Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          X/jx3anHD+zbHMK8otsfAci1jLoCrOJB7ep9w4cI8IM=
Subject key identifier:   96:9D:18:EC:47:DE:91:2D:A1:99:5C:97:FD:1E:F1:75:FE:1D:7B:12
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       01962E98CF86277397CBDB4D473BE4957C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          09CE
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: 8t0490sK3AZRZUXU6kuIN+keSSzmctdnxTtPwNGmoVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cf:86:27:73:97:cb:db:4d:47:3b:e4:95:7c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=969d18ec47de912da1995c97fd1ef175fe1d7b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:de:cc:f3:aa:fe:a9:9b:39:bb:30:a7:ef:
                    eb:4e:55:b2:6b:b5:dc:01:f3:9b:3d:c7:6e:26:c0:
                    40:87:98:32:e1:b0:3d:5f:b2:f2:f2:4b:f7:3c:f9:
                    5b:cf:06:7b:28:2e:bb:ae:1f:78:d1:0a:d0:d1:89:
                    c4:4a:12:ac:a1:d3:a8:40:c4:02:a7:6b:bd:4a:0e:
                    5a:73:4b:23:8b:9f:22:b7:d4:96:ef:b1:91:50:5f:
                    94:e2:9a:ad:52:27:2b:3e:7a:11:96:73:e6:be:08:
                    f7:2c:fd:d3:57:07:40:a6:b0:f8:cb:83:66:58:44:
                    e7:a0:c5:8b:3b:56:70:6c:d7:5c:4f:f1:d6:8a:bd:
                    1e:db:d9:d8:bf:9a:5c:a2:f7:54:eb:b5:a1:da:2d:
                    6b:d3:b2:cf:fe:e9:f6:6f:28:d1:8d:07:7a:d8:54:
                    5e:fe:36:fd:2b:df:5f:a3:3e:1f:4d:9f:55:dd:25:
                    ac:c1:ed:d7:c3:5d:5d:69:eb:5a:0e:3c:56:33:77:
                    21:60:d5:cf:9b:51:f0:55:91:55:11:a2:e7:2c:c3:
                    b6:07:65:fd:ac:f9:df:1c:ee:6d:77:cc:2a:da:6e:
                    ef:c0:f3:d3:a4:c1:26:2f:bf:71:01:f7:e0:53:51:
                    8f:9f:fc:43:9f:73:32:8c:bf:fe:95:63:30:95:76:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:18:EC:47:DE:91:2D:A1:99:5C:97:FD:1E:F1:75:FE:1D:7B:12
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:25:30:de:db:d5:6c:88:56:05:0c:7a:34:d7:c3:9b:d8:11:
         39:56:ef:43:73:58:5e:d0:3b:11:c6:1c:8b:12:4b:33:15:14:
         43:5f:cb:4b:93:9c:76:65:d9:5f:50:5f:21:16:3d:3d:8f:c7:
         1f:b4:66:d8:01:c4:64:58:95:ab:f4:dd:d0:ce:2f:fc:a0:7e:
         4f:b1:00:a1:ee:e2:6a:e3:4d:cb:5a:a6:56:82:bd:fa:96:93:
         c7:84:53:6b:37:df:90:c9:bf:f0:fc:4d:36:1f:c3:8b:9f:ce:
         22:0c:ba:3b:82:dd:74:c3:f9:37:64:fa:e6:33:e1:49:1d:7a:
         e3:98:67:c1:12:aa:34:a7:cd:da:ae:fc:34:d2:db:5e:a0:ab:
         5b:12:0b:23:ce:bb:22:dd:f3:20:c6:55:b2:30:f0:80:cf:2c:
         1b:af:3c:2a:da:72:88:03:07:5f:5f:94:73:3a:68:07:72:52:
         3d:33:e0:d6:8b:d4:5a:d1:19:d7:42:8a:e4:f3:ac:34:63:ef:
         b1:b7:68:d4:70:82:c1:43:6c:0b:bc:8e:cd:b4:5d:b9:80:10:
         f0:00:91:26:36:10:7d:15:98:93:fe:19:9e:d8:56:14:3b:3c:
         bf:e5:44:27:7c:a4:65:63:10:f9:07:22:68:ab:ad:c5:84:a2:
         96:72:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----