Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File:                     MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier:          R+Dk9J2dB0f7FcXbkx9yE0aDXh5wyVMlug8KQApm8co=
Subject key identifier:   F5:30:FF:9E:B1:18:1A:D9:81:C9:C6:A0:CE:2E:7C:80:BD:67:3F:64
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer:       /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial:       01962E98CAEA1AB91D5B29E19B6DFAF12C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number:          067D
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: SCE0zBQ6Jow8RkjXPJwbmSZIRhnwdJGIA/Nut96I7QE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:ea:1a:b9:1d:5b:29:e1:9b:6d:fa:f1:2c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=f530ff9eb1181ad981c9c6a0ce2e7c80bd673f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:51:fc:c8:b9:40:ac:b0:5c:53:54:db:8a:
                    b7:6f:be:00:64:40:7c:85:51:84:96:e0:95:2e:e6:
                    82:22:2f:83:e5:a8:ca:5e:d2:ce:2a:6b:ce:15:38:
                    77:0a:99:c2:e6:51:4e:27:1a:e9:df:2d:fb:e7:18:
                    f4:77:7a:1f:16:fc:d1:e7:67:04:f9:54:39:be:dc:
                    9f:e0:04:c8:32:bd:9d:70:60:c1:d9:b4:b0:fb:88:
                    8d:3b:67:c2:2b:dd:03:8f:4d:d5:42:b1:cb:26:74:
                    13:38:15:80:69:28:f2:f5:20:8a:a5:6d:d5:bd:11:
                    35:6a:c8:ed:88:da:5a:b6:d7:8d:9e:5c:a7:27:34:
                    f8:4b:65:92:6d:3a:17:1d:c9:08:57:6a:21:c0:38:
                    75:35:04:54:d1:f5:c5:f1:6e:93:5b:67:64:23:fb:
                    9b:b1:36:4b:74:dd:ab:aa:9c:e2:14:cf:5b:47:d0:
                    ad:29:a1:b5:a0:79:ce:f9:46:86:0b:46:2d:41:e7:
                    45:bc:ef:17:7c:34:a6:53:2e:be:68:4c:b7:51:72:
                    0e:d5:82:41:d5:21:80:f1:7d:95:7e:3c:fe:8f:ab:
                    8a:8f:9a:64:10:85:f4:d9:6b:b2:44:e5:2a:ef:f9:
                    62:7a:25:5e:83:84:1a:3c:9d:2e:80:ec:19:bf:52:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:FF:9E:B1:18:1A:D9:81:C9:C6:A0:CE:2E:7C:80:BD:67:3F:64
            X509v3 Authority Key Identifier:
                keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:0b:0a:ff:46:aa:19:0e:52:7d:51:53:2b:0b:c9:f8:2b:
         f8:26:01:61:e0:08:8e:c8:b0:3c:79:0d:0c:6f:3e:f5:d3:18:
         8f:b4:64:31:04:72:ce:61:9e:df:fc:32:21:f8:88:38:07:62:
         14:a0:c4:34:e8:42:33:c1:52:91:62:8f:42:4a:de:f3:27:47:
         97:d0:e9:fa:9f:c1:61:3f:55:cd:ba:e5:cc:bd:0d:9d:a5:f5:
         4b:87:69:0b:f0:4b:d7:7f:1b:6e:8a:09:9b:e5:e3:0e:5e:9f:
         c4:00:ac:8f:0e:2a:9a:e8:eb:c5:71:c6:08:53:fd:5e:0c:a6:
         04:74:2b:8b:89:42:ca:4f:a2:c2:37:91:c0:83:14:10:e9:76:
         76:b4:b7:c4:72:fc:a3:b6:6b:26:95:f0:d1:70:20:92:38:04:
         17:42:33:61:11:38:2d:73:41:e5:9f:f6:57:31:be:14:ca:e1:
         d2:21:60:89:47:2f:23:d5:ef:f4:06:09:30:e1:55:c3:a3:33:
         da:45:84:c4:32:4b:6e:0f:7a:d1:6c:ae:89:02:c7:6b:f3:16:
         b7:6a:2c:ac:04:97:77:d0:93:e6:ea:4c:ca:6a:50:d7:85:a4:
         26:c2:1f:6e:35:60:4d:39:2c:26:1d:6e:05:f1:8d:a3:c3:94:
         1c:9b:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----