Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File:                     r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier:          JwdjG3whWUfn3C3aY+cLA26YbRnsUzHhdLkeldtxUCE=
Subject key identifier:   F3:27:08:1C:92:E0:A9:55:CE:79:81:A9:D3:04:81:C5:8D:78:B5:7F
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer:       /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial:       01962E99ABAE3907DB437CF22A85A792A934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: rY2cJiaS2uJkluA1Ofl/RRxAez6iHfsI/+BW3yhyNAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:ae:39:07:db:43:7c:f2:2a:85:a7:92:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=f327081c92e0a955ce7981a9d30481c58d78b57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:f2:5a:3b:2f:db:b1:7d:e1:b8:b3:41:66:
                    5b:25:1a:10:ec:7e:99:0b:73:71:14:1c:80:66:36:
                    5b:02:7b:9d:5b:42:30:9c:26:eb:db:5e:b9:4e:e1:
                    df:85:f8:62:75:86:c0:27:49:9f:81:99:e2:ef:03:
                    20:2a:de:58:4a:09:1b:62:ce:67:9b:24:d2:a1:93:
                    19:5a:88:24:76:38:48:4f:8a:b2:56:8e:42:6c:0e:
                    b2:48:0b:64:8f:df:28:9f:42:f9:71:b2:df:af:01:
                    21:f7:93:aa:1d:2d:62:c3:ec:f3:b7:b5:33:55:01:
                    0b:ec:50:58:8c:65:7a:5a:18:61:4d:b0:c1:fd:01:
                    2f:6e:71:57:0d:9e:47:13:cb:64:47:c3:72:ad:96:
                    f6:7b:1d:33:d8:1f:d5:f3:26:a1:45:f0:be:ae:f3:
                    6a:95:9c:39:ee:1c:82:49:d1:6b:a3:af:a6:19:e7:
                    ea:1b:de:1b:3f:e4:2d:33:7f:5b:96:d0:70:92:06:
                    ad:a1:fd:58:15:1c:83:79:a7:49:d1:0c:f3:29:3a:
                    54:be:71:06:60:56:42:0b:3a:74:c0:97:fd:8d:c8:
                    cb:12:c3:66:f9:c5:31:7a:8d:f6:ad:0c:82:f2:39:
                    5d:b1:fd:d4:b6:1c:54:84:f6:66:b0:d7:8f:dd:ae:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:08:1C:92:E0:A9:55:CE:79:81:A9:D3:04:81:C5:8D:78:B5:7F
            X509v3 Authority Key Identifier:
                keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:05:e8:74:ad:f8:f1:6b:59:c5:4c:df:6e:e1:c1:b7:50:
         8a:18:61:5d:ce:e5:17:6e:53:f5:cf:87:af:b0:2b:18:8f:3e:
         ee:da:8b:2f:38:93:52:95:03:71:11:17:6c:12:0f:13:04:75:
         e7:2c:34:30:90:6a:2f:27:16:8c:81:f1:ff:19:92:d9:48:e3:
         73:d4:d5:53:5f:00:28:f1:d4:1a:c1:05:58:d4:9f:26:4b:c4:
         b7:91:63:f9:5b:ae:d0:5d:16:3a:a5:7b:66:5b:08:c4:c1:c1:
         0e:cd:60:2f:5b:6c:96:e9:f9:5a:44:39:29:da:67:f4:b4:b0:
         f1:0a:2b:94:e6:9d:52:2e:aa:7d:b5:5a:78:89:e6:80:77:ca:
         d6:51:06:f1:0e:58:59:c3:3f:71:73:5a:af:9a:74:eb:9c:0b:
         63:f8:f8:9f:db:92:d2:cb:aa:83:da:94:28:06:fc:68:e4:57:
         ac:3d:ad:84:0f:92:21:be:eb:a7:ee:eb:09:a9:e1:cc:78:99:
         bc:b3:fe:18:3b:33:73:b6:60:a4:94:c4:13:e6:cc:3b:fe:3a:
         8b:6e:c2:bb:3f:42:64:31:f2:43:25:b1:48:ec:96:89:9a:b8:
         3c:72:23:4f:a2:e8:82:1c:31:00:62:f0:f3:d8:04:d0:1e:73:
         9d:a1:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----