Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/54d069-81f3-4d0b-a45c-e732237dde58/1/SidQoQGp_ljpe-G4LgkeoVJ3pW8.mft
File:                     SidQoQGp_ljpe-G4LgkeoVJ3pW8.mft (raw, json)
Hash identifier:          FjlEHNiU++LY+Fbc/GUe3e3EAn0ExdcPeuMPm4h5UN4=
Subject key identifier:   3A:A2:52:6B:C0:46:3C:6D:11:B5:10:E0:86:2F:9C:D8:54:B8:85:4E
Authority key identifier: 4A:27:50:A1:01:A9:FE:58:E9:7B:E1:B8:2E:09:1E:A1:52:77:A5:6F
Certificate issuer:       /CN=4a2750a101a9fe58e97be1b82e091ea15277a56f
Certificate serial:       019546DA3B013E754EF91A19DB3587D23202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SidQoQGp_ljpe-G4LgkeoVJ3pW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/54d069-81f3-4d0b-a45c-e732237dde58/1/SidQoQGp_ljpe-G4LgkeoVJ3pW8.mft
Manifest number:          05A7
Signing time:             Thu 27 Feb 2025 10:01:01 +0000
Manifest this update:     Thu 27 Feb 2025 10:01:01 +0000
Manifest next update:     Fri 28 Feb 2025 10:01:01 +0000
Files and hashes:         1: SidQoQGp_ljpe-G4LgkeoVJ3pW8.crl (hash: BD6koAMYXYgWorvJ7x6wQ+UpyrnAZVngldVovL9n/QY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:3b:01:3e:75:4e:f9:1a:19:db:35:87:d2:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2750a101a9fe58e97be1b82e091ea15277a56f
        Validity
            Not Before: Feb 27 10:01:01 2025 GMT
            Not After : Feb 28 10:01:01 2025 GMT
        Subject: CN=3aa2526bc0463c6d11b510e0862f9cd854b8854e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:24:17:7c:e5:0d:8c:9d:1d:81:b8:14:bf:
                    b0:1b:96:0b:6b:4c:2d:8b:74:3b:72:17:03:e6:76:
                    a7:89:04:6d:51:70:59:e7:82:57:ec:18:4b:20:f3:
                    47:12:b9:a5:17:b4:99:15:07:bb:8c:c3:61:0e:a6:
                    5f:c8:a8:e7:30:bd:21:85:51:98:39:63:51:5f:e6:
                    8e:b4:36:1a:85:42:71:e4:a1:33:ee:e0:f5:68:4c:
                    39:ef:6d:ef:4d:a3:83:88:4d:80:76:5e:99:cf:ee:
                    4d:ec:7b:a9:20:b8:31:c0:e3:dd:84:38:d0:67:dc:
                    d1:d4:31:01:24:51:65:31:f1:fb:97:5d:6f:9d:3e:
                    08:26:8e:71:27:71:1e:b0:6d:12:43:33:c1:5c:89:
                    c1:d7:30:f7:a4:35:86:41:2b:ca:11:d1:2b:87:cf:
                    a5:e7:9e:55:dc:84:a5:8f:3d:70:ea:a3:95:21:27:
                    cb:ae:20:a8:dc:1a:e6:d0:2e:71:00:9a:5e:51:a3:
                    6b:19:64:93:20:2c:9e:fa:ab:3c:9d:32:6a:84:ab:
                    38:aa:f7:63:a1:95:27:e4:6f:f9:5a:a8:c1:12:b0:
                    45:df:3d:c8:9e:b8:d0:a6:9a:65:c6:c8:8d:8e:10:
                    72:e3:70:c3:89:cc:86:38:5b:f1:93:1c:42:45:23:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:52:6B:C0:46:3C:6D:11:B5:10:E0:86:2F:9C:D8:54:B8:85:4E
            X509v3 Authority Key Identifier:
                keyid:4A:27:50:A1:01:A9:FE:58:E9:7B:E1:B8:2E:09:1E:A1:52:77:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SidQoQGp_ljpe-G4LgkeoVJ3pW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/54d069-81f3-4d0b-a45c-e732237dde58/1/SidQoQGp_ljpe-G4LgkeoVJ3pW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/54d069-81f3-4d0b-a45c-e732237dde58/1/SidQoQGp_ljpe-G4LgkeoVJ3pW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:10:5e:da:41:d3:e8:05:1e:c2:c5:9d:75:45:83:31:2b:23:
         bb:0b:06:04:dc:fc:c4:fe:8a:f0:a7:bb:c4:0a:f0:42:09:bd:
         a2:1f:f1:20:de:ea:d5:23:11:53:75:44:88:43:5b:aa:e3:28:
         47:a7:af:aa:74:fd:a4:8c:07:a5:f4:cc:36:fb:95:43:d2:b9:
         9d:89:d7:a7:ed:a4:a7:34:f6:24:5e:07:c2:8f:3c:78:33:bd:
         e6:8b:df:2d:91:69:5a:56:ee:d0:d0:b2:71:26:8a:58:54:bc:
         4d:ec:dd:81:49:8f:2c:43:cf:c9:20:f2:a4:5d:19:a4:5b:17:
         b6:89:37:6f:a3:a8:f2:17:aa:a5:eb:5a:a5:96:0a:5e:52:4f:
         15:e6:7b:6d:59:cc:0f:cc:cd:e1:d6:83:3e:b0:59:f2:2a:32:
         f0:92:8a:5d:a8:44:d1:8d:7b:bb:b5:ac:ef:a0:6e:aa:f6:25:
         95:6e:da:fb:46:de:de:25:63:28:31:68:82:48:a1:3f:a1:4b:
         e9:39:08:83:30:ca:c4:91:91:de:bf:b2:06:50:39:c3:50:6e:
         99:a9:af:e4:81:24:69:68:85:d2:c4:4b:88:10:f4:e7:43:14:
         30:fb:83:9e:12:ab:05:80:20:18:85:d1:19:d9:64:74:46:b5:
         d2:7c:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----