Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File:                     M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier:          TyrPB7l7Nm+Bnc2Ncj3yvhYuqQLvEjL8hhRpBMljkXI=
Subject key identifier:   75:E2:16:F0:8C:67:15:52:B8:5C:8A:40:D0:0D:75:39:C5:77:F4:A1
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer:       /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial:       01962F3D94E6779F55A196A23105BD3C16D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number:          122F
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: Pyqj8JJt+gGOwXweDQ81wx1/bSKzbuyH+dnvokglNoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:e6:77:9f:55:a1:96:a2:31:05:bd:3c:16:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=75e216f08c671552b85c8a40d00d7539c577f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:70:e9:00:6e:d5:81:e5:0d:76:b8:3d:41:
                    14:de:8d:e5:4e:59:77:0c:51:2a:6e:6e:ab:4f:d4:
                    bf:23:62:86:b7:2c:d9:de:9a:84:a3:15:d5:1e:df:
                    34:d8:f9:aa:d2:0c:93:eb:98:12:5c:6e:32:5c:83:
                    d4:4c:e4:d5:93:7a:9d:74:f0:74:f2:c4:d1:0e:6b:
                    a9:3a:47:ee:86:42:82:54:07:45:fc:1a:83:07:ff:
                    95:91:e0:1e:48:ce:98:ed:5a:ea:82:30:55:58:a3:
                    7c:21:84:68:e2:b1:6d:29:3e:ad:c4:05:11:19:f8:
                    70:c9:6f:07:59:a2:16:15:5d:bd:fb:d0:c3:56:0c:
                    51:bc:fd:35:3f:f6:0b:08:fe:b4:75:1d:81:28:b7:
                    b5:d7:d9:98:de:11:9c:8b:fb:02:8e:d3:3a:c3:8d:
                    31:db:8a:e0:8d:ff:54:1f:02:c5:ed:39:c7:8b:89:
                    f8:e8:ea:0e:3a:31:02:9d:73:3f:2a:dd:62:a4:37:
                    d3:9a:f6:72:c8:04:0a:d9:02:89:25:92:49:d4:01:
                    9a:cf:e1:74:76:db:09:88:24:30:e6:f6:3f:e3:73:
                    0b:ea:89:9e:9d:7b:d8:81:3f:45:29:9e:f9:81:61:
                    98:22:a7:eb:89:1b:95:d3:e8:75:a9:1c:7a:d8:65:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:16:F0:8C:67:15:52:B8:5C:8A:40:D0:0D:75:39:C5:77:F4:A1
            X509v3 Authority Key Identifier:
                keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:31:af:34:98:be:86:33:34:70:8f:02:b8:50:5f:cc:8f:
         fd:30:ce:3a:30:db:6a:37:ed:61:28:ae:96:46:22:a1:a7:8b:
         09:17:4b:71:00:0b:72:f7:3a:03:d0:d9:67:ba:d2:48:7c:b7:
         d6:7b:f2:51:66:2c:d6:a7:c9:07:1e:ff:5c:f5:b3:e6:67:1e:
         e6:53:67:2c:93:49:b8:9c:fb:36:ec:68:ba:2b:6a:66:88:25:
         2a:6e:2c:a7:69:cc:a7:5a:e8:6f:41:c9:b7:8e:c1:5e:e0:dc:
         b3:16:58:0a:5e:24:6e:fc:71:45:14:70:67:f9:1f:65:43:02:
         d1:ff:e7:49:4a:04:cb:79:81:74:01:22:2e:93:31:6f:06:2e:
         d1:bf:56:dd:41:1e:67:94:28:89:f4:0b:78:e5:61:1f:31:e9:
         05:5c:32:dd:50:a1:f0:02:af:86:60:47:bc:04:51:2c:a2:a1:
         25:39:b9:6b:65:51:3f:ab:31:f5:b0:92:ae:a9:c7:d0:40:99:
         32:c0:f4:b1:dc:c5:b7:05:b2:e3:88:10:c6:13:89:57:81:6d:
         d9:d1:8b:67:00:a1:a4:4f:14:8c:09:1e:4f:ef:12:aa:20:4e:
         41:56:44:dd:d1:c1:90:fc:2c:4b:d8:e0:51:21:f3:61:42:ed:
         1e:a2:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----