Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File:                     sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier:          sVsSh+CdGDcXEFnAThDhzpA0fYhT5NJut77qa+TOPdk=
Subject key identifier:   96:09:99:E3:C3:25:53:C3:0A:A1:85:A8:C0:F7:D2:98:E9:8A:67:A0
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer:       /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial:       01962E61F9098861600FB833018811381A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: GK90kHPj+x3z3zpBFaABvMbjCjyBQA9yNAUfW7+pvUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:09:88:61:60:0f:b8:33:01:88:11:38:1a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=960999e3c32553c30aa185a8c0f7d298e98a67a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:7d:5b:0c:94:da:40:8f:72:2f:a5:d9:2e:
                    8c:16:aa:c7:05:67:57:e9:ac:f2:1e:9a:24:c8:e2:
                    bd:1b:74:a9:a0:25:03:91:c7:50:e2:be:27:8c:81:
                    03:63:9c:e7:a3:c1:13:18:d2:b1:98:84:ea:92:47:
                    12:a9:7b:0b:06:0a:2b:b4:0e:d7:ea:7d:01:c6:52:
                    37:fe:b3:71:dd:76:d0:4e:ae:53:b5:10:d4:7a:df:
                    50:86:ff:bb:2f:ac:dd:d8:0b:1b:38:9e:a3:bc:fe:
                    04:3b:5b:1c:52:cb:7c:60:c3:a8:eb:c2:63:15:60:
                    f8:5f:17:42:a6:b0:56:4d:91:f0:c5:d6:10:aa:53:
                    6f:a6:94:7d:7b:be:a6:19:49:d7:97:32:fe:13:d2:
                    e1:7b:90:f1:18:ad:bf:e9:71:f7:99:74:10:38:ca:
                    28:cb:40:63:f3:0c:65:4d:8f:1f:36:f6:4d:4c:d2:
                    ee:2c:99:7e:08:56:c5:76:95:5c:1f:47:37:60:ac:
                    df:3d:0f:f0:58:44:18:32:ec:00:ba:33:df:ed:07:
                    d3:bc:7a:f0:fa:6c:b0:c0:a5:9a:45:3d:55:50:1e:
                    bb:32:0c:1f:2b:0a:55:3f:99:3c:eb:4c:f4:86:e3:
                    de:6e:2c:ce:6c:c5:75:69:4d:7a:cc:e6:59:9c:b2:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:99:E3:C3:25:53:C3:0A:A1:85:A8:C0:F7:D2:98:E9:8A:67:A0
            X509v3 Authority Key Identifier:
                keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fa:ee:8a:af:04:17:8f:56:20:02:08:84:77:28:e6:ca:97:
         c8:96:06:f3:b1:69:e6:ba:4d:21:db:49:39:e9:63:5a:2e:a8:
         6f:c9:a0:b2:f6:62:f0:74:dd:ec:d1:9c:2b:25:54:c3:b9:aa:
         70:ff:b5:6a:2e:88:fb:0c:40:b5:ff:93:60:b8:ae:d1:52:68:
         51:1e:25:22:73:e2:42:38:93:75:ad:4c:db:c9:00:29:19:5a:
         c2:17:af:09:98:47:0c:d1:9b:a3:d7:96:fb:7c:a0:99:2d:75:
         d4:89:f1:74:32:44:a9:11:18:e4:cf:e0:70:fb:dd:21:3a:a4:
         f3:93:ef:43:08:0b:5f:de:58:68:18:b9:a4:a2:8b:b1:cf:61:
         99:5e:93:dc:05:74:d4:ab:5f:a5:44:45:c4:f6:26:2e:75:f8:
         c8:56:8e:b4:74:8e:98:67:d8:c0:b8:08:e1:72:8b:16:68:fb:
         9b:e3:a6:25:ac:2c:6c:66:80:e4:b0:76:39:0a:98:4b:32:b5:
         ee:4b:f6:7d:31:11:3f:f8:59:6c:8c:bb:ab:92:72:77:7e:d5:
         09:76:8c:91:57:6e:6d:cd:fc:e4:95:91:5e:eb:9d:52:00:8d:
         09:de:63:bc:fb:42:a4:9c:28:16:16:1e:07:c2:0b:a5:66:de:
         2d:0b:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----