Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          1L/IN0pTtQo+VnUC47sv21QYDqhnr6B9BkAC3Divuno=
Subject key identifier:   FB:78:6E:AD:5D:23:86:0F:16:1C:46:88:66:D6:08:AE:A6:BC:EA:61
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       01962F3DD5EB64F18D730FE1A3FA0D57C8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          0C08
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: QnpWOVE1p8yitSvjKEkSW4d7PxBKr5GEXvcDbRD3cDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:eb:64:f1:8d:73:0f:e1:a3:fa:0d:57:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=fb786ead5d23860f161c468866d608aea6bcea61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:4f:00:af:c3:b7:dc:15:03:47:ae:82:e5:
                    e4:89:be:dc:56:04:54:f8:77:2e:fc:e5:ee:d3:1a:
                    85:20:b8:69:9c:24:d6:50:17:91:0b:b0:18:7b:9a:
                    e6:59:70:36:c8:cf:97:6f:a3:05:d9:14:a2:da:0a:
                    cd:d2:f1:9b:d0:6f:d9:45:98:fa:9b:f2:7e:d1:22:
                    5b:c9:3d:14:ff:52:f7:09:98:54:52:38:2b:ed:5c:
                    d1:cb:33:b4:45:ec:68:cb:45:53:99:02:8b:63:c4:
                    f7:1e:f8:ed:dd:f1:e2:29:3c:55:19:3a:c3:ac:64:
                    be:b0:25:52:a6:80:7a:9e:ac:48:11:36:60:4b:e4:
                    f4:9b:33:5d:92:2e:bc:7f:38:a3:29:2d:ea:9d:6c:
                    4a:44:fd:a4:54:a5:2a:a5:22:aa:56:74:44:63:0c:
                    4b:69:b8:d0:75:bb:7b:fe:06:cd:78:b5:d4:2f:11:
                    d2:f2:25:22:73:2c:d5:47:75:9e:78:ac:1c:b1:b2:
                    15:ad:b1:c6:00:ba:88:81:4d:9e:57:4a:89:10:8e:
                    1d:e5:e4:71:f4:f4:3f:59:a8:f0:c5:ce:40:05:5c:
                    d7:68:bd:45:32:23:e6:a0:6f:f7:90:41:3a:c3:e4:
                    4b:18:0e:65:fc:4e:09:ce:7e:45:9d:75:44:38:0c:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:6E:AD:5D:23:86:0F:16:1C:46:88:66:D6:08:AE:A6:BC:EA:61
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:b2:f9:94:af:ae:6e:ba:df:ac:00:5c:d5:e3:ff:21:4e:
         b1:9f:5c:73:6a:4c:a9:18:eb:35:ef:c9:55:92:6b:41:24:7b:
         f0:86:b2:34:b3:fd:66:5c:55:30:80:77:a1:1d:2d:ef:9b:ea:
         5a:8c:a1:9f:32:40:32:9c:1c:f6:ab:19:27:7d:8b:05:03:bd:
         f8:ee:7b:89:63:fc:84:2b:b0:e9:c2:77:91:f1:3c:9f:52:d4:
         fa:12:91:5e:25:03:4e:6f:bc:aa:38:f3:2d:ba:db:29:1e:a4:
         73:47:68:93:9b:09:6a:2f:b5:f0:6d:ad:88:f9:0f:94:11:df:
         4c:bc:5c:7d:55:79:34:8a:b3:b1:2d:ff:6a:3c:c7:fd:8b:d8:
         70:69:c7:ae:26:cb:d7:85:6b:41:b0:97:34:bf:81:6e:ee:ad:
         83:ac:3b:85:8d:75:a6:8a:98:96:71:b2:30:4e:68:f5:ad:33:
         87:14:7b:ac:fe:b7:e6:bd:e4:64:ad:58:d6:a6:8c:11:e3:fc:
         2d:61:70:1a:71:f9:ed:8c:db:41:b1:9b:a2:d5:33:9b:c2:7b:
         1b:5d:33:14:51:4a:a5:d9:69:b6:d5:82:0d:a4:71:6a:fa:2f:
         b9:9c:2e:f4:ea:9c:ea:8d:91:03:60:ad:af:6c:7b:ea:de:7e:
         9c:ab:e5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----