Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File:                     aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier:          I7muQqbJ/l1zx2MjZh/CoBvE1VqsPHYZ+wDJ5em2uNM=
Subject key identifier:   5B:CD:C9:F6:AA:0E:03:68:AD:C0:74:78:19:9F:8E:2E:50:BD:92:CA
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer:       /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial:       01962F74EC03B0EFEEA0FD87E7185883C1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number:          0239
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: /ETrn52Bd1f6PidEIOFuvhlZBj9ujAxKYT7FMFlzSts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:03:b0:ef:ee:a0:fd:87:e7:18:58:83:c1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=5bcdc9f6aa0e0368adc07478199f8e2e50bd92ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:ac:07:51:cf:5a:c2:d3:25:9c:d5:87:e5:
                    28:41:c7:30:ba:3c:fd:0a:74:56:2f:a6:0b:25:72:
                    4f:26:d4:6d:43:ed:f4:5e:c9:f9:73:27:4c:b1:0b:
                    92:0c:74:f2:29:39:e0:83:99:2c:1c:ef:8c:cc:10:
                    61:5b:61:f7:a7:8c:35:46:33:ee:b5:c2:aa:26:19:
                    7c:7e:28:a1:8e:da:b9:53:25:54:33:7f:53:a4:2c:
                    83:fc:da:24:26:10:41:43:55:4e:e1:63:a6:2a:b3:
                    a3:f2:3b:53:10:5f:bb:fd:52:db:74:e6:b8:39:47:
                    93:02:57:db:1d:39:67:f1:07:14:9c:e7:40:1a:0a:
                    83:8d:1b:99:a1:86:fe:62:ff:09:63:ac:36:ff:54:
                    1a:62:e6:e9:8f:ce:18:9d:a2:c7:b8:3f:74:8c:3a:
                    24:44:3d:e5:db:c5:59:59:6c:bd:14:65:11:5f:69:
                    4a:6a:32:90:a7:ba:39:c7:6f:21:7e:50:8c:21:36:
                    9e:99:5a:cd:a3:9c:32:5e:27:ca:36:69:20:16:6d:
                    ae:0a:7f:02:e0:6c:11:32:76:37:e4:0c:82:96:33:
                    d8:01:ac:04:bf:14:af:45:2c:1a:4f:70:83:c2:44:
                    33:08:ff:67:ea:c8:de:79:96:99:8e:be:ae:6b:ac:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:C9:F6:AA:0E:03:68:AD:C0:74:78:19:9F:8E:2E:50:BD:92:CA
            X509v3 Authority Key Identifier:
                keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:33:ee:a4:e7:f6:30:76:23:3c:7a:0d:ac:2d:a5:30:7a:
         2d:98:34:f3:13:6a:1c:fb:03:cf:59:d0:74:a1:66:e4:0e:ed:
         68:a8:8e:be:18:ea:dd:c2:8f:f9:84:4b:18:2c:02:87:6e:5c:
         7a:83:89:f9:f3:df:1b:b8:46:34:14:0f:c9:f5:1f:b4:67:10:
         36:e7:ae:be:3c:7c:ec:62:6e:6f:f8:8f:f8:f7:d2:4a:36:1e:
         28:82:40:20:b5:82:5c:93:ea:a1:ad:66:04:b5:16:0a:24:4c:
         6c:5b:ff:eb:fc:2e:9d:e8:d7:44:9d:13:1b:a8:12:b4:39:67:
         58:d2:85:c2:cb:84:96:1e:bf:59:96:eb:bf:7b:85:74:68:c3:
         9a:36:84:1f:8d:8b:e3:89:88:15:b9:19:9f:72:38:31:33:15:
         0d:47:f2:67:2a:46:dd:00:09:10:ca:6d:93:cf:4f:73:e4:1b:
         94:06:48:69:b4:6e:52:d6:95:cc:82:bb:b9:a4:e9:b3:88:00:
         b9:46:e2:98:15:18:62:20:9d:54:d2:c4:8a:7f:95:fb:ca:38:
         e6:5d:4d:70:06:fc:5c:fe:34:2b:07:de:d2:ec:f1:ad:f3:cf:
         97:6a:46:60:15:d2:c7:27:b3:ff:87:a8:92:0e:3a:53:43:fd:
         d8:4f:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----