Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          w8Dq/Dhx1f3TfCjsgBXDhIuRK555UoFgncWA+vYhqTE=
Subject key identifier:   9B:21:DD:A3:DE:33:49:DF:BF:36:1B:CF:9B:B3:5F:52:3D:B2:22:CD
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       01962F06D3FE7D43AC7477308ADEE38F23AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: 5dsBeUjcWbijV0zvz5ZlTjYdo+vZIlxcO3g6KFLM0lU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d3:fe:7d:43:ac:74:77:30:8a:de:e3:8f:23:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=9b21dda3de3349dfbf361bcf9bb35f523db222cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:6c:41:28:03:6e:48:6d:b9:a2:c5:2a:68:
                    71:54:05:a0:95:02:22:7b:5d:05:9a:76:61:51:86:
                    71:c8:cf:00:79:0c:ed:77:97:04:80:ef:43:3b:f1:
                    be:8e:5f:88:ce:5a:73:ed:ad:4e:88:a3:14:fc:d8:
                    20:f5:d0:d9:c3:35:55:d3:23:77:61:a9:bc:aa:9e:
                    1f:1d:76:3e:6b:a0:d7:de:cd:21:f0:1c:e2:ae:84:
                    ce:45:b2:ea:7b:27:c3:dc:16:ec:d5:dc:2b:d6:fd:
                    ae:57:f4:01:10:02:2a:ea:43:38:36:d8:f5:38:2a:
                    7b:b2:da:44:86:5e:c6:0e:12:91:f2:07:b5:84:36:
                    5c:4c:63:f0:5d:d9:d5:4a:a9:c1:6e:f7:ec:99:6f:
                    44:bf:5f:56:fb:56:23:54:ab:07:92:ad:b4:89:fb:
                    fa:a8:4f:37:08:da:43:23:35:9f:5a:c6:3d:e0:2d:
                    b4:11:17:73:32:c2:08:73:41:27:92:a3:c6:e1:01:
                    d1:a0:4a:1e:2c:1b:3f:20:85:d5:2d:36:6d:5a:85:
                    be:40:97:f6:ef:90:3e:89:1a:2e:bf:57:c2:90:c9:
                    d6:87:63:99:9d:d8:e4:cb:f6:52:3d:2f:01:8f:27:
                    32:3c:4d:11:ca:c5:41:12:78:8b:4b:6b:5b:35:c6:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:DD:A3:DE:33:49:DF:BF:36:1B:CF:9B:B3:5F:52:3D:B2:22:CD
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:58:0c:4e:9e:7d:13:02:51:2f:2c:b8:f1:40:a1:da:a1:09:
         d7:d3:5d:11:d9:06:ca:db:53:4c:2e:14:5f:ee:26:6c:b4:89:
         20:dd:4d:0a:c8:33:ff:0c:f2:64:24:4b:be:36:58:70:3d:7d:
         8b:bf:a9:c1:ba:92:47:32:d7:2c:c4:62:62:66:aa:0a:65:2e:
         a7:d2:28:97:6c:45:f6:28:34:f2:5c:fe:ba:15:53:9f:51:fb:
         65:79:91:73:66:b0:58:48:8f:b5:40:e2:a6:ae:5f:0c:c3:35:
         d4:e1:1a:89:44:33:3a:15:53:18:fb:e5:04:9c:7b:63:8f:5a:
         88:ef:9d:0c:01:c6:f3:ae:87:a6:77:95:3f:2e:d1:c4:cd:2e:
         96:5e:da:a0:54:e7:f1:b5:87:8e:05:38:18:71:ee:ce:2a:86:
         15:e7:78:44:bb:2c:37:02:bc:90:ce:55:9a:d4:46:fb:61:05:
         57:30:bb:2b:06:ff:c4:32:8d:7b:d3:2b:08:41:54:8f:76:21:
         fe:2a:84:07:5f:97:28:1a:19:08:af:6b:03:a6:3d:87:3b:d4:
         80:e4:9c:f4:ba:83:66:a8:a0:26:91:75:4d:44:11:f3:4e:dd:
         76:77:bb:e3:92:ca:44:a4:52:92:b7:5e:a6:c0:e8:72:cc:59:
         e4:81:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----