
         3d:cd:f5:be:ae:bf:a2:97:c8:f1:f7:f9:22:92:fe:b2:6d:bf:
         40:a6:02:ab:b5:64:19:d8:7f:80:c7:49:0f:43:07:ef:36:cd:
         6e:92:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----