Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft
File:                     Su3gwav6sSsMyZTOsd2_LA2t-iY.mft (raw, json)
Hash identifier:          fZ4/+UA60nqYlfQYwYPAp46TT8pQ1pAB6X2R2/TqUPk=
Subject key identifier:   58:B0:C7:B1:48:07:8D:76:AA:F4:54:22:71:F8:0C:4D:0C:7A:9C:25
Authority key identifier: 4A:ED:E0:C1:AB:FA:B1:2B:0C:C9:94:CE:B1:DD:BF:2C:0D:AD:FA:26
Certificate issuer:       /CN=4aede0c1abfab12b0cc994ceb1ddbf2c0dadfa26
Certificate serial:       019546DAB43FE312E3BF8D66AF18402950D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su3gwav6sSsMyZTOsd2_LA2t-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft
Manifest number:          0A63
Signing time:             Thu 27 Feb 2025 10:01:32 +0000
Manifest this update:     Thu 27 Feb 2025 10:01:32 +0000
Manifest next update:     Fri 28 Feb 2025 10:01:32 +0000
Files and hashes:         1: Su3gwav6sSsMyZTOsd2_LA2t-iY.crl (hash: VHhwHQi6IkbKj7JVfceH7kobPF9Hx+nt3vXhCYVVsPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:b4:3f:e3:12:e3:bf:8d:66:af:18:40:29:50:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aede0c1abfab12b0cc994ceb1ddbf2c0dadfa26
        Validity
            Not Before: Feb 27 10:01:32 2025 GMT
            Not After : Feb 28 10:01:32 2025 GMT
        Subject: CN=58b0c7b148078d76aaf4542271f80c4d0c7a9c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:15:57:b3:2d:82:5f:95:9f:1b:f4:a3:43:
                    08:b6:3d:03:e2:71:65:1f:fa:21:cd:4c:09:6e:bc:
                    d0:4d:b0:57:25:11:9f:93:a0:57:21:b0:46:69:79:
                    97:ed:c1:cd:bd:0b:43:32:04:8a:16:a4:49:4b:4f:
                    ab:75:6d:a9:fd:d2:7a:77:59:02:77:52:f1:0b:75:
                    49:f8:55:1a:16:ca:a7:e9:9e:6a:74:5c:a4:d8:d3:
                    5a:b6:b0:76:43:06:50:17:a4:7d:c5:0a:fb:2c:74:
                    d9:1b:ce:bd:b3:ee:ee:f4:1a:83:5c:0f:41:ba:d1:
                    5b:0b:a7:b3:bb:29:e4:e3:d9:87:5c:94:59:f4:cc:
                    43:c6:7b:a2:5c:de:be:07:56:87:94:62:15:1c:e0:
                    68:ac:f7:d7:42:9a:96:eb:97:c1:81:2e:f4:77:9e:
                    42:4c:2e:16:f3:90:6a:0c:c4:cf:89:83:08:30:d0:
                    ab:8b:a3:20:63:9f:93:de:fc:93:08:19:f9:0f:5f:
                    7a:9a:30:03:0b:b1:59:6e:1d:0c:2c:af:8d:28:db:
                    5a:b4:ad:85:d2:6d:3b:e4:83:16:4b:24:2d:81:99:
                    00:5a:ca:d0:f9:6c:43:b8:66:11:56:69:f2:b3:ed:
                    82:03:95:fa:79:44:84:a4:12:84:6d:84:2f:54:a0:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:C7:B1:48:07:8D:76:AA:F4:54:22:71:F8:0C:4D:0C:7A:9C:25
            X509v3 Authority Key Identifier:
                keyid:4A:ED:E0:C1:AB:FA:B1:2B:0C:C9:94:CE:B1:DD:BF:2C:0D:AD:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su3gwav6sSsMyZTOsd2_LA2t-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:81:36:42:7f:e6:4f:48:12:a8:f2:c0:2b:82:13:c5:94:cb:
         01:df:f2:33:c4:22:45:cc:42:db:d0:1d:03:19:b5:be:80:5a:
         ac:0d:14:e8:92:95:55:35:6c:00:fe:73:e3:e9:2f:fc:e2:dd:
         f8:4d:ff:95:b9:ee:c3:ea:5f:9e:1c:5b:b9:b1:89:58:fb:bf:
         01:af:49:34:42:a8:76:a4:e9:f2:ba:29:a1:d5:a7:ad:97:6f:
         f6:ba:ea:b5:31:63:b0:eb:df:42:87:d3:72:f2:d7:bd:3d:61:
         ab:bc:d4:b5:04:57:81:4f:97:5f:19:97:f6:da:37:99:01:5d:
         f7:39:61:fa:c8:63:4d:e5:b6:e9:0d:b0:36:0e:cd:63:fd:bb:
         3e:85:08:e4:02:31:c8:14:59:35:4f:72:3c:36:d3:df:df:97:
         7e:c0:c5:c3:7e:b7:ac:db:0c:69:23:6f:33:6f:35:69:7a:7a:
         3f:7c:d3:e5:42:f4:11:d1:34:11:bb:57:af:00:98:46:47:be:
         8f:88:61:49:ce:65:34:55:83:c1:8d:42:e4:9e:4f:14:4e:8e:
         36:b6:77:a8:15:fc:a6:55:67:8a:0b:34:8d:c9:f1:1e:20:4e:
         8a:b1:4c:83:96:02:ac:59:1b:f6:d6:7e:c7:af:f5:e0:f1:7f:
         5b:7b:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----