Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File:                     mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier:          fTrZL5WWTjx0k0+iZyXjIsPJbrPZ9wa6HQi6IGgG0G8=
Subject key identifier:   FE:DD:8C:6C:95:B7:7C:5A:FF:C3:6A:2A:6A:F1:01:7E:28:AA:0D:00
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer:       /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial:       01962E98D8B8F949BB70AA4DDF0AC4FC8166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: RH075JCbfRpneDWWdK4fajBfwydBFQ1xsuRf2nSnpsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:b8:f9:49:bb:70:aa:4d:df:0a:c4:fc:81:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=fedd8c6c95b77c5affc36a2a6af1017e28aa0d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:03:03:42:47:11:80:e8:d1:51:3d:52:0e:
                    96:7b:f7:c0:71:11:e3:7c:50:63:13:17:cb:92:e3:
                    1c:f4:c0:19:fb:55:7b:fe:6e:85:ed:42:5a:ba:bf:
                    cf:ca:ef:17:69:0e:ca:f2:b9:e8:f2:9b:53:a8:63:
                    d0:d8:0d:07:49:90:83:07:d9:46:7b:a0:70:8c:cc:
                    3c:8f:99:21:8d:de:d2:bf:5c:7f:19:dc:9e:93:78:
                    27:a5:49:58:c6:b8:08:f7:9c:0a:c4:cf:a0:6a:73:
                    5b:99:60:d0:f4:67:fe:c7:dc:e0:39:cd:04:6c:a6:
                    86:80:91:fe:e4:b5:0d:18:97:5d:b9:73:1a:86:46:
                    8f:28:1e:3a:ab:63:9e:d5:b6:7b:37:da:f6:6e:15:
                    5f:d1:6b:47:1d:96:1e:3b:22:7a:a6:14:ae:9e:32:
                    62:31:e1:40:e1:ee:01:bb:a5:7e:09:89:3d:a6:0d:
                    2b:44:dd:36:91:b0:85:00:7a:c7:08:03:a4:38:14:
                    d7:66:5e:f1:7b:21:df:92:72:c9:9e:56:18:22:82:
                    5b:d0:16:63:e2:f4:d6:fe:ed:90:85:37:0e:90:ed:
                    b2:35:20:e7:3c:af:bc:a1:ba:c9:7b:1f:42:54:cf:
                    d2:53:3e:56:15:27:05:08:66:8e:d2:17:f2:b3:ed:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DD:8C:6C:95:B7:7C:5A:FF:C3:6A:2A:6A:F1:01:7E:28:AA:0D:00
            X509v3 Authority Key Identifier:
                keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:77:c1:27:e7:d6:c3:b2:eb:81:30:af:84:c3:bf:6e:c0:f4:
         4e:f3:91:b5:a5:2e:37:73:a2:f7:ff:17:cb:c4:93:6c:f9:7b:
         3c:82:3f:4c:24:e4:22:15:8e:60:b9:24:e5:3e:fa:33:e0:91:
         59:35:ca:55:bd:85:89:f6:c2:32:07:9b:8a:e6:ef:ee:fa:64:
         ec:fd:79:7b:b1:bc:aa:a4:8a:8f:15:ee:9a:a9:4d:f4:53:03:
         25:f4:f7:85:8c:ad:de:f1:82:90:dd:dd:a5:d5:52:8a:58:b0:
         dc:b7:cb:0a:c8:ff:08:ba:94:07:07:61:a9:8a:08:46:b9:b2:
         8c:11:a0:bb:aa:e2:a6:6b:bd:20:f2:11:21:28:9b:09:e2:97:
         43:04:b4:98:fd:81:90:fe:3a:12:73:65:b2:b1:c8:4d:0d:17:
         62:3e:a3:56:d3:e9:5c:1d:bc:4b:40:1b:00:9d:25:d2:8d:2b:
         77:62:15:e4:d0:89:51:e2:f3:2d:4b:16:21:52:49:ca:dd:a6:
         e7:90:5b:b9:4d:c5:ed:e9:a7:00:25:1d:e0:75:ca:7e:ca:47:
         e9:c9:61:31:ef:5b:f8:38:2b:70:a3:7c:d6:c0:17:27:c8:e7:
         5c:bc:94:04:cc:77:54:13:30:b3:41:40:ed:40:51:2c:2f:13:
         00:5c:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----