Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File:                     S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier:          uUxOztHnGCi/gUwEmFr+PSP0H7zkP6usWCw3sB70ev0=
Subject key identifier:   22:E4:A4:42:CC:D1:3B:4D:26:10:F2:86:F3:DA:1C:34:A9:5B:44:36
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer:       /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial:       01962DF3E94D671B27C72DE292F8E0D827C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number:          06FC
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: hnnUMIYp8D2FktIA4+jiy9M5MoNUHmqq+VrzrXpwtbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:4d:67:1b:27:c7:2d:e2:92:f8:e0:d8:27:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=22e4a442ccd13b4d2610f286f3da1c34a95b4436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:7d:e3:f1:09:a8:ff:ea:25:15:3a:55:df:
                    b6:94:a1:d4:a9:89:b0:12:0a:7f:16:03:36:d0:1a:
                    12:00:89:15:1c:2d:59:40:8d:25:ba:ed:e2:de:2e:
                    1b:8e:ad:13:ac:c8:39:40:00:3a:ec:be:3d:89:9a:
                    be:9f:c5:af:ed:b1:b8:7f:a9:4a:79:9f:0a:15:ce:
                    f1:a6:8d:cb:15:d5:0a:3f:6b:d0:e4:1f:12:55:46:
                    03:17:4b:9c:63:43:2e:f5:dc:de:33:b4:36:e4:51:
                    b7:59:f0:cc:41:13:7f:6e:ab:24:ee:67:3b:83:c0:
                    88:95:a8:d0:9a:69:0b:f5:94:61:7f:1e:94:d8:95:
                    35:d9:f6:66:f2:d9:24:64:e4:4f:27:7f:d2:7d:90:
                    bc:f4:25:50:11:d2:99:34:b8:22:69:6c:f8:a2:fc:
                    0c:8c:ab:a2:d1:e7:af:c6:52:73:b9:0d:aa:06:a2:
                    a9:f4:e3:f5:70:fd:17:ec:e2:bd:7c:08:ab:59:74:
                    e9:a6:2f:ea:33:1d:68:cb:e2:81:98:e1:f4:6f:76:
                    e5:42:78:7b:82:e4:96:7a:59:d0:f4:e1:e6:2f:24:
                    12:07:41:ad:1a:c9:31:46:32:9e:fd:d2:70:4e:bb:
                    98:12:f1:5f:47:9b:0d:df:a2:36:38:19:84:9e:8a:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:A4:42:CC:D1:3B:4D:26:10:F2:86:F3:DA:1C:34:A9:5B:44:36
            X509v3 Authority Key Identifier:
                keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:4e:2a:b9:12:a6:0c:7e:c1:6a:58:aa:b9:4e:e6:0c:d8:
         1a:6b:c7:72:1e:83:a1:8c:06:65:f0:bc:92:59:21:fc:31:41:
         27:de:1c:28:93:88:be:42:3a:a1:70:ba:55:92:91:6c:81:0f:
         a1:8b:f7:2d:89:23:9f:72:d4:aa:4a:80:84:06:80:b9:98:0f:
         7a:f0:1a:78:09:75:0b:09:99:71:d4:28:14:09:57:57:45:b0:
         ee:54:d7:5a:ec:5c:e4:fc:9d:98:6b:f7:89:ba:a6:63:81:f8:
         8f:f2:ca:70:32:69:f5:41:c4:08:50:db:15:ae:bc:c8:81:a2:
         55:7a:d5:a1:d5:39:29:c6:17:96:ba:96:58:9e:ef:c6:72:04:
         90:73:c6:96:0f:13:04:a7:8a:70:cc:e7:f2:24:35:3f:f1:30:
         ec:e0:da:1d:51:ec:8e:47:4c:5f:d8:61:4b:04:49:b1:98:f3:
         23:5a:b2:4d:94:0f:10:b9:4b:9e:9e:db:87:55:8e:6a:79:f4:
         3c:71:04:6b:b8:d7:f9:fa:ca:7e:2e:d2:17:b3:d0:2a:a8:68:
         08:18:7e:41:2f:42:ea:50:76:7a:af:d2:68:1a:ab:6d:2d:61:
         c4:32:7e:7f:8d:68:79:18:92:be:ac:38:36:0e:dd:57:c1:36:
         29:46:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----