Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File:                     aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier:          yS1I0HRdWTf49dvcOsRW24o3IoxGTLACHzAMuxRBBTs=
Subject key identifier:   FD:C3:98:D3:F1:9C:9B:E4:8B:58:43:51:03:E6:F0:7C:F5:9D:D9:34
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer:       /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial:       01962E9932EE08B1B7D7A14E5E9A2D7EEE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number:          113A
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: oYV+VcMB9k+hRZ8LTnoPkAhlMuGZj5klNKWWqTJvmmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:ee:08:b1:b7:d7:a1:4e:5e:9a:2d:7e:ee:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=fdc398d3f19c9be48b58435103e6f07cf59dd934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:d9:b1:a5:d2:0e:fc:5e:9c:82:94:fb:a3:
                    55:58:51:40:7f:8f:b9:10:18:34:c5:52:d1:eb:a8:
                    d4:33:85:c9:58:d8:a4:6a:b3:64:08:a1:68:97:af:
                    f3:07:61:49:50:28:69:cb:c9:08:a6:0f:5d:40:0f:
                    22:25:e0:1c:b4:43:4c:d2:54:0e:69:12:d6:1c:38:
                    8b:29:f6:a8:4b:e9:a1:13:56:65:ed:0c:bb:19:14:
                    fd:3e:bd:3d:5a:a7:30:99:94:7c:8d:af:8b:19:4c:
                    0c:fa:5f:84:4a:73:e2:17:8a:2f:77:fe:0b:b0:bb:
                    ef:08:fd:3c:d1:f3:ca:e6:3f:2f:14:3b:1d:7a:0a:
                    0f:06:b9:13:25:54:24:8e:a7:96:80:48:91:15:ba:
                    0f:d7:40:34:e1:76:0c:05:c7:6d:fd:79:a3:8d:86:
                    c6:68:f6:cf:d7:53:87:5b:da:69:77:dc:99:e7:ea:
                    22:e9:f3:89:f9:c2:8a:cb:ba:4d:36:61:a6:3c:be:
                    55:69:76:0d:0c:10:b8:57:a0:92:af:ab:9e:0d:03:
                    2b:cb:98:ef:5f:b6:66:44:80:ef:e7:8c:d2:84:ed:
                    6a:df:6d:9b:cd:c2:5b:be:2f:5d:46:e0:15:5e:d0:
                    9a:f1:e2:fd:a3:ed:a5:9e:da:35:38:e1:1f:49:79:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:98:D3:F1:9C:9B:E4:8B:58:43:51:03:E6:F0:7C:F5:9D:D9:34
            X509v3 Authority Key Identifier:
                keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:9f:19:f5:28:27:a3:6d:a7:a2:04:6c:26:fa:3f:82:c7:d7:
         c6:2f:24:3d:d9:58:3a:d7:af:05:75:48:e0:02:d7:8c:b9:4f:
         74:ee:7f:c5:99:c4:34:0c:82:a8:81:c3:2c:7d:9c:62:21:49:
         01:1c:a6:32:7d:06:0c:77:3a:6d:bf:ff:9a:fa:a9:b2:d6:f4:
         23:49:83:78:09:cf:13:6b:1d:0c:e5:0d:f3:56:1e:75:6b:14:
         f3:a9:f7:4d:26:19:b1:a0:eb:1f:d0:e9:54:89:67:d6:44:70:
         d8:36:54:eb:3a:f4:4a:fa:af:25:12:f5:7d:09:9f:47:ed:d2:
         02:4d:c9:f5:20:e6:c0:5b:10:3f:98:d5:26:96:7a:c0:6b:5e:
         65:7e:f8:67:a9:f3:cf:68:86:7b:2b:5e:b6:9a:27:bd:11:53:
         1a:d5:ee:59:80:43:a2:e4:21:19:2a:3e:a5:e6:7f:e4:a6:67:
         73:2f:d6:16:f0:d0:93:70:24:ca:14:39:fe:2c:36:57:35:cb:
         7f:20:16:0f:e7:a9:58:79:34:d7:9c:db:d6:69:b6:a5:c1:2d:
         96:23:42:8f:1d:b4:24:0b:11:cb:d2:2c:6f:e9:db:fe:d7:34:
         3b:ac:af:78:dc:45:81:53:6e:cc:2b:61:66:5f:d9:1a:1b:80:
         7a:dd:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----