Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          OgLwJ/JIEEgI5K6lvhuj/NrXCF12V2civta/Ib9qR7o=
Subject key identifier:   56:FD:12:6C:74:DE:62:F2:55:7F:C5:FA:D2:A5:6D:63:03:13:1C:B2
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       01962E996BF94F1DEF1B24F17A52941AB00F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          053C
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: ePKmTX8WuTNMKP2kkFt2Zf1Bkf9wBl9ugE8dVH2hNL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:f9:4f:1d:ef:1b:24:f1:7a:52:94:1a:b0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=56fd126c74de62f2557fc5fad2a56d6303131cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:d2:2f:ce:4a:ff:09:ed:88:b7:76:1d:f1:
                    98:c6:1c:29:7e:49:a9:59:55:cf:27:f4:6e:e8:dd:
                    b3:d9:7d:f1:7b:9e:96:e7:e3:4a:1f:a6:a3:4a:25:
                    62:3f:1b:c1:ee:7e:46:99:0d:ef:71:c9:51:17:cb:
                    01:33:2f:9c:5c:c1:a1:2d:4e:96:9a:9e:58:da:18:
                    4c:36:ed:13:66:9c:fb:e8:6d:ce:67:73:a1:54:de:
                    4f:2c:17:c8:7f:df:d2:a4:35:10:d6:fb:bc:2a:14:
                    5c:d3:eb:a8:0e:78:aa:08:0b:c3:6a:d6:5f:66:6b:
                    e6:54:76:3f:2f:4e:8f:0a:63:dc:0e:13:d9:a5:dc:
                    4b:13:e0:43:7e:66:4b:81:b7:d2:1b:8c:d7:c6:ca:
                    e3:09:0d:c1:7c:04:a5:75:dd:4c:61:c8:28:67:ee:
                    8e:86:65:7e:08:6c:06:c5:d6:e6:e7:c2:ca:ba:ec:
                    fa:7e:44:39:cc:03:e3:16:dc:b2:24:52:28:e7:69:
                    10:6a:2f:74:49:0f:01:37:d2:94:94:f2:33:d2:f3:
                    7d:ac:52:d6:61:0b:01:92:a1:b3:db:f6:72:63:c7:
                    10:89:30:f9:58:66:82:9b:b6:4f:45:71:7b:67:dc:
                    97:f9:ad:96:2b:6d:4a:58:38:7c:f4:bc:08:7f:31:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:12:6C:74:DE:62:F2:55:7F:C5:FA:D2:A5:6D:63:03:13:1C:B2
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:58:b1:79:97:41:6e:21:5b:d1:24:30:a0:87:f6:a1:54:
         5d:62:80:c6:87:eb:08:cf:f5:c2:d7:ed:29:21:57:dc:ad:83:
         aa:56:6c:a0:dd:10:92:24:1f:59:b0:3c:92:63:0e:6f:7d:60:
         8d:da:48:db:cc:e5:fd:31:dc:f1:fd:ce:9d:1c:c9:66:91:0b:
         d0:ee:f8:5e:d4:e7:10:60:4d:59:81:b6:6f:de:9b:bf:a6:7a:
         39:6d:4f:57:f3:0a:96:b9:75:41:42:bc:38:57:e3:b2:48:0f:
         19:af:49:37:2f:ba:7d:b8:fc:3c:ab:f1:ac:c1:24:05:74:1a:
         81:29:38:af:ab:6a:92:d8:4d:ea:fe:fb:6f:a2:a5:b5:7c:49:
         3e:6b:40:f7:28:89:47:7a:e9:c7:34:fc:1b:e5:72:ee:b9:99:
         71:36:d5:e0:2e:9e:92:bb:cb:51:85:ce:f9:38:b5:8d:bb:60:
         d5:7a:45:4f:66:69:ed:57:e2:a0:b1:dd:85:62:1b:a0:31:73:
         d6:9c:74:73:ed:21:04:5a:21:b9:e6:74:89:82:2f:7e:67:92:
         43:0d:65:3f:7a:fb:dc:f6:99:0f:77:25:35:64:61:68:8f:f8:
         11:a0:d4:57:2f:f9:87:2f:a5:6b:f4:b6:ef:e2:92:05:4a:93:
         29:f1:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----