Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File:                     sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier:          e7gLKEz7juRP5p5NY0y0mO2pVUx9RZGnoORLUE+B9R0=
Subject key identifier:   C4:7E:F2:27:53:F0:3D:65:A1:04:27:DF:26:16:54:ED:E6:F4:AD:13
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer:       /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial:       01962F3DC9F43578F068AEC5E0B30A46DED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: jkBdYCPQYvt7g7jDSTia3GwBfRXnLNY2aTpmrFFPxR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:f4:35:78:f0:68:ae:c5:e0:b3:0a:46:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=c47ef22753f03d65a10427df261654ede6f4ad13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:8b:c5:ce:15:d0:51:8e:1f:06:35:c1:84:
                    e0:ed:35:16:e1:42:77:78:53:3e:dc:66:8d:d0:8f:
                    51:ed:d1:b9:99:76:4a:4b:3e:4f:0a:22:43:06:31:
                    fa:4e:4e:25:29:81:16:b5:ba:57:62:ae:41:0c:0d:
                    4d:04:9b:4c:47:88:a5:1b:4f:a6:60:06:34:20:00:
                    1f:aa:93:c3:c4:68:61:ec:1a:9a:28:28:1e:a3:d2:
                    f5:df:25:2d:a8:f7:72:92:03:68:ec:c3:e4:7e:53:
                    2c:c4:64:0f:f9:0f:02:8b:5a:a7:54:02:75:d1:b3:
                    01:c0:d7:94:b9:1a:95:be:21:2a:8b:11:68:ce:96:
                    12:35:cb:4d:b7:55:20:3c:e5:41:72:e9:8e:10:95:
                    e6:91:3a:91:c1:ec:d7:6c:f2:93:22:43:46:85:bb:
                    02:26:89:f2:c0:00:1b:87:4f:9b:65:ea:15:90:d2:
                    28:7c:e9:e1:10:a1:21:8a:a0:df:07:c9:bd:e8:21:
                    05:ff:82:34:52:0f:c5:6f:15:16:66:6a:8b:f6:27:
                    14:d6:37:68:1e:90:69:b6:ab:23:a5:40:47:c3:23:
                    fb:6e:f9:ed:07:be:42:92:a2:1b:a1:2e:dc:96:bb:
                    cf:26:2b:0b:e7:a2:a8:d8:57:74:95:e6:62:a4:52:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7E:F2:27:53:F0:3D:65:A1:04:27:DF:26:16:54:ED:E6:F4:AD:13
            X509v3 Authority Key Identifier:
                keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:19:44:66:e3:a1:5b:c5:21:a3:36:06:df:d7:32:fc:d5:
         33:53:4b:77:0d:fc:4a:c0:eb:b8:28:60:12:38:ed:3a:d0:3c:
         77:42:ae:f6:bb:a8:61:6e:90:34:85:23:9f:5b:a6:2c:c3:57:
         bb:e6:25:31:05:0a:f4:db:2b:ee:41:12:27:e7:bf:3b:45:85:
         a4:c6:12:1b:14:4b:35:ac:ce:bc:c6:63:77:82:9a:79:1d:be:
         03:00:ee:d6:52:59:d8:70:ef:50:00:64:c1:b3:af:67:06:dd:
         77:39:42:2c:11:0a:e6:19:e7:32:1d:83:f0:c2:3f:29:23:7b:
         d7:0c:1d:ad:99:cc:ad:88:b6:f0:bb:e3:0f:29:01:a1:28:2e:
         91:31:79:ae:e3:9e:47:87:78:a6:ff:07:0e:30:c7:82:79:61:
         7c:df:df:17:7d:41:53:93:b3:7a:5c:9e:e4:20:2d:ba:67:00:
         f7:35:0d:97:1e:b6:c1:55:af:68:f7:2b:a3:e3:e5:ce:11:99:
         f9:99:cc:8c:f6:52:be:e9:70:07:23:42:c3:2d:39:d1:0b:62:
         a2:b9:91:b8:45:be:f3:21:0f:95:f4:c3:51:02:d7:14:36:b5:
         8f:33:e3:64:9e:cf:6e:77:43:a0:c0:80:7f:75:f1:3b:11:c6:
         12:c8:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----