Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          AOZHal7sU5ef7yQhTSzuXK9CWO8zD0SMYi91TfqyjYY=
Subject key identifier:   FE:25:2D:AB:CC:E8:84:8F:AC:60:D7:42:1B:2B:41:C7:D2:43:55:CB
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       01962F06E8E05DB5741C0CC7EF4BD0BBF074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: sDCsJ7B5GfwZGxhxxYziH+z84KmUVn3DMHSoM+CIG7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e8:e0:5d:b5:74:1c:0c:c7:ef:4b:d0:bb:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=fe252dabcce8848fac60d7421b2b41c7d24355cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:7c:e3:6c:1e:d2:df:71:54:30:83:2d:ea:
                    bd:d0:81:fa:c6:a7:67:c1:96:77:95:bb:a1:ca:a3:
                    c2:d2:8c:26:fb:0c:c3:89:6c:0c:fd:28:09:5a:ff:
                    ef:75:da:49:02:dc:1b:f1:39:2d:e7:79:30:56:bd:
                    66:b4:5e:56:35:7b:73:be:c8:42:dd:27:f7:4a:6f:
                    23:db:6c:1b:86:49:1d:ff:9d:06:a3:64:a2:52:0d:
                    c1:cb:a9:6a:dd:7a:7f:58:37:60:1a:1a:e0:67:6b:
                    2a:a4:5d:6d:af:a6:f8:9b:a3:63:5c:c3:d5:51:a7:
                    f4:a0:75:90:c8:f0:c0:6e:ca:13:74:b7:95:36:d6:
                    ed:f8:e5:f2:b5:c7:ab:94:86:04:df:cc:a3:d0:a0:
                    07:35:e2:fb:67:4c:47:b9:bc:93:e9:b4:d3:67:e4:
                    27:dd:6f:49:92:7d:81:22:76:06:e7:1a:77:b0:e4:
                    ad:2e:aa:b5:af:44:a6:e6:34:eb:5f:bd:71:39:dc:
                    a7:d6:19:0a:e8:5f:cb:a8:ec:f1:58:88:da:f9:c4:
                    38:61:dd:f4:dd:0b:e9:fa:b8:ec:53:9b:83:41:81:
                    d4:ad:c3:52:32:e3:a4:28:48:fa:e3:9c:b2:c0:0a:
                    02:92:d7:7f:af:40:f5:93:3d:f0:0c:e1:e1:18:42:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:25:2D:AB:CC:E8:84:8F:AC:60:D7:42:1B:2B:41:C7:D2:43:55:CB
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:1f:e5:a3:71:dd:4f:2d:90:06:54:ab:93:68:3e:b1:ca:
         d0:8c:dc:ff:61:f9:2e:bc:cb:c3:48:c4:21:24:54:ae:4f:6b:
         0d:d3:b1:19:e8:c9:41:64:b5:03:ae:ea:53:0f:da:a1:6b:ba:
         0f:48:23:51:4a:e4:8a:7f:70:2b:0b:5f:fa:7f:a0:52:1d:41:
         a3:28:f1:77:dd:0f:8f:e3:01:a9:9c:38:04:24:67:18:02:df:
         fe:f4:44:6c:80:3f:6a:61:51:48:2a:01:08:71:9b:62:2f:4f:
         74:fe:0f:a5:a7:37:79:76:e0:48:91:d7:ad:12:0c:c8:f1:5b:
         d4:26:0a:09:b1:0e:81:3f:02:44:1e:a1:89:9b:74:e4:48:86:
         fd:72:b0:28:0a:d4:86:4b:7c:5f:51:43:51:75:60:dc:6c:31:
         57:4c:41:1b:87:63:f0:34:3d:70:ca:f2:bf:8b:f4:28:60:dc:
         86:69:55:80:ad:21:1c:1d:fe:d8:d5:2a:f8:13:e2:35:de:c7:
         bd:ac:db:34:cb:04:52:5e:7a:11:33:97:d1:91:5d:d3:0c:e6:
         95:1c:a1:a3:d6:ed:1c:a7:ac:67:75:3a:73:d5:78:a3:a0:cc:
         75:6b:dc:80:2b:6c:a2:02:68:7b:35:e0:78:41:45:31:0d:7b:
         26:bd:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----