Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
File:                     4XwlpvL7M1SdKfdNcDPvISEEXII.mft (raw, json)
Hash identifier:          2dNsN+Ao8vTTIOGABNTBIIVan1Ssv5oMASWt6modS1s=
Subject key identifier:   A7:7D:CD:BD:B7:EC:63:A3:E2:EF:3A:29:91:5E:3B:DF:14:54:16:C7
Authority key identifier: E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82
Certificate issuer:       /CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
Certificate serial:       0193FA0B3BE289460529C39780E6208BDB1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
Manifest number:          10B7
Signing time:             Tue 24 Dec 2024 19:01:00 +0000
Manifest this update:     Tue 24 Dec 2024 19:01:00 +0000
Manifest next update:     Wed 25 Dec 2024 19:01:00 +0000
Files and hashes:         1: 4XwlpvL7M1SdKfdNcDPvISEEXII.crl (hash: V5yKBcKXfjwSt9TkAeXtk3R+XjStjm+7c9pQ+jY7nns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:0b:3b:e2:89:46:05:29:c3:97:80:e6:20:8b:db:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
        Validity
            Not Before: Dec 24 19:01:00 2024 GMT
            Not After : Dec 25 19:01:00 2024 GMT
        Subject: CN=a77dcdbdb7ec63a3e2ef3a29915e3bdf145416c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:03:75:e0:79:b1:ba:4a:5e:d6:33:4b:f2:
                    16:2e:64:cf:dc:42:a4:ca:f6:3c:70:24:5d:b5:cf:
                    5a:d0:52:32:fa:b3:a9:56:f6:bd:04:be:15:1a:06:
                    ac:bb:fe:90:c1:53:b6:99:74:29:09:69:7a:c4:93:
                    e2:3b:85:48:3c:ff:d1:ce:24:83:c4:71:fa:5e:04:
                    76:cb:4b:ec:e3:83:4f:2c:9e:b9:e1:bf:b0:21:c7:
                    99:bd:c8:72:2a:a2:d9:b3:af:c4:0c:1f:49:71:9a:
                    24:dd:bd:87:a2:be:c8:fd:3c:7a:08:97:7c:f4:64:
                    e1:cc:c3:d4:7b:31:67:1b:87:18:98:4e:df:df:f0:
                    b9:76:7d:52:49:b9:51:a1:4b:10:37:f0:8a:05:24:
                    a0:50:2b:45:90:19:6e:f2:2e:c4:24:a0:91:77:52:
                    ff:f5:a1:00:f1:1e:81:f2:49:3e:61:37:e0:48:4e:
                    12:0c:e9:28:67:d3:3b:8f:ae:63:71:47:02:f2:cf:
                    1a:5d:28:0d:74:93:59:5f:ba:b3:ed:59:d4:e4:4e:
                    64:d8:05:49:08:f3:36:cf:fe:cd:33:bd:44:78:a8:
                    77:c6:6b:91:33:fe:03:57:e2:bb:66:41:72:f2:1a:
                    51:b1:05:80:1f:76:4d:15:2e:79:9f:3a:55:36:36:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:CD:BD:B7:EC:63:A3:E2:EF:3A:29:91:5E:3B:DF:14:54:16:C7
            X509v3 Authority Key Identifier:
                keyid:E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:95:e0:17:2e:ff:22:a0:84:c1:1c:64:4a:ef:78:78:56:
         ad:11:29:b2:ba:9a:88:c1:d7:25:b0:78:6c:b6:64:c5:90:ed:
         16:e0:72:82:35:16:5f:f9:53:4d:1d:80:61:a4:c8:ce:5f:82:
         ce:15:30:dc:fb:67:17:e6:4f:78:10:7e:fd:e7:f8:85:07:34:
         0b:21:0b:d4:6d:95:b8:fe:ef:85:35:09:12:4e:13:3d:48:8d:
         5f:86:14:d0:1d:9d:f2:8a:30:71:77:df:08:73:ab:fa:ef:92:
         b6:b2:6b:a5:b4:0f:5f:7d:42:d8:fc:e6:39:f8:d7:c7:1f:b4:
         68:7e:00:8a:f6:92:31:63:45:b0:a9:ce:05:37:61:ce:dc:cd:
         a7:52:69:90:5d:7d:4e:d4:c5:9f:b8:d4:3b:a1:96:aa:3a:63:
         18:06:b3:dc:b3:29:60:0b:ff:64:4e:5a:67:96:8a:ef:c4:eb:
         da:cc:79:7e:ba:1c:4d:2b:e9:3c:3d:8b:be:40:20:4b:2c:5e:
         7c:35:a2:17:72:a2:9a:53:14:ad:b3:59:8a:8c:79:41:d1:6a:
         fa:f5:4c:38:df:1d:75:81:b2:3e:76:44:62:f0:50:5d:2d:bd:
         50:c0:73:20:2a:14:7c:6f:84:fc:4c:41:b7:b5:8f:61:70:0a:
         4b:bc:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----