Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File:                     I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier:          zPIyeDUZwwhM/GGrwBOqfL1vVIxY7E0T/iWwU/LBxYM=
Subject key identifier:   84:D3:E4:02:FC:F4:A3:51:7E:D9:A7:5B:D9:34:CB:40:86:B3:2B:AC
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer:       /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial:       01962E98BCEF211CF5543081A4C5E1DD6BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number:          08D3
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: nJrQQnuzdnWvET08BmMt/VgU/6K6M3W9j45PPZzuSeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:ef:21:1c:f5:54:30:81:a4:c5:e1:dd:6b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=84d3e402fcf4a3517ed9a75bd934cb4086b32bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:b3:1a:26:6b:b8:ed:65:79:5c:d8:ae:57:
                    9a:84:84:d2:84:08:b3:c9:fc:8f:e2:7c:58:e4:d6:
                    ad:22:48:f0:bd:24:04:d5:b8:8d:51:d0:20:6b:c6:
                    05:c2:b2:b3:09:7b:6e:69:00:4c:e7:6d:ba:85:5c:
                    2c:1b:c4:7c:ee:f9:ec:07:3a:f7:c5:20:23:34:78:
                    61:8b:0d:80:45:3a:4c:bd:b8:c6:08:8b:2e:80:89:
                    bd:a3:37:31:c0:35:9c:96:61:4c:da:0b:8c:15:63:
                    52:e1:18:d6:be:80:ba:6f:a9:5d:a6:09:f9:69:1e:
                    6c:c4:47:3a:67:1d:37:1e:20:09:0f:22:1d:fe:7d:
                    8a:f4:b9:a6:ff:b2:f5:0e:8b:b6:83:82:1a:ee:d9:
                    71:b0:12:b6:22:c6:a1:56:46:14:9b:9d:a8:24:b5:
                    67:34:78:a9:de:75:1b:5a:e5:fd:a5:82:ba:1e:36:
                    6a:93:31:3a:4d:df:64:df:2a:db:3a:d6:8f:7f:7b:
                    f2:be:81:2e:ac:3b:83:d1:c6:55:8a:96:8f:9a:47:
                    41:38:04:95:56:c3:b7:ec:f6:e3:be:f2:94:8f:07:
                    0c:6a:de:32:e5:ea:3d:1a:76:b2:1d:7b:59:72:d2:
                    0c:67:1b:00:78:b8:ce:d0:6e:6a:11:d3:a8:cc:a9:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:E4:02:FC:F4:A3:51:7E:D9:A7:5B:D9:34:CB:40:86:B3:2B:AC
            X509v3 Authority Key Identifier:
                keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:ea:64:0a:e7:4a:00:e1:08:9c:de:58:12:43:15:d3:b8:
         fa:d1:8b:aa:a3:76:4f:f9:05:8c:95:23:5b:b9:26:00:f4:2f:
         df:87:cd:c2:c3:d4:d5:60:9c:2a:f3:bb:03:79:fd:4b:56:f7:
         57:c4:5e:45:e8:46:68:db:cf:fe:59:43:71:12:66:4a:5b:57:
         66:da:c9:86:3a:02:74:a0:da:9b:36:9d:86:5a:8f:8f:9a:62:
         99:43:e4:5c:f4:68:08:7f:23:d6:2f:ea:84:9f:8d:59:41:d1:
         03:b8:0a:2e:5d:4b:08:91:5d:51:80:1b:f8:86:3d:d2:dc:31:
         02:89:ef:ab:a1:7d:f4:58:05:c5:27:55:3d:bc:7c:73:a1:42:
         6c:cf:8e:2c:fb:52:62:02:77:32:6d:04:7e:47:6f:04:d8:b2:
         b0:d2:79:64:67:a7:98:76:ed:a1:9e:d6:57:f0:33:9d:60:24:
         7f:38:fe:28:1e:32:84:76:17:e2:f1:f1:7a:2d:97:c6:8f:2b:
         3a:38:9d:4d:5e:3a:70:a4:fb:5b:d5:4c:74:7f:aa:07:ad:d8:
         32:8f:66:87:db:3b:49:4a:5e:a9:1d:c2:48:0a:ee:57:22:29:
         28:67:d1:95:1d:45:2e:c4:4e:e0:20:0b:b3:35:6d:1a:98:7c:
         4b:19:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----