Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File:                     rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier:          QfY/XM9gS9lUXZtlxRzSdodKreCFfylbH52fJA5DsQw=
Subject key identifier:   82:AB:C1:57:D0:D3:13:6C:A2:57:01:23:00:4C:FE:A5:DF:B4:7F:6F
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer:       /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial:       01962E98F427C802E27D77BADE39AAC6E720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number:          119B
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: Q8y0ExAnBhTMRodspzG5+ePO1QpLsjEEu1ZNR0yVbDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f4:27:c8:02:e2:7d:77:ba:de:39:aa:c6:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=82abc157d0d3136ca2570123004cfea5dfb47f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:e8:36:10:95:d9:40:d1:77:51:e5:96:d0:
                    8c:87:76:21:05:65:f9:37:55:2d:c0:4d:b8:cf:6d:
                    95:ac:d7:6e:07:6e:db:cc:6b:60:fe:78:16:0d:a2:
                    74:44:9b:01:d0:b9:19:99:49:4e:56:90:33:75:24:
                    5e:b1:dc:ab:1a:f2:fa:01:2b:59:14:28:d1:a3:5f:
                    a3:8e:4e:aa:3b:29:16:dd:3a:40:89:85:05:3d:ad:
                    b0:48:4d:63:84:ec:3d:ff:82:a1:11:84:bb:15:80:
                    92:d6:cd:ca:b8:05:d9:15:ed:03:5d:cf:f4:78:3e:
                    fe:35:e1:2e:bb:ab:cb:59:db:67:84:43:fd:b4:80:
                    9b:a0:2c:8e:8e:1d:a6:aa:27:90:a0:e7:e2:8b:47:
                    a4:3d:eb:cf:1e:21:63:ad:bf:8b:fc:22:bf:09:d1:
                    a7:7f:d1:cd:04:d8:26:c7:fc:a8:5f:6d:72:ac:51:
                    0b:3b:9d:12:cf:4b:15:6e:74:6f:e9:8f:88:a8:df:
                    eb:f4:5d:f6:24:8d:86:6e:d4:7d:71:45:f5:9d:e3:
                    ff:a0:bc:86:a0:18:b5:f0:f2:42:28:92:aa:c4:b3:
                    6b:03:4e:25:13:0b:23:31:1b:1a:b3:cb:9e:ca:ea:
                    a4:bc:d7:c2:af:52:43:fd:7e:0d:6a:6d:c2:6c:35:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:C1:57:D0:D3:13:6C:A2:57:01:23:00:4C:FE:A5:DF:B4:7F:6F
            X509v3 Authority Key Identifier:
                keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:81:02:05:d6:80:af:5d:96:f7:c0:37:18:0c:74:9e:e2:
         eb:62:05:28:d7:76:01:30:ca:6a:ab:75:ca:6a:f9:68:1c:9c:
         59:19:31:a1:22:19:69:0f:60:15:ac:dd:d2:20:4a:8a:93:6d:
         34:36:e0:13:0f:3f:0c:ba:96:cd:64:4d:f4:b0:1d:e7:07:96:
         25:32:44:94:07:98:bc:90:0e:57:f0:24:1f:db:ce:2e:63:f8:
         c4:5c:dc:72:89:a9:88:09:7a:3c:1b:c0:b4:01:8c:5c:79:e1:
         02:e8:cd:a7:0c:89:5a:0f:c3:74:ed:49:a9:d5:1f:0c:55:ad:
         09:3f:86:b4:b2:e1:8d:bd:f2:fc:bf:88:bf:b4:78:19:f7:d6:
         78:37:0d:e7:1b:7e:72:c8:fb:30:69:06:5f:ad:0e:68:d3:50:
         6e:16:10:d4:84:0e:af:fb:b2:a6:fe:37:07:e7:5c:64:10:d9:
         11:de:07:8d:81:a6:59:a7:06:ba:df:70:18:a1:d6:64:46:b3:
         a7:24:ec:2f:c3:82:d2:fd:83:cf:fe:75:b9:95:f2:5c:ef:66:
         89:f7:89:8b:6f:ff:9a:df:e2:33:e0:6f:b2:36:d5:ac:62:22:
         d4:04:e8:9e:7c:33:1e:c6:de:be:d2:16:12:15:7f:b8:05:6c:
         40:02:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----