Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
File:                     dZxU7z8HSxxmiPmXVM2KONmfbKw.mft (raw, json)
Hash identifier:          gsClw1pkz8KMNEv9KfA59M8FneneHnnPdT5gbYjCLDY=
Subject key identifier:   4B:27:D6:4F:BA:3E:F4:58:C0:B0:35:8D:62:27:22:CC:95:D3:F0:C3
Authority key identifier: 75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC
Certificate issuer:       /CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
Certificate serial:       01962F3DC9942306E62AA1B573BA4F7E8BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
Manifest number:          088A
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: dZxU7z8HSxxmiPmXVM2KONmfbKw.crl (hash: BwQIqaXTVr8y7TeqP5khixJ//ebG67QErp3miBWv3Cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:94:23:06:e6:2a:a1:b5:73:ba:4f:7e:8b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=4b27d64fba3ef458c0b0358d622722cc95d3f0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:3c:f0:1e:70:97:8c:11:3e:ee:e2:28:f2:
                    ba:ff:16:0f:5e:01:8d:bd:39:5d:f3:77:84:c5:f1:
                    98:d1:74:80:95:95:18:d6:7c:af:0c:25:d7:5c:f8:
                    55:28:5b:03:fc:90:aa:bd:89:ff:3a:65:52:32:5d:
                    65:96:77:ec:db:05:3a:a1:ee:ce:79:61:32:86:05:
                    9b:d1:82:ff:8c:7f:04:b0:4d:34:ef:45:0d:96:4a:
                    5c:e1:82:32:ad:63:7d:04:39:b8:1d:bb:5b:a1:f0:
                    b1:bf:45:1a:df:54:fb:7b:42:20:9c:af:16:2f:09:
                    d2:1e:a4:03:7e:0a:eb:03:8b:af:de:fe:f0:e2:e9:
                    93:08:fd:ae:38:2d:f7:0e:99:2a:f1:40:a2:62:1d:
                    e2:f6:36:d5:d8:03:7b:60:11:8f:33:aa:07:05:58:
                    09:f2:a4:3b:fa:b3:a0:d0:18:30:97:74:2e:45:14:
                    34:d2:da:41:81:4d:4e:c5:84:c3:87:e2:15:de:72:
                    4c:a1:dd:a1:39:44:d5:bd:ea:d5:f9:47:f4:94:f4:
                    e5:89:b6:39:4c:26:7b:72:c9:0d:05:4f:b5:62:b5:
                    2d:34:f6:5e:6d:70:38:7a:b1:d6:ae:95:d3:0a:69:
                    e9:36:ca:3a:88:8d:8c:e2:af:2d:6c:8b:b6:1e:67:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:27:D6:4F:BA:3E:F4:58:C0:B0:35:8D:62:27:22:CC:95:D3:F0:C3
            X509v3 Authority Key Identifier:
                keyid:75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:3f:c5:72:f0:ca:4a:2a:79:d6:4e:96:fb:f8:17:3b:c7:
         c3:2d:a6:99:ec:c8:09:03:dc:ce:8a:fa:79:76:bd:18:6c:af:
         a6:79:31:a9:38:64:91:92:28:87:45:a4:e4:61:6f:8a:07:1f:
         21:06:46:cb:d5:96:fe:fe:6f:ea:12:56:fa:67:6a:3c:25:99:
         1b:0c:a5:ee:2b:b7:db:49:61:a7:7a:36:3a:88:8a:c6:f8:df:
         b1:a0:d5:0e:75:20:48:e7:6c:48:2d:c4:03:94:34:7b:d2:1b:
         e6:38:b8:a3:38:62:3d:19:67:8d:9c:76:9f:62:a3:7c:7b:b6:
         b0:e1:0e:78:da:68:d4:7d:99:9e:aa:53:0d:3a:67:c2:2a:d6:
         bc:b3:95:a5:10:d3:db:4c:2a:43:01:5d:e7:ff:c9:bc:b4:1c:
         02:b0:b8:fe:58:3f:36:23:32:f5:e1:7f:7b:98:0b:7d:ec:f4:
         a8:cf:56:83:c0:34:40:be:42:57:b6:6c:c9:66:57:6c:33:89:
         7a:0c:62:cc:8c:59:b4:3b:bd:59:aa:45:da:56:9e:54:e0:ef:
         24:30:ec:e7:51:49:0c:31:c4:d6:89:8e:c3:18:ca:55:7c:95:
         dc:a9:06:3b:ba:5d:dc:34:a4:46:4d:3d:05:41:13:c6:2c:93:
         e5:d2:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----