Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
File:                     sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json)
Hash identifier:          QcIoosdiPqapcuP1y2XT0Ay5Bv+k2KxAvKCzqhS1Ujw=
Subject key identifier:   2C:70:A9:F9:60:6E:58:25:E4:95:BF:A7:87:3F:16:26:5E:AA:7A:5A
Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Certificate issuer:       /CN=b1315f13168a22883da04b8408066073b1f3f0dc
Certificate serial:       01962E994B17C63E39EC2D6CCC676A740D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: usJz2xo9SdfWToIwoJC53v8K4ng7blYC0Yzd69Jd3wI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4b:17:c6:3e:39:ec:2d:6c:cc:67:6a:74:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=2c70a9f9606e5825e495bfa7873f16265eaa7a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:ab:01:cf:aa:a9:e5:c9:9f:f7:48:55:4a:
                    71:3a:bf:3e:29:fb:0f:07:0c:f1:de:5a:8c:2e:7d:
                    a9:4f:17:cb:3d:00:2d:59:0c:6a:f5:ab:e9:6d:db:
                    30:dd:ce:35:0d:a9:dd:f2:e1:5d:f7:83:86:e2:70:
                    2c:1a:68:31:d9:31:3e:c7:5e:b2:94:1c:70:d9:c2:
                    08:1f:2c:4d:41:cf:e3:c4:cc:d6:ba:df:63:f7:fc:
                    0b:6c:b5:c1:66:ef:28:08:1d:7e:19:c6:c8:5e:25:
                    b0:7f:da:09:e6:4d:af:fe:e0:e1:9d:1f:b5:e0:e6:
                    3f:ec:45:3c:78:92:a1:3c:a1:4a:f6:05:65:45:fb:
                    9f:5d:05:68:5e:2f:5a:36:5a:00:dc:dd:de:43:03:
                    61:a0:df:41:5a:c7:72:d8:a9:ba:10:83:69:d1:39:
                    46:99:5f:27:0d:06:5d:16:f2:0a:25:d3:7b:d2:ba:
                    8f:4d:db:dc:60:7b:f5:37:6b:55:9f:32:eb:d4:87:
                    9f:cc:80:96:ca:20:13:80:e8:39:e4:b1:60:3f:ef:
                    9e:ce:87:87:13:46:5a:23:93:c4:5b:ff:1f:c5:6a:
                    e5:3f:88:9b:81:1d:48:2f:98:c7:69:bf:57:5e:6e:
                    54:17:6f:8d:65:c2:a7:81:80:54:98:19:47:e8:56:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:A9:F9:60:6E:58:25:E4:95:BF:A7:87:3F:16:26:5E:AA:7A:5A
            X509v3 Authority Key Identifier:
                keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:78:6f:ba:16:c9:e9:31:49:3a:ef:61:39:f1:95:17:9f:c1:
         e4:55:5b:ad:00:c3:0d:70:e4:c5:8b:98:2e:32:a1:f8:c1:33:
         43:27:5c:3a:b0:54:a0:49:f3:41:68:0a:f8:8b:76:0b:c1:de:
         38:43:1d:66:b7:0d:56:ed:88:f6:57:ea:fa:c8:28:98:6a:ee:
         37:ca:e4:f2:1a:ad:57:db:f9:3d:66:b6:85:97:4f:7e:3c:b7:
         2c:49:a8:92:91:e6:1d:3b:cb:c0:29:1e:25:6b:47:e7:f3:83:
         7e:45:cc:d8:8d:01:82:3d:b4:06:87:cd:33:ee:d5:81:79:25:
         77:6f:de:a9:70:0b:85:af:b3:e3:5f:40:ca:c4:7f:aa:7c:4d:
         13:ab:37:5e:b3:0e:1c:fe:6a:ff:bd:8f:fd:7a:8f:de:31:2e:
         00:aa:9b:bb:70:a3:35:63:10:09:2c:4a:42:1d:a3:11:23:34:
         09:d5:66:be:18:da:3f:a5:dc:dd:f9:d2:88:44:14:fc:53:7b:
         ed:b9:5d:46:0a:18:2c:e6:1d:be:a6:4b:8c:42:a2:df:c6:6b:
         a7:f9:4c:82:2b:a5:dd:e4:c9:90:fa:38:c1:3d:aa:ec:77:ef:
         7e:1e:49:30:e0:b1:14:ce:75:8c:ff:e2:b9:dd:67:b1:6e:6b:
         07:df:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----