Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File:                     MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier:          xnLqRCaaCfuCbAKww6QhjidVwEcFNBeczQbMVIzdEfE=
Subject key identifier:   FD:F0:84:4E:60:18:E1:77:DA:E1:BE:1F:FF:E7:B3:57:E2:F9:36:3D
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer:       /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial:       01962F3D4BF1246C9D9D071A618FB79342A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number:          140E
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: /3f9E77zkHGdVUXzb3NT5ku+DzAvA123QhemzmEpDdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:f1:24:6c:9d:9d:07:1a:61:8f:b7:93:42:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=fdf0844e6018e177dae1be1fffe7b357e2f9363d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:67:8e:ae:cd:09:5b:43:d4:7d:94:4e:7a:
                    05:3f:e7:be:d1:53:b7:87:2b:f1:c9:68:b3:30:d2:
                    46:46:87:b1:36:8d:b8:30:6f:fd:4a:94:1c:fb:06:
                    fc:53:b5:a9:1d:f9:a4:d0:d8:02:24:ca:9a:5e:19:
                    4e:44:3f:a1:0c:45:04:3f:a1:97:06:d8:88:a2:ce:
                    28:68:bf:a5:2a:12:f5:2e:7f:a0:15:e1:46:68:48:
                    95:37:d8:dc:d8:54:65:1c:95:95:08:cf:6c:41:05:
                    15:3e:33:bc:69:0c:be:85:79:22:da:c7:02:89:fb:
                    11:3e:d8:b8:14:b4:e6:4a:ef:99:30:f9:bb:ce:c5:
                    23:c0:b2:d6:d9:8d:bc:f8:f7:74:7b:cd:cd:89:87:
                    06:90:cc:68:98:d3:c3:df:9a:d6:a1:3d:cc:97:0a:
                    33:ea:2b:b7:b9:5b:13:c2:cf:d5:5e:7d:53:65:ab:
                    9c:51:e4:cf:4c:7d:41:5b:67:2f:a6:37:6c:91:33:
                    1b:01:e4:93:e9:2f:39:93:6d:d9:8b:e1:8b:53:3d:
                    0c:6c:20:3b:f4:f6:c0:c0:a6:d1:6f:33:eb:6e:95:
                    3f:9a:71:8a:18:f6:6e:d7:15:53:25:2b:06:b1:6d:
                    33:43:53:3e:8e:75:28:4c:fc:bc:cc:9a:ea:fd:8b:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:84:4E:60:18:E1:77:DA:E1:BE:1F:FF:E7:B3:57:E2:F9:36:3D
            X509v3 Authority Key Identifier:
                keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:75:37:81:f6:22:89:28:ad:d2:11:c7:ff:8b:f8:cb:3d:d1:
         0b:07:0c:76:25:f9:ac:db:03:40:c7:55:60:ea:7b:19:af:dc:
         06:f3:7f:9c:bf:17:d0:9b:f6:b5:70:ee:1c:94:e3:21:6f:5f:
         52:83:27:d1:88:4d:80:8f:54:d2:75:89:7a:98:88:1c:d2:6b:
         ae:14:7f:03:4f:87:97:4c:b8:0d:61:77:30:f9:ff:29:d3:95:
         98:63:73:9c:ee:ff:cb:fd:7c:17:c0:c0:70:1e:b6:07:fe:5d:
         4b:b3:4a:b5:33:7e:99:ab:33:16:a9:81:29:51:1d:3a:46:ef:
         43:88:3b:17:97:6b:dd:ad:7a:a7:7d:df:b0:5a:2a:a7:f6:46:
         33:2a:ce:81:49:75:dd:30:b6:f2:6e:5d:7f:7d:02:c3:3f:87:
         92:5e:e5:f5:57:8d:14:2f:a2:1c:c4:a3:10:59:40:88:c7:0a:
         3c:b9:04:20:19:0e:86:03:3a:c5:8f:ae:0f:f2:ca:d3:32:6f:
         af:f8:ac:e9:da:da:5c:5c:16:8e:a8:55:8f:45:9a:20:f4:19:
         e0:c2:f7:df:58:f0:34:1f:ac:94:a9:50:94:65:84:7e:23:46:
         a3:b8:55:15:a3:79:f7:3f:86:4e:c5:cd:ca:86:4e:16:ca:4d:
         a1:bf:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----