Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
File:                     dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json)
Hash identifier:          /py2GqUuRKuyaE45jfqPwfgj/v2MuVwL7SpJjbQ0MzM=
Subject key identifier:   46:A5:A7:B9:89:86:25:3A:37:98:54:9E:C7:9B:57:10:67:FD:58:4A
Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
Certificate issuer:       /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Certificate serial:       01962F3D9E757A2394499B157AC73A168F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
Manifest number:          03F6
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: r7mSZsBoSwWaAXISO3LSmsPjKKaThpcJmu4kkPVrGmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9e:75:7a:23:94:49:9b:15:7a:c7:3a:16:8f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=46a5a7b98986253a3798549ec79b571067fd584a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:4b:dc:b9:1d:b2:e7:60:d8:f6:7b:5d:5d:
                    52:1c:db:cf:a0:d1:c8:97:bf:28:53:18:60:17:5a:
                    f8:a9:6d:60:3c:0e:ca:3a:17:d1:1f:eb:10:aa:fb:
                    f6:c8:79:99:53:fe:04:4c:78:8c:e0:3c:cb:8f:bf:
                    d4:c9:0d:7e:cf:8f:62:05:03:f6:38:3e:89:88:8f:
                    55:7c:e9:ad:ca:bd:5f:23:81:ee:5c:b2:bf:14:ad:
                    66:87:15:40:64:3e:78:71:ed:52:69:2c:36:6e:b3:
                    20:df:b3:99:bb:fd:18:1e:92:d4:c8:09:81:5d:e3:
                    96:8d:88:66:d3:eb:f8:57:ee:0e:f9:57:75:e4:e2:
                    50:c3:6f:61:c3:37:6b:9c:9b:63:2e:82:77:1c:f9:
                    b6:03:79:a3:2d:f2:4e:4d:c5:e2:fa:f2:98:89:74:
                    16:96:69:eb:10:e5:de:fc:f5:1f:fe:1c:01:2e:b1:
                    9e:4f:c2:63:d0:3e:81:dd:5c:bb:4f:5d:1f:5d:9f:
                    31:cd:68:dc:a4:62:bf:c6:0f:8c:e9:d2:9b:ca:63:
                    b3:39:5b:5c:bb:ff:29:da:a7:3b:4b:c3:c2:66:ba:
                    00:eb:2d:54:06:dc:b2:99:4d:89:6a:1c:9c:61:c5:
                    42:10:5b:41:8b:9e:cc:ed:b9:a3:7f:6e:8c:11:7e:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:A7:B9:89:86:25:3A:37:98:54:9E:C7:9B:57:10:67:FD:58:4A
            X509v3 Authority Key Identifier:
                keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:a1:6b:d8:1a:66:44:14:33:29:01:e9:43:cc:70:19:c0:
         4e:2f:f9:3e:3b:34:ea:e6:a1:fe:c2:6b:02:ab:74:a3:91:4e:
         59:a3:51:5b:bc:b4:ba:ab:6b:06:78:c0:d7:fe:f1:62:8c:b3:
         bc:41:57:8a:72:b9:a3:d2:77:1b:12:e4:97:a9:42:aa:b6:44:
         d7:9c:c2:41:f9:8f:b3:cb:bf:7a:8e:56:25:e0:d5:25:50:95:
         7d:ca:46:5d:d6:55:89:9f:90:94:a8:8b:54:39:65:ce:a1:d9:
         54:12:ab:5f:a6:c1:e3:97:39:13:e7:d4:61:7b:f9:ce:c5:80:
         88:a4:29:78:bd:6c:f3:56:e7:0d:f0:03:72:10:00:89:b1:55:
         3c:ef:f1:0c:b5:c1:4b:ae:92:f1:68:59:fe:c0:6e:25:0c:e2:
         fa:80:a5:2e:f3:85:ee:35:e7:1b:98:c4:10:73:1e:1f:7e:14:
         68:60:0b:31:11:3b:7b:2b:4e:ce:4c:6f:9e:e6:4c:7d:e9:72:
         05:be:7e:48:b4:fc:cf:02:8a:e9:df:12:82:57:7a:e3:54:c7:
         bb:e0:61:c7:a9:3c:28:ae:f7:97:92:e3:59:09:9f:4d:99:2e:
         6e:a2:40:28:58:0b:92:8d:45:25:90:4c:c0:28:31:2d:59:d0:
         be:52:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----