Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
File:                     LiM0uQviK2Ggyoc_AQd06ONWGRY.mft (raw, json)
Hash identifier:          x6WWYSb8ijIIMjj80b8Y9ZNdV+zKUTmP0n85kCMFED8=
Subject key identifier:   7F:CC:B3:94:13:6F:05:D8:60:6E:4F:F8:A9:4B:11:EB:9D:6A:D3:FB
Authority key identifier: 2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16
Certificate issuer:       /CN=2e2334b90be22b61a0ca873f010774e8e3561916
Certificate serial:       01962F06E0DE9F0661D87617DD19C7627A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
Manifest number:          090A
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: LiM0uQviK2Ggyoc_AQd06ONWGRY.crl (hash: jnVqcbUprf7rynnsoQGfqU0kZUlzRMCgpGWOgXxZMY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:de:9f:06:61:d8:76:17:dd:19:c7:62:7a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2334b90be22b61a0ca873f010774e8e3561916
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=7fccb394136f05d8606e4ff8a94b11eb9d6ad3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:bf:57:57:25:e4:7a:ff:63:04:97:fa:d0:
                    51:54:c5:25:3b:c9:4f:b9:76:8c:b7:6f:bb:06:40:
                    b3:1f:1e:61:a4:dc:21:48:b4:8d:58:1b:83:87:e4:
                    8f:4c:3f:30:8d:10:92:7a:6c:e0:c4:f2:02:45:46:
                    f5:c2:e6:31:e5:b6:4b:31:71:90:33:01:40:48:14:
                    3c:2c:c9:db:61:71:04:0c:31:ad:a4:c9:be:19:e4:
                    e1:e0:04:20:c4:aa:8d:e1:68:80:3b:ad:a0:4e:2a:
                    94:d6:b9:43:91:cf:68:ac:05:35:45:b2:42:ab:88:
                    25:e8:1a:ca:d3:cd:f1:97:9e:dd:b8:4e:63:9b:d4:
                    ee:4d:04:a6:bf:80:7a:6c:10:52:0f:aa:95:10:02:
                    56:b4:d0:90:12:6f:c0:9d:95:4d:de:4b:e4:8c:63:
                    87:70:87:94:a5:2d:a4:fe:3d:8b:48:67:15:e3:98:
                    e6:f1:65:81:8a:43:56:f7:40:09:ae:8e:b5:5d:f3:
                    ac:8c:bd:1d:8d:17:2a:a5:53:21:0c:24:40:3f:68:
                    2d:a9:a9:53:ce:bd:21:20:cf:ea:58:8d:c3:8d:13:
                    8e:ca:ce:aa:fe:b7:cc:d9:83:8a:4f:90:41:47:70:
                    38:a3:d6:3b:bc:59:a4:75:cd:ca:cc:41:94:ac:a6:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:B3:94:13:6F:05:D8:60:6E:4F:F8:A9:4B:11:EB:9D:6A:D3:FB
            X509v3 Authority Key Identifier:
                keyid:2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:ae:d0:c4:4f:65:39:52:53:42:0d:ff:de:68:26:8d:97:
         b1:fd:98:6a:68:c6:10:b0:5d:d4:b6:25:eb:5b:60:6a:dc:ad:
         75:04:31:a6:14:e2:fe:f5:eb:4a:80:4b:2d:1f:37:13:5e:9a:
         2f:2c:c9:7e:cb:93:80:53:7e:c5:6e:7f:8e:00:93:7d:93:c9:
         be:bc:37:93:16:39:ae:f5:50:a2:86:d8:3e:a9:64:27:97:41:
         12:a5:8b:8e:04:10:96:f1:4e:11:3e:d3:a3:91:e7:4c:3e:6b:
         60:95:1f:05:d2:71:07:8b:8b:eb:46:ce:ba:7a:fb:55:2b:ba:
         8d:08:8f:88:d7:2f:84:16:e5:40:65:9f:cb:54:b1:1f:43:09:
         26:06:8b:19:33:26:15:00:5f:6b:b9:29:8a:89:32:5f:06:61:
         d2:e7:68:38:2d:a5:53:5d:76:86:aa:85:40:76:51:4e:c8:5c:
         88:f6:f5:78:76:42:98:29:9f:d6:0d:05:bb:47:9e:ba:e3:d1:
         72:d1:44:99:a4:0e:bc:cf:8d:64:48:e2:4c:1b:ba:7e:f9:ec:
         b3:d1:d6:ba:32:68:ed:bb:ac:8f:47:83:36:4e:dc:2d:eb:83:
         cf:12:ee:2d:9c:6d:e5:da:f5:c7:cf:4e:4b:b9:c0:d0:8f:28:
         b3:5a:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----