Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File:                     PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier:          jqR8sczZgDcS1+7KJnvQxvQxZ9jIXt05T4LROVXCw+Q=
Subject key identifier:   8B:D5:4B:CB:DC:AF:3A:D9:62:65:8D:42:5C:64:53:8D:C6:31:9A:8C
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer:       /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial:       01962F745CBFCE79CC34160F454DA87CAE8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: aGN/ZAHm5QAv7pe4IWpJVzerd0HVasWG7lKj6/EYXno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5c:bf:ce:79:cc:34:16:0f:45:4d:a8:7c:ae:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=8bd54bcbdcaf3ad962658d425c64538dc6319a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:92:7a:4b:02:0b:61:b4:06:4b:41:c6:b4:
                    74:15:be:7a:95:ba:4c:91:4f:ec:0f:a1:bd:f7:fe:
                    b0:af:15:a5:f4:3f:fb:ec:26:80:6f:63:5e:2d:69:
                    e8:32:6e:6a:b3:a5:dc:e8:af:c3:0f:ec:fd:4f:97:
                    20:57:b6:f0:52:5a:c5:78:87:b0:2f:4f:82:a0:4f:
                    09:15:cc:fb:75:00:eb:3e:e1:52:8c:f7:3d:0e:3e:
                    99:ff:eb:09:de:28:1c:92:cd:ab:71:d6:25:95:44:
                    59:03:61:7d:d9:fb:3e:d7:2d:dd:d8:dc:ee:6a:17:
                    d2:9c:7b:fe:8e:29:aa:2c:ce:31:95:8c:de:0e:b1:
                    43:e3:3e:2f:22:a8:55:4a:0c:2e:85:fe:8e:f7:e9:
                    89:e6:45:c6:ca:d7:0e:48:db:b3:b2:c1:51:87:90:
                    d7:74:f5:92:70:f7:58:7e:14:c3:32:2b:0d:ab:43:
                    03:8c:d4:84:17:da:3c:b9:04:a1:57:7e:6a:3a:42:
                    98:b0:f8:9f:1f:b4:ef:0d:df:eb:7e:42:79:5f:b4:
                    69:3b:b9:76:cb:19:0f:76:45:3f:08:2d:53:d0:64:
                    71:c6:7d:31:ff:51:cd:80:b1:24:ab:1d:aa:bd:97:
                    9e:a6:8b:63:3b:b7:8c:fd:92:8c:79:1b:98:3d:24:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D5:4B:CB:DC:AF:3A:D9:62:65:8D:42:5C:64:53:8D:C6:31:9A:8C
            X509v3 Authority Key Identifier:
                keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:4a:67:8c:42:9c:80:a4:3e:8c:49:43:f0:e5:58:c5:3e:
         32:19:f1:45:b0:38:bb:03:08:f2:ba:2c:c7:e9:cb:98:de:4a:
         10:4e:c9:e2:f8:a0:64:c0:17:4c:5e:c9:81:e4:f7:1b:ee:c9:
         f7:35:36:3d:3a:aa:11:d1:50:72:71:53:fa:d9:e0:1c:44:4f:
         aa:cd:71:5e:6f:03:68:73:84:ed:99:eb:c5:25:a3:42:c1:f4:
         af:64:cb:f1:57:fb:92:cd:f0:a7:00:e6:5f:29:be:54:5f:04:
         27:e9:74:d3:a2:ae:c2:b2:75:38:74:ba:33:e1:53:41:8f:f6:
         9f:31:95:e6:22:d0:7d:93:40:bc:03:b4:a9:42:79:ce:48:9e:
         7a:df:66:c8:3b:1e:dd:b1:fc:54:79:26:bc:76:f1:cd:c8:90:
         60:6d:25:b1:1f:e2:35:9a:61:b7:74:48:83:13:e6:4c:cf:d4:
         ac:e4:c9:b4:14:50:8a:29:7c:7a:93:f4:b9:e2:3a:f3:23:da:
         a1:89:70:8a:d3:da:cd:7c:09:b2:c2:6d:b8:16:33:5d:e7:db:
         6f:cc:49:2d:a1:0f:80:ec:d4:23:97:3a:b0:7d:aa:20:57:ad:
         b8:99:c6:59:37:4b:32:a3:71:52:51:a7:ec:52:cd:4e:2c:56:
         1f:a0:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----