Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File:                     1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier:          EHvJ+bTXDg3H45iC+394q7MTDHrJm/G5EuNWd6ehghs=
Subject key identifier:   B6:75:09:63:C6:ED:EC:4E:26:6B:80:03:5F:4C:A2:4D:E4:E0:5D:CE
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer:       /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial:       01962F746514160D44C05A7E74EB234A026D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number:          1056
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: +4bOGyqIRPF8HYyDWSvOslAl9CyNgjIl3WbBi3DVyUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:65:14:16:0d:44:c0:5a:7e:74:eb:23:4a:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=b6750963c6edec4e266b80035f4ca24de4e05dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:0b:c0:e4:11:f1:0f:1b:1c:57:b6:84:29:
                    51:ed:2f:3d:ad:f0:7f:04:df:fa:dd:5f:58:3f:3a:
                    03:3c:43:93:52:13:f6:7a:e2:1a:4c:a4:c6:d2:c1:
                    7f:b0:c0:95:46:4c:96:13:8c:95:0e:d2:db:28:ca:
                    1a:a7:92:89:bf:54:65:6d:90:91:e3:28:69:0e:17:
                    7b:84:22:60:00:01:00:44:0f:38:4f:58:90:70:45:
                    53:fe:e9:e2:7d:2d:8b:69:7f:88:f3:82:c3:e7:3f:
                    64:b4:31:cd:af:0b:9b:5b:75:44:e3:6e:82:22:1b:
                    5f:58:5d:b2:b6:c7:c5:88:2e:bf:bb:64:8f:f9:a6:
                    2a:4e:a5:33:8d:66:0f:90:d6:38:8f:4b:63:f5:7d:
                    d6:ae:dc:55:7a:93:1d:d6:4b:0c:1a:91:df:91:04:
                    ba:e8:15:a0:ef:59:92:f9:33:c6:b7:5e:08:9f:ed:
                    9a:02:9d:f7:7a:06:a5:40:37:8d:03:ad:36:2b:7e:
                    c4:df:3b:28:bb:ad:92:7f:b0:e8:6f:38:44:5c:76:
                    8e:3a:d6:39:cf:2d:d0:00:f6:01:51:98:e3:9f:44:
                    e0:c7:77:ee:6f:0e:57:5c:b0:5c:54:bc:de:6c:49:
                    6d:b5:65:65:22:2f:01:4b:dd:8b:ac:e6:1a:37:f1:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:09:63:C6:ED:EC:4E:26:6B:80:03:5F:4C:A2:4D:E4:E0:5D:CE
            X509v3 Authority Key Identifier:
                keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:46:01:65:b3:53:11:0c:80:ff:aa:89:ae:75:9a:c8:d0:
         d2:cf:e0:96:98:b7:b5:f2:f6:61:3f:13:17:a7:0c:a5:06:4e:
         3b:0c:87:53:59:a7:a5:98:a4:62:cb:90:91:33:d1:a7:7c:cf:
         e3:af:50:b6:c8:96:af:49:1c:e9:5e:57:0c:b5:d9:33:e8:49:
         86:18:14:30:01:d3:19:75:b1:c9:02:69:e3:6f:fc:9b:8b:41:
         67:fe:8e:b3:76:6e:51:b6:70:ea:92:4c:75:66:0e:c4:21:f0:
         bc:57:6c:c6:ff:70:1b:4c:5b:ce:19:c0:ba:d7:c5:7b:d1:f3:
         63:04:49:04:54:47:71:53:ff:6d:e1:ec:eb:4c:19:4c:39:57:
         6d:a1:b7:42:7d:53:57:b6:d8:05:73:3e:88:82:f3:fe:7d:9e:
         ae:40:b9:60:fe:7a:47:d8:5f:12:0a:70:6d:29:3b:9d:19:27:
         e5:17:12:bd:6b:c7:1e:f3:2f:75:e9:81:a6:61:d8:4a:68:13:
         4a:52:41:2e:11:08:98:fe:c0:18:5b:5e:d9:13:3d:c2:5c:8e:
         83:44:e8:39:dc:2e:53:fd:64:fb:1d:29:42:2b:01:e6:61:71:
         c2:20:5e:0f:a0:c8:57:4d:90:5c:f6:20:88:dc:e0:2c:b1:17:
         c7:d5:b6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----