Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File:                     id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier:          hqhaxLN4i1UvSF9Ujd0+cMM7UWvsLEP8FgszzW21fg0=
Subject key identifier:   E7:91:01:60:A6:07:E6:D2:1A:C8:5C:3A:B7:89:C6:55:A5:3F:B8:34
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer:       /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial:       01962F7482A08EA009D3C4C45765D3D3C620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: /bmsBKspbGIy6r3xPXNBjaBvU+gybYCJcBRjKwazXRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:82:a0:8e:a0:09:d3:c4:c4:57:65:d3:d3:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=e7910160a607e6d21ac85c3ab789c655a53fb834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:0f:70:ed:3d:22:ea:cd:f8:a8:fe:65:8a:
                    2b:f2:7b:94:c9:47:7c:0b:f1:69:25:37:22:1e:f3:
                    82:56:9d:22:f0:0b:a2:32:4d:51:0e:47:47:0e:3f:
                    87:69:19:9a:78:48:d2:90:2d:70:b3:4d:9e:42:5f:
                    64:ba:35:46:68:eb:a8:6e:55:1a:25:11:b2:57:52:
                    b2:54:39:66:aa:a5:ad:19:72:9d:08:af:30:4e:57:
                    67:f6:f4:9b:1d:28:ca:3c:06:f1:bb:13:ae:c8:60:
                    14:c0:89:3f:78:d4:9c:ca:84:57:65:95:56:98:28:
                    15:e5:b4:53:8f:e6:77:c3:26:e6:23:5a:ba:1e:d8:
                    11:68:60:43:fc:92:a5:79:03:49:45:25:c0:1b:2c:
                    7d:bb:2c:ff:61:26:38:4a:8a:07:15:ec:f0:27:44:
                    08:31:b2:f9:44:8b:c1:14:49:6a:66:db:a1:5c:d7:
                    d4:28:be:ea:4c:25:58:35:e9:5b:9d:66:fe:29:61:
                    1a:c2:d2:a6:1f:83:00:dc:5a:f0:f0:56:51:61:dd:
                    ca:12:4d:ca:79:23:d3:13:e0:83:c3:ca:42:2f:95:
                    b6:a2:48:26:09:de:f4:3b:80:db:6e:6c:66:25:94:
                    10:d6:9d:6a:4f:03:cf:10:c4:4e:07:85:9e:d9:63:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:01:60:A6:07:E6:D2:1A:C8:5C:3A:B7:89:C6:55:A5:3F:B8:34
            X509v3 Authority Key Identifier:
                keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:b4:df:dc:f5:57:5c:fc:76:24:60:85:80:d4:69:29:13:
         7c:df:f2:d1:ca:3e:80:60:b9:da:2e:4f:ab:88:21:03:d1:5c:
         9b:59:2d:e0:45:d8:86:5c:58:fc:97:3a:e0:38:35:cd:99:fa:
         ec:1a:74:4a:7e:d5:cd:79:e7:ae:87:69:6b:89:9c:33:a6:f6:
         fe:a1:75:d6:74:b6:bc:22:70:1a:cd:bd:ca:4a:36:d1:a9:39:
         ab:c6:83:2f:5c:5d:7c:62:79:5a:44:bf:65:67:ea:6a:56:ce:
         0e:58:ec:4a:47:a2:c4:3d:2f:c7:fb:ac:ee:85:7d:ad:40:f2:
         23:c7:05:65:56:a9:eb:fb:5e:11:9b:83:b7:41:c6:5c:fd:ed:
         31:1b:06:27:f6:77:63:c6:21:f2:2f:7b:62:b7:0c:8e:86:8e:
         ec:aa:3a:20:88:8e:7f:8f:ba:12:c9:c5:7f:b1:d4:ee:20:7a:
         90:96:5b:9a:58:e8:a5:96:3d:84:a8:73:12:b3:86:ba:7f:8a:
         0e:a1:ab:d2:59:75:53:78:40:18:c4:8a:d7:f8:3d:59:fc:41:
         4e:85:aa:45:83:bf:32:ab:73:eb:04:53:ab:db:d9:de:00:46:
         c9:13:ab:ec:15:21:65:e3:03:3c:73:72:ce:8d:8a:1c:75:b1:
         10:ed:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----