Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File:                     2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier:          00QpFOwqTx3vSZkBMi2PaNSKY/lVyNK+zc0vDZhDHfE=
Subject key identifier:   EB:E1:32:CE:F5:E4:8B:E1:12:53:BA:DA:56:7B:5A:81:36:23:FD:DA
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer:       /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial:       01962E98871D89C6F73B7D1134C7EBB0023D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number:          0510
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: sbSbcBWg9B843Xdw3nFoshgrGrYKehPzjwi1OQO8Tas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:1d:89:c6:f7:3b:7d:11:34:c7:eb:b0:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=ebe132cef5e48be11253bada567b5a813623fdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:33:ef:b4:f1:e6:f8:84:09:5d:de:63:00:
                    ad:79:1d:be:89:1e:4c:4f:0b:8f:c1:d9:8b:2a:ec:
                    fd:d4:55:a2:aa:b8:a4:2a:94:32:12:6e:1d:10:92:
                    d0:55:60:da:f4:10:43:85:97:52:43:9b:8d:e1:56:
                    0f:4b:03:c3:cf:5f:cd:92:54:87:e5:3a:51:0e:c0:
                    7e:ae:02:5d:f1:de:d9:00:4b:9b:13:bf:4d:08:ac:
                    a2:3f:9a:23:39:85:7d:2d:1f:73:39:d7:52:50:94:
                    86:8a:e6:89:50:a5:d5:11:90:0e:4b:e7:8b:0b:53:
                    4c:88:7c:c7:25:fd:7f:93:0d:ee:e7:25:19:e4:bf:
                    da:22:61:96:15:db:00:eb:25:cc:aa:39:75:4d:65:
                    71:cb:3e:15:d5:86:f8:47:0f:0f:9c:b2:2a:14:b6:
                    56:f6:93:9b:79:c1:b1:98:f6:88:e8:82:bd:ef:d2:
                    04:01:52:0c:6f:c9:5e:ae:4f:68:18:23:88:05:b6:
                    28:c9:6b:69:04:07:c8:67:8b:e1:2e:12:4b:ef:78:
                    32:86:88:fb:bd:ec:26:f1:4c:53:94:d0:cc:71:7a:
                    0d:2d:6b:cc:bd:52:f6:cf:c5:3d:e5:04:7c:5e:fa:
                    72:e5:8b:97:0a:59:39:28:5e:04:21:71:97:8c:ea:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E1:32:CE:F5:E4:8B:E1:12:53:BA:DA:56:7B:5A:81:36:23:FD:DA
            X509v3 Authority Key Identifier:
                keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:ed:1a:7a:33:01:f0:bf:6f:94:76:a7:27:0e:b3:8c:05:
         55:71:7b:2c:58:41:bf:61:0e:03:a6:1e:10:98:49:c1:0a:b0:
         07:bf:8c:d4:21:6c:da:bd:23:38:c6:3f:a6:4f:76:60:33:32:
         dd:8b:e5:f6:25:92:dd:dd:61:ea:68:eb:95:87:95:4f:a1:53:
         2e:ce:f9:8a:df:6c:39:57:78:2e:d9:c4:5e:89:d8:69:38:83:
         dd:05:51:ca:76:9a:43:5a:94:07:84:05:53:5e:64:5f:5c:e9:
         07:97:2e:11:a8:f1:13:af:f8:11:1c:d5:e9:b7:11:0a:3f:59:
         8a:c7:c1:89:21:4d:19:f6:ed:a4:0c:92:4e:d9:a6:4b:89:a2:
         d0:f5:6d:25:6a:bf:bd:60:35:d3:eb:ab:9f:cb:20:73:60:a2:
         8a:45:1d:dd:12:d6:6d:c4:27:58:ea:08:88:fd:fc:f0:83:d6:
         f8:f5:8c:99:1b:a6:15:23:03:07:95:50:59:19:29:bc:0f:40:
         e6:0f:33:84:a7:0a:04:9c:02:4c:a4:42:0d:cb:f0:f9:c0:cf:
         85:fc:b6:f7:46:0a:dc:74:ed:cb:b4:47:5e:84:89:af:1a:f7:
         77:13:3b:22:cb:0c:2d:a5:a1:62:58:a3:80:c6:5b:55:93:e2:
         92:7a:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----