Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          loQeurDl2hq9xHNPTykSFS+8YjHV6ImCmoESxNsTxxU=
Subject key identifier:   9C:5B:52:34:8C:2D:35:C2:9A:61:84:00:5F:33:4A:67:E9:50:77:EF
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       01962F06D8083CD2F7BC6399E6CC699F79DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: 5lU5UJjnlL5tRucyJxC7b3thQFlGB8SJn9CXeNzuq6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:08:3c:d2:f7:bc:63:99:e6:cc:69:9f:79:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=9c5b52348c2d35c29a6184005f334a67e95077ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:56:56:c3:67:5c:82:b8:d5:40:fd:dd:8a:
                    b7:05:c1:63:10:03:01:93:97:be:40:7f:cc:ad:39:
                    d4:2b:ca:80:60:e7:46:d5:67:7d:5b:b3:cd:22:c3:
                    7b:50:34:c5:2a:be:b1:00:f3:6b:e0:83:7c:b1:d8:
                    6f:b1:4b:bc:4a:83:85:1c:a0:4d:59:57:da:76:17:
                    fa:a3:f6:c9:aa:0e:03:71:80:40:61:11:93:1c:fe:
                    0f:29:d4:6f:2c:74:15:b2:96:12:e2:12:cd:94:3e:
                    cf:ca:45:74:a8:78:67:5b:b7:7b:d3:52:e8:21:82:
                    c5:4a:dd:df:fe:2d:11:c7:79:0b:fc:ee:65:14:21:
                    97:c5:52:ff:03:1b:9c:e6:09:9a:89:f5:ba:aa:d3:
                    c5:3e:f0:e3:c1:7e:02:60:81:9c:dc:e7:e4:4e:ae:
                    0f:9d:61:10:c7:db:62:53:36:f9:81:23:da:ed:1d:
                    e4:3c:4b:64:67:df:85:ea:44:86:7d:c4:2f:bd:45:
                    f4:69:19:06:18:fd:d3:c1:da:ae:6a:9d:ff:26:2e:
                    54:5c:cf:9f:c4:6f:7d:5f:59:2b:f1:5b:30:e6:f9:
                    b5:c1:b8:0d:4b:1d:fe:8c:9b:62:da:08:90:cd:33:
                    65:53:fc:99:d8:76:1c:f6:c1:45:37:93:8c:1d:c8:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:52:34:8C:2D:35:C2:9A:61:84:00:5F:33:4A:67:E9:50:77:EF
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:9d:42:84:6e:06:04:57:aa:90:c1:e6:cd:97:00:26:be:
         30:ae:65:b8:2a:38:da:90:72:00:85:f1:93:02:2d:0c:13:14:
         34:48:b5:81:44:a3:6c:73:52:0a:c0:ff:70:22:f1:d3:b3:03:
         ed:f2:c7:97:94:44:da:26:97:a3:c2:27:2f:34:9a:c4:ab:6f:
         40:e2:b8:a5:ce:b7:b5:dc:c3:ff:fa:76:d0:b6:52:ce:40:2f:
         79:f4:bd:77:05:98:4c:ab:fc:a3:92:da:9e:98:76:ac:9b:b4:
         87:b1:3a:97:77:9d:bb:a4:ab:b0:bc:75:ab:da:a5:f1:3f:76:
         19:fe:a1:cc:2c:97:51:86:4b:85:ef:8e:b4:00:1d:ae:a6:5e:
         c8:48:36:33:58:4c:d4:8b:e3:d2:dc:ae:e9:fe:cb:8f:4c:11:
         52:e9:7e:42:cc:b4:52:2b:57:6a:02:40:73:6c:61:6f:e3:a7:
         83:f7:a9:70:d2:42:39:e4:f9:ee:9b:23:a8:4b:d1:b1:57:44:
         2c:c8:74:24:0b:28:ef:de:a6:44:21:ea:03:9a:0d:43:c2:32:
         e2:c1:9f:52:6c:3c:d2:67:31:1b:b0:4b:57:b0:ef:90:3a:49:
         49:02:e1:79:fc:93:2e:c1:66:13:01:be:13:b7:fa:58:e6:34:
         d6:83:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----