Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
File:                     Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft (raw, json)
Hash identifier:          W3SdOqSRH8xCb+d1BON+cWhgsbv+Hp0COqWnl+DlVas=
Subject key identifier:   AC:39:BE:77:62:FE:F9:89:0F:06:2F:2D:E8:23:F5:79:5F:AB:6A:D7
Authority key identifier: 4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14
Certificate issuer:       /CN=4b177c450d2035067baa26920b8a4bd36c7b3314
Certificate serial:       01962E995773B3182853662CA5C61E64BBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl (hash: 2eb3xSBwMnHcK4P7t1H7z/56mr4/UoA9Dh+BYAqlJc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:73:b3:18:28:53:66:2c:a5:c6:1e:64:bb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b177c450d2035067baa26920b8a4bd36c7b3314
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=ac39be7762fef9890f062f2de823f5795fab6ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:45:9d:3d:ea:26:a8:a8:6d:47:4f:c8:f8:
                    19:e6:80:e6:c4:99:63:e2:93:39:0b:2a:9f:b9:3f:
                    db:cc:79:bb:61:55:2c:b1:16:82:79:b2:f6:07:f0:
                    c7:ed:e5:5f:2c:03:ff:07:75:32:cc:d2:46:43:34:
                    8d:f9:84:b8:35:94:8f:b5:46:cf:a0:f0:55:bf:6c:
                    9c:6f:a7:77:e8:28:ab:c2:c3:d3:42:8c:ea:97:4d:
                    1d:e0:a3:4e:49:8a:5e:5c:72:d8:aa:e1:62:f8:e9:
                    64:85:78:de:20:09:e1:7c:19:fa:54:4a:1a:0b:29:
                    52:63:44:e5:97:94:d1:05:7a:c9:35:83:d8:ac:a9:
                    dd:be:d3:78:54:d5:74:52:c1:d4:f7:0b:fd:7c:84:
                    e1:fe:14:12:b0:58:a3:82:97:d5:ef:ae:6a:fc:dd:
                    80:29:12:f0:bf:6a:6b:2a:33:e1:5f:46:f0:19:d6:
                    97:a8:49:fd:94:a0:41:72:4e:a7:eb:1c:cf:58:d2:
                    f2:aa:07:d8:62:c4:83:c8:b4:5b:f1:01:df:ea:79:
                    10:4d:02:1d:67:6b:ff:6c:3c:05:d5:70:ec:4d:ab:
                    4d:f1:c9:07:e2:ae:02:e5:a4:ef:ee:4c:77:26:ea:
                    7a:ef:a7:ba:18:7f:a3:c6:57:dd:db:9c:47:62:dd:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:BE:77:62:FE:F9:89:0F:06:2F:2D:E8:23:F5:79:5F:AB:6A:D7
            X509v3 Authority Key Identifier:
                keyid:4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:e8:d9:e6:c7:68:b9:31:d4:43:32:6e:04:2e:f8:0f:e2:
         02:e5:d4:d5:01:de:a1:cf:08:7e:7f:41:10:41:5e:ca:82:e1:
         10:b7:a7:84:73:20:52:33:d5:f0:db:f9:87:ea:de:ea:c0:87:
         f6:d0:fa:3b:39:0a:c8:f1:c9:1b:ef:58:49:63:0c:e5:93:2b:
         48:47:78:1e:34:9c:fd:a8:3a:a0:94:bc:d9:01:7d:e7:f6:70:
         f6:41:25:b7:bc:70:52:81:e4:f0:35:44:72:04:84:a8:ce:9d:
         07:e6:1b:df:12:6b:d4:c4:43:e9:f5:25:07:10:f0:ce:8c:6b:
         d1:d7:ab:cd:5f:0b:f2:1f:64:10:36:de:db:13:e2:55:9e:6f:
         fa:35:49:9a:e3:f9:d3:3f:9e:b5:86:3c:b2:a9:31:bf:e0:a9:
         a4:a7:b7:ee:d3:18:60:5c:e5:21:83:da:52:d0:51:c0:00:4f:
         77:21:be:60:d2:92:49:a4:54:16:be:87:7d:ee:bf:05:8f:b7:
         61:80:8b:5f:4a:cb:4e:bb:80:33:16:e0:4b:d4:32:99:52:2b:
         9a:5e:5e:6f:df:5d:e3:85:31:22:23:8f:4f:65:59:a0:d7:30:
         9a:b4:37:31:89:b1:1c:ce:ba:12:82:d0:5d:b5:29:46:9f:03:
         b6:96:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----