Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File:                     aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier:          oePf4dUe4RC8/AMR5r1XsOB7TY8ZMLvuaN+BLj2MkvY=
Subject key identifier:   C3:3A:D3:63:15:3C:10:F7:33:62:E7:EB:37:5F:6C:97:BD:E2:FF:19
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer:       /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial:       01962FAB555B841C74D676903C9684A6C270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number:          0436
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: utv2VJlu/bf4vbEr+5M0/7rdAkvMxMCEZ9uGI81NxSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:5b:84:1c:74:d6:76:90:3c:96:84:a6:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=c33ad363153c10f73362e7eb375f6c97bde2ff19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:41:bc:39:f0:10:11:83:80:9e:01:82:6f:
                    ff:fd:6e:57:b4:e6:15:b7:da:85:24:ec:9e:cf:70:
                    f1:94:6f:f4:46:b5:5a:d7:42:b0:a7:dc:f4:39:1f:
                    bc:14:bd:fb:de:22:b8:76:5f:6c:e9:c4:9d:79:e6:
                    4d:fc:b0:77:67:ea:89:ca:39:b4:31:33:32:bf:7a:
                    68:44:63:21:b1:39:47:90:25:e8:7b:ee:24:13:31:
                    68:8e:ad:13:3a:a9:71:fe:e9:0f:ff:3a:dd:c0:36:
                    9c:b2:3b:37:4a:d3:54:5d:23:cb:72:73:df:0f:a9:
                    7f:b1:98:98:ad:37:7c:d7:93:9a:46:99:46:fe:b3:
                    ef:e9:ab:d2:82:77:88:d4:6b:52:7b:be:9f:cc:8d:
                    be:2b:43:c3:24:5e:ad:fc:d3:0b:98:0b:84:28:37:
                    f1:32:1f:2e:37:e0:aa:40:c6:4a:05:03:72:f5:8f:
                    e3:54:fc:34:09:a5:61:22:6b:51:e1:c0:55:87:af:
                    0c:93:a1:86:c6:e2:a1:74:3f:38:64:4e:94:dd:da:
                    99:12:da:b4:0f:8a:f8:6f:9b:0d:f5:1e:a6:90:2e:
                    c7:19:14:27:2b:56:12:f4:e7:34:6a:44:89:ec:93:
                    26:c8:58:10:7b:56:15:35:c1:fa:a9:5a:77:ed:9d:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:D3:63:15:3C:10:F7:33:62:E7:EB:37:5F:6C:97:BD:E2:FF:19
            X509v3 Authority Key Identifier:
                keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:1f:89:ca:16:e5:94:54:16:b3:d7:f8:57:a0:67:c2:18:
         49:1a:27:28:48:aa:7a:da:7b:29:b4:6b:bd:67:6a:31:53:61:
         19:4c:e9:be:b9:7a:d0:61:0b:eb:2d:d5:0d:5d:07:8a:8e:46:
         db:fd:fc:e3:96:5e:be:5e:bf:dc:16:f4:1a:56:2c:7f:7b:69:
         89:c8:41:e5:29:68:7e:98:23:db:46:46:ba:52:52:71:f3:a3:
         23:6b:83:04:cc:65:c7:f5:2e:b3:f9:da:0d:56:2c:e6:60:22:
         e5:d3:11:a0:e8:da:17:4d:59:a7:20:38:ca:ab:7d:4c:72:7a:
         8c:f9:88:80:7e:5e:5a:49:c6:1c:c8:17:6c:17:24:0b:5b:c0:
         9f:80:7d:96:0f:57:2f:f8:1a:72:3f:5c:82:2f:6e:3f:6c:ca:
         5e:35:6b:1d:82:21:9e:44:b0:54:ca:f6:f4:ea:07:d7:80:7c:
         3a:72:d9:10:f0:5b:5f:d5:17:69:07:4d:f4:53:d7:47:b3:82:
         d4:be:48:fb:28:df:90:ef:92:b1:36:6b:e4:1f:fe:7d:ff:75:
         6c:0a:8a:84:28:ec:dd:98:cf:f5:96:16:ff:cf:f9:a5:5d:61:
         a2:61:ff:f3:e7:7b:a1:a6:4f:f9:49:10:e8:9a:63:c9:fd:9f:
         fe:56:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----