Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File:                     Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier:          ezCFgtaT9AUB+O+oiR2e/I07sJEnVpE3GFKDEr5yl6Q=
Subject key identifier:   6F:FB:53:95:32:A3:62:9E:48:00:1A:63:54:44:C8:B6:59:32:91:8B
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer:       /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial:       01962F3D983533CBE45172A7165B93DE3682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number:          0599
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: bfHE1bv3E3oBN9X9iTse2OVNoDauDO5qfYK1PNF1Kpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:98:35:33:cb:e4:51:72:a7:16:5b:93:de:36:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=6ffb539532a3629e48001a635444c8b65932918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:65:15:d8:03:d7:f3:1d:d6:ef:41:2b:a7:
                    a4:61:33:a7:5f:73:db:1a:f4:66:13:47:7e:3a:7e:
                    ed:0e:a0:1f:e6:fb:27:9c:45:a5:8a:42:aa:27:8f:
                    fd:44:41:0d:c8:64:20:2c:de:06:db:2c:28:0e:35:
                    6f:6a:fd:a0:75:22:ab:fb:46:45:f6:63:8f:6d:d7:
                    0a:22:9a:9e:b5:cc:ec:4d:f1:49:6f:63:42:8a:ce:
                    88:83:58:39:d5:40:8e:3c:64:8d:cc:04:66:08:13:
                    d8:d3:33:5a:17:f6:39:d3:c2:2f:38:e9:b8:a7:ee:
                    b7:9e:88:7d:4b:65:4d:93:de:4c:ed:0d:3d:62:d2:
                    af:c7:fd:cc:cf:d9:c1:2d:2c:d2:14:e0:10:1b:d7:
                    14:04:19:3d:8a:58:8b:5e:81:0e:67:55:ee:dd:74:
                    dc:53:6b:67:cc:90:b0:2a:b2:ea:2b:dd:aa:74:19:
                    2c:8e:3b:9e:f2:78:56:64:97:a5:b8:65:17:7c:91:
                    37:7d:01:ae:e5:ff:68:33:23:df:ac:21:e2:d0:4a:
                    57:9d:74:bd:27:a1:7a:15:34:ea:56:44:be:7a:6a:
                    b5:29:29:9f:35:30:21:37:15:d5:3c:f8:d6:58:67:
                    04:d9:be:43:e8:7a:aa:25:fa:a9:75:7a:94:a4:b2:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FB:53:95:32:A3:62:9E:48:00:1A:63:54:44:C8:B6:59:32:91:8B
            X509v3 Authority Key Identifier:
                keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:49:e7:2d:70:85:15:19:18:5b:be:6a:7d:2c:e3:7a:61:e9:
         0c:1e:27:61:24:f4:50:e4:51:7d:24:30:85:93:82:bd:9f:2f:
         d5:38:8f:2d:f2:f6:7a:68:70:13:54:fc:8e:28:cd:69:12:ee:
         5d:20:b0:40:95:bb:c7:a9:ca:c0:23:c1:1d:2a:f8:54:a9:76:
         5c:f1:fe:0c:3b:e3:2d:7c:25:35:51:0c:c3:71:0b:06:ec:3a:
         65:c3:82:18:9a:6c:12:35:b6:13:37:6d:08:63:98:52:36:a1:
         28:53:69:34:35:9a:98:48:d0:7b:93:39:a9:6e:83:12:88:88:
         57:0a:13:62:84:f0:f5:8d:22:fa:cc:8a:9f:51:ea:2a:f8:06:
         59:15:45:c5:fb:4b:34:b4:97:d3:f1:7c:70:e3:ea:e8:62:5d:
         31:48:37:64:3f:45:84:b5:33:57:48:47:5b:bf:2f:9b:95:ab:
         2a:d2:ce:91:4e:5f:01:81:46:f3:1e:01:24:bc:88:81:d8:03:
         26:5a:5c:76:bf:47:15:f6:62:75:b6:d4:a9:a6:78:1d:65:f8:
         4f:f1:1e:ce:e3:6b:ff:75:23:5b:e3:bb:e6:4e:78:3d:af:93:
         c1:92:4b:64:ef:27:54:ca:c5:eb:84:54:ea:89:b6:b6:f0:13:
         c3:91:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----