Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
File:                     RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json)
Hash identifier:          DSqiCl0IFit43k0ag0/YxV/54/3XDK8xX873LhDQBVc=
Subject key identifier:   53:D6:66:DD:4E:C2:79:BA:A1:9E:D4:B0:71:5F:4E:5C:5D:E5:92:08
Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
Certificate issuer:       /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Certificate serial:       01962FAB72AC1E7B4CD5E47E239DDDF93599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
Manifest number:          02C4
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: dGlngQN0oI6BLBES6r7YZXe1K6nBpY5yze20Mh2/DoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:72:ac:1e:7b:4c:d5:e4:7e:23:9d:dd:f9:35:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=53d666dd4ec279baa19ed4b0715f4e5c5de59208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:ae:54:0c:7a:02:48:f3:cf:28:1d:d7:c1:
                    ae:ea:d7:b5:a7:e4:e1:7b:a8:6c:0d:2a:4c:3d:45:
                    25:38:f7:d4:65:3a:68:05:52:53:88:a1:19:ce:a8:
                    d6:cc:d1:0b:35:b7:93:60:06:e2:28:81:ae:71:09:
                    29:94:c4:23:c4:28:08:d0:16:31:95:de:75:77:c8:
                    98:2f:f2:9f:aa:b2:aa:15:de:45:97:79:fa:aa:eb:
                    f6:97:2c:bb:0d:50:5f:d7:32:80:9c:97:bf:a2:c6:
                    b1:0c:d0:18:70:14:a1:26:e1:10:ef:9d:25:8b:3e:
                    91:6d:04:f8:d5:9b:70:38:6f:c3:a5:d2:23:9b:41:
                    cf:2a:ed:dc:9e:42:27:62:22:df:2c:26:97:b3:45:
                    6f:b2:8e:df:aa:0d:70:50:92:59:53:ca:ed:53:2e:
                    58:8c:bf:3a:19:ac:e3:13:7b:48:81:94:eb:44:4e:
                    a8:5a:34:0a:bd:ff:57:c3:b7:66:25:d2:71:43:19:
                    76:0d:42:d3:84:45:12:7c:68:97:5d:91:18:e9:28:
                    c8:59:77:70:fc:2f:fa:48:53:6a:48:2d:c5:07:f1:
                    14:5c:5e:da:48:78:03:88:8b:ef:74:69:ad:e0:2d:
                    3f:9c:52:7b:1d:75:81:29:79:a1:1c:c5:fa:32:ca:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:66:DD:4E:C2:79:BA:A1:9E:D4:B0:71:5F:4E:5C:5D:E5:92:08
            X509v3 Authority Key Identifier:
                keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:68:9d:84:28:45:33:6e:58:05:1b:89:83:ee:3c:56:af:
         19:b0:67:c5:de:e6:0d:5e:36:ad:aa:21:ed:b0:ca:4c:a4:4f:
         3b:1e:6c:45:cb:98:28:7c:8c:13:7b:3d:c4:ce:c2:0e:c2:c8:
         0f:0b:92:3b:21:00:83:17:59:be:14:bf:3d:9c:bf:4a:99:d8:
         e7:8b:16:c1:6d:ee:67:9a:82:ec:1d:b6:10:ae:c8:9a:9e:01:
         30:b0:75:1a:6c:e7:34:ec:de:c7:14:37:10:7d:a6:ae:a4:16:
         ea:df:7f:12:7a:a6:ea:db:8f:e2:c9:23:77:e1:50:b2:65:02:
         d1:7f:aa:c2:ff:00:f0:3f:e1:ed:a7:60:6f:ce:9c:88:f5:7f:
         e3:e7:ea:60:74:9e:9a:1f:3c:0a:cb:08:ef:be:fc:40:b4:d0:
         41:cb:9c:bd:96:22:98:bf:3d:72:aa:54:ea:f1:9c:e8:a1:e4:
         89:07:4b:93:c9:ab:d1:df:22:94:de:b8:da:df:76:c8:27:f9:
         e3:fd:70:f5:4e:a4:13:03:ba:fa:ee:82:f5:52:5e:23:28:b6:
         c8:d4:b3:f4:40:85:e8:f4:db:65:d6:6a:15:a8:21:99:5d:fb:
         80:23:05:b9:f9:a8:b1:d4:b4:3a:fe:2f:da:3a:8f:83:64:57:
         b0:31:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----