Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File:                     afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier:          tt91WlMMi/LZe7yOBR+yiSlGkaFWGQvmGZ1NLE/4LO4=
Subject key identifier:   23:86:E4:11:9A:30:5A:82:71:53:EB:80:D3:A6:C4:73:93:61:6C:D2
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer:       /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial:       01962E986A678704D55A0055C64918BC886B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number:          07BE
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: T2pAW1fF67z7jnmd5dS5B3lnh9wwXAyrASx3ZBHWCOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6a:67:87:04:d5:5a:00:55:c6:49:18:bc:88:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=2386e4119a305a827153eb80d3a6c47393616cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:6f:e1:96:a4:60:9b:b7:e4:f3:18:a3:02:
                    f8:51:df:81:91:5c:cb:2c:52:75:44:b8:8e:f0:df:
                    58:09:c1:ba:94:fb:7d:c3:88:6e:c4:e7:bb:f4:6f:
                    67:15:9b:20:c6:10:f6:3a:54:c2:91:24:7b:fa:5f:
                    39:88:07:dc:46:42:8c:82:f6:cf:ca:e7:1e:53:b3:
                    9d:73:8c:b5:9a:e8:fb:b7:fa:2d:2d:12:42:cc:4e:
                    c4:21:dd:d2:bc:5c:89:84:30:02:f9:7f:81:91:ed:
                    59:65:b9:99:10:8d:40:9c:5a:0b:f3:ce:f8:d1:1b:
                    ef:72:a8:a7:66:15:a2:a2:5d:75:cb:f5:d1:02:31:
                    41:54:20:57:f4:e3:1e:b1:12:81:b5:1d:ee:2a:aa:
                    d8:cc:b5:23:a4:21:a8:9e:dc:9e:fc:3a:1d:3d:2d:
                    68:81:ab:5d:59:91:d8:87:13:0e:ca:c4:15:1d:f1:
                    0d:d8:b6:f9:76:51:f3:ca:4e:50:91:fa:19:91:65:
                    c8:84:04:84:a9:23:86:a5:d3:63:c1:25:5f:e1:03:
                    ca:b2:5e:96:01:3d:be:53:0e:a2:e9:cf:e9:35:6d:
                    25:dc:63:32:34:4c:b9:ec:ff:53:d2:ba:94:6f:f4:
                    46:a0:4b:d4:e4:9e:a7:31:0d:37:cf:d3:a4:6e:fb:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:86:E4:11:9A:30:5A:82:71:53:EB:80:D3:A6:C4:73:93:61:6C:D2
            X509v3 Authority Key Identifier:
                keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:19:3b:9a:e0:14:db:4e:55:96:fa:e0:b0:10:ed:97:76:
         04:d6:43:a6:3d:b2:86:5e:b9:4b:89:14:23:be:53:24:25:99:
         be:53:97:f1:7d:5b:65:70:73:6d:32:21:b3:94:a8:64:e9:7e:
         28:ac:a6:44:00:d4:ab:dd:6a:dc:9e:d6:bb:ad:d4:7a:bf:21:
         64:69:6a:85:20:64:52:6d:4e:55:29:ac:f6:7a:13:a7:5d:cf:
         db:d8:bd:ca:5b:88:ea:d8:aa:f0:d5:d5:49:8b:19:f1:b0:87:
         e8:bd:cc:f6:8f:09:20:75:e6:39:7a:b7:03:11:aa:bd:c7:65:
         bf:46:0d:f2:b1:2d:0a:13:3e:87:6a:28:04:22:59:03:39:3c:
         09:b8:b5:8a:b2:9f:df:19:c1:81:37:c1:1c:94:cc:d6:c7:6e:
         6b:42:8f:e6:67:be:4d:88:d7:05:5f:53:11:e0:01:34:3c:e5:
         41:88:37:f5:7d:15:66:f1:14:f5:27:47:3c:46:09:bc:75:4d:
         2c:e1:03:2b:1e:77:ff:3b:b8:4c:a2:25:66:b9:3e:be:6f:af:
         86:d6:16:71:f7:27:4b:d4:e6:17:fd:7d:75:ed:31:89:55:7e:
         e5:b1:cb:2a:ee:01:e4:79:fc:df:00:9a:1e:0c:76:14:1c:e1:
         50:9a:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----