Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File:                     D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier:          U5XSvYVwkRN453QMa1oUwBEQsE/hfgtcC3Rmzuum5AA=
Subject key identifier:   F1:F2:A1:33:D0:57:7A:56:31:09:61:4C:08:DB:2A:62:69:DD:37:5C
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer:       /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial:       01962DF455E7561F8FCE7B4166F5BABB73F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number:          120D
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: iHE4mw6UYSubW1it53vJyYBc8JAZv1S9kTA84xLocO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:e7:56:1f:8f:ce:7b:41:66:f5:ba:bb:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=f1f2a133d0577a563109614c08db2a6269dd375c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:84:2f:6f:3a:b8:1d:eb:1b:4d:6e:84:84:31:
                    2b:f6:56:d9:8e:bb:4d:d9:7b:2b:3b:be:27:c8:6a:
                    b4:2d:c1:ec:03:c7:8b:05:23:f4:89:b1:d9:2d:e2:
                    ba:7b:43:80:be:32:7c:fc:e3:17:3a:08:fc:76:69:
                    11:e8:66:84:48:49:83:34:69:89:75:59:dd:c2:6f:
                    0f:38:e6:27:28:bb:41:2f:b8:f6:2d:56:a0:e6:5e:
                    c9:63:01:8e:e6:c6:ea:de:7e:d5:4d:cb:a0:2f:36:
                    ec:1e:c4:31:28:e1:5a:ca:ef:16:20:16:49:c3:66:
                    3a:75:74:de:42:aa:54:6d:23:2d:9f:c4:9e:b1:3c:
                    bb:62:60:99:eb:ce:3f:a9:58:e5:42:15:93:1d:64:
                    f9:0f:92:5d:43:51:15:eb:c8:f6:f7:cc:a3:07:55:
                    26:46:6d:84:33:d0:97:1a:eb:5c:19:de:e7:5e:d5:
                    99:e0:89:34:e3:01:15:f1:f6:4a:0e:25:6a:2f:cb:
                    e7:d3:50:46:6f:5d:40:f6:24:eb:8d:cb:b9:5d:96:
                    e6:68:ee:9d:7f:70:80:5c:b9:2f:12:c4:17:00:05:
                    8b:22:15:61:81:63:36:d3:90:21:29:7c:90:c4:fe:
                    91:56:34:91:39:94:e4:fe:0f:0d:53:b3:b8:a3:14:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:A1:33:D0:57:7A:56:31:09:61:4C:08:DB:2A:62:69:DD:37:5C
            X509v3 Authority Key Identifier:
                keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:db:12:2a:5a:4f:f2:d4:15:55:78:62:05:86:66:ce:de:08:
         fd:eb:35:fa:00:b3:f5:24:34:28:ad:89:c4:70:05:32:a7:3a:
         49:69:b8:30:f8:49:df:ad:0b:85:9a:df:f9:99:db:26:a9:e0:
         ee:de:9d:ec:38:8a:b6:94:1e:f4:58:e8:c0:4d:d0:18:90:a4:
         42:b4:b2:a3:52:66:47:5a:95:b0:5a:62:35:53:1d:e9:df:a1:
         92:26:3e:a2:6b:f1:66:8c:58:c8:86:89:81:94:97:d4:05:69:
         91:d9:28:da:e6:e3:43:b3:c3:2a:42:bb:a8:f7:a5:b7:fe:c3:
         69:27:70:a2:2c:59:18:59:91:58:e0:79:82:8c:7f:28:53:2f:
         6c:1e:44:78:5b:97:71:e9:d4:d0:aa:7f:03:2c:b9:9b:e0:30:
         d5:eb:5e:a6:8e:55:75:fd:2d:83:1f:a3:a2:9d:7d:92:9e:09:
         15:8d:fc:aa:44:ed:6a:6f:69:13:ef:b6:a1:32:4b:6d:0b:96:
         fe:4e:2e:ea:63:6e:9d:20:7b:14:0c:b7:fa:9d:f8:7a:df:70:
         b6:6c:2b:14:89:76:74:02:86:0c:d8:48:fd:53:88:a6:e9:84:
         ed:28:19:e9:f7:28:f1:db:3a:db:54:32:5d:f1:06:57:92:80:
         eb:5d:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----