Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier:          BThk1/aA2VWZ8Kem0AkSnJwRHNrQcwjjt8hr73GN9mE=
Subject key identifier:   2E:DA:29:3A:9F:3B:D8:5C:D0:CE:D1:58:E9:84:E9:84:AA:B3:83:34
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer:       /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial:       01962E61DE5A6D7B92CA52716A8F817059DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number:          0A97
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: ltgLHPicbWq9aWWLC4ydDd6jMMGQQ/wPoCX3MduD/ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:5a:6d:7b:92:ca:52:71:6a:8f:81:70:59:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=2eda293a9f3bd85cd0ced158e984e984aab38334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:97:f2:c3:d7:3e:83:d6:b2:5b:70:b1:53:
                    ea:e9:7a:32:0c:f5:26:2c:44:63:ef:12:c8:bd:6d:
                    72:37:3c:19:65:a9:18:7e:82:e0:c7:44:49:84:eb:
                    18:ad:f4:c8:e9:be:f1:d5:09:d2:d2:e5:1b:72:20:
                    6d:da:0c:a9:3b:02:3f:4e:d4:2a:7f:7a:35:2e:1d:
                    2f:0b:fa:f3:32:94:1e:93:82:17:81:13:23:c9:59:
                    0f:40:0b:47:7b:95:85:d4:ef:4b:fd:c2:88:7c:fe:
                    fd:04:92:9d:08:8b:b1:8a:e0:55:e3:89:c3:31:a1:
                    ff:47:73:43:02:d9:7c:5e:43:35:31:56:9f:e3:cb:
                    7f:b8:10:06:35:0f:f9:9c:c3:8d:57:e8:da:3b:d8:
                    73:82:18:28:e4:ea:99:61:80:e9:01:0b:a1:6b:84:
                    ba:61:5c:58:98:41:dd:75:b2:01:73:4c:e6:51:24:
                    cd:bf:b0:2c:a3:98:ba:3b:11:73:a2:87:b0:2c:d5:
                    b5:ba:d3:df:90:90:1b:7a:12:f3:51:f1:d6:20:59:
                    85:56:31:b3:b9:29:6e:d4:df:8a:f9:e0:6b:5f:26:
                    97:e5:34:f0:03:a5:4d:69:54:a8:c8:ff:17:95:bc:
                    c9:50:7e:46:61:72:e3:1c:05:08:c0:fb:35:fe:e7:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:29:3A:9F:3B:D8:5C:D0:CE:D1:58:E9:84:E9:84:AA:B3:83:34
            X509v3 Authority Key Identifier:
                keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:5e:0f:d4:37:73:9a:76:39:7c:cf:99:d3:26:3a:35:75:
         53:5d:bb:4f:cf:92:70:d8:dd:1f:d7:53:67:42:6a:cd:1d:8a:
         74:16:b6:1c:27:07:c2:07:b4:d1:7b:0d:d7:8d:cc:f6:90:85:
         cf:e3:fa:9e:36:f3:7c:cc:43:50:d3:94:e6:4e:4c:d4:c2:5a:
         69:75:97:b9:a3:f1:38:bc:d9:68:ad:1a:6d:80:c7:f0:b7:6e:
         a7:40:d9:bd:09:ee:e8:c4:23:8a:91:05:67:c1:44:e2:83:77:
         74:59:46:77:04:c4:ad:2b:a8:bd:46:8a:0b:41:fb:2d:a5:c7:
         b5:7f:7b:8c:2b:ef:d7:8c:de:fd:90:26:06:8f:92:9b:0b:73:
         b5:8f:9f:b7:71:95:dc:73:c9:80:6b:a6:14:94:3a:61:ea:34:
         1b:10:31:40:91:34:96:a8:e5:5b:be:06:89:80:b7:c8:1a:27:
         5e:4c:4b:ff:7b:1d:eb:e4:6f:b4:25:73:20:d0:5a:e9:46:ea:
         18:94:07:99:2e:f6:4b:79:c3:ef:a9:8b:7c:1b:da:7e:50:50:
         4b:29:d8:f1:70:78:82:29:89:a0:ed:ec:9b:ca:d6:2e:ed:65:
         1d:da:18:00:94:2c:c9:1b:ee:55:10:e7:61:5d:e5:05:36:46:
         24:8e:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----