Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File:                     ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier:          X6/D8ZZBILngr0YsjEcDbXo3naqsyoZmOSUlX1uJGg4=
Subject key identifier:   87:2D:C5:F6:16:9F:B3:95:3C:E9:A2:45:CD:64:ED:22:8C:18:95:4F
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer:       /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial:       01962E990D9829148C40F7D8C1F8F13BB2CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number:          115A
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: k5NSzOsTa3e7O4y5itJkUq5jvrFA5+CvFM6W8OuKu5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0d:98:29:14:8c:40:f7:d8:c1:f8:f1:3b:b2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=872dc5f6169fb3953ce9a245cd64ed228c18954f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:88:05:08:48:90:10:5f:9a:f0:e6:b6:7b:
                    ac:eb:d1:0a:c7:04:b1:b4:46:e3:a2:a7:47:07:8d:
                    9f:1c:87:b7:af:ba:2c:71:62:b6:e2:12:31:37:8c:
                    44:07:30:6b:51:0a:37:4b:ae:99:7c:2d:02:8c:7d:
                    c2:5e:7d:cf:52:2c:ad:66:0b:44:d3:16:0f:29:39:
                    5e:ce:da:a6:dc:e4:0d:69:db:f9:f9:43:dd:be:29:
                    1c:73:8b:42:90:43:95:7e:ea:36:0d:d8:e2:92:44:
                    a8:ad:cd:b8:45:fb:1a:29:34:3c:9e:94:57:f8:22:
                    fa:4f:6f:12:28:65:b1:0c:6c:e7:d5:e4:c8:6a:da:
                    6a:a3:b4:41:03:58:63:e7:d0:65:b5:c6:81:a9:4e:
                    53:ee:9f:d7:23:96:5b:ad:4e:08:f1:4d:a3:1d:ef:
                    ce:d0:9a:97:6d:fb:5a:76:d5:63:61:7e:80:13:14:
                    0b:bf:23:c5:8d:77:94:a3:d8:a6:c8:fc:20:4c:02:
                    d2:55:64:ec:e3:17:30:7f:50:08:7d:b2:f5:76:8b:
                    5b:9c:f0:09:10:75:69:1c:4a:f4:59:88:d6:dc:44:
                    fb:84:61:da:c8:5d:72:0a:e0:b6:8b:dd:49:60:2d:
                    2b:73:11:bc:e3:23:3b:ef:bc:0a:0f:8a:bb:8c:18:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:C5:F6:16:9F:B3:95:3C:E9:A2:45:CD:64:ED:22:8C:18:95:4F
            X509v3 Authority Key Identifier:
                keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:91:14:83:f6:3b:34:5e:60:87:0b:3f:fc:56:4b:66:1b:
         80:96:9b:53:2b:10:b7:99:14:60:b9:26:7b:23:8d:2a:f4:67:
         31:15:c1:50:0c:04:14:c1:78:f2:f9:51:2b:02:41:dd:d4:e7:
         64:c5:3c:f0:b7:39:a4:45:3d:6a:6a:71:d6:52:46:42:bc:84:
         11:8e:8c:49:31:c1:28:ec:43:39:39:ca:52:8b:98:5b:e3:f5:
         c5:09:dc:7c:a1:92:54:83:0b:4c:27:29:64:5e:f6:f1:2d:32:
         8f:2e:55:1c:c5:5e:64:72:d6:e6:73:ba:d5:9c:97:93:0f:87:
         e1:29:93:86:37:72:3b:bd:d4:94:f0:92:3f:c8:d7:b9:2c:97:
         24:d0:3a:6b:81:31:b6:1b:c0:b2:42:5f:a5:ee:af:e9:c2:90:
         ad:8c:22:f6:30:88:3d:d2:19:7a:d9:a3:0f:99:0c:b4:9c:7a:
         70:b2:d6:ec:6d:39:98:f2:b8:c3:3e:a0:2a:a6:70:df:66:c3:
         d7:2a:90:1a:df:3d:54:db:79:75:38:9a:04:86:c4:4b:46:0f:
         2a:3a:a0:96:61:c1:d0:97:49:3b:f2:31:31:b3:60:cf:4e:2c:
         8a:d8:9f:cb:49:50:91:80:92:31:cb:a7:6e:b2:07:3d:64:d4:
         a2:a2:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----