Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File:                     c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier:          Pg3NBdMKH1AjD0f3xiJ00FBv1l0JulOaT0dlDjOmiBU=
Subject key identifier:   3A:EC:74:83:F6:56:C9:34:9D:1E:A5:A0:C5:78:25:38:17:53:08:3D
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer:       /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial:       01962E98A6913341EAAA6E557332CCCC1738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number:          059B
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: WLdOEW53DSt+4kw58knDJkipcsPD5DtEl2PpvG0jetM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:91:33:41:ea:aa:6e:55:73:32:cc:cc:17:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=3aec7483f656c9349d1ea5a0c57825381753083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:22:51:cf:f5:a9:0c:34:10:e4:b1:a4:a2:
                    e7:4c:ae:ed:46:fe:74:04:c9:1d:1d:4e:1e:39:d2:
                    a7:14:75:9d:32:4a:13:c8:bb:84:84:50:0e:a5:f1:
                    3a:4c:54:ff:0f:97:0f:4e:5b:dc:3f:87:6a:98:2a:
                    5f:c1:ec:0b:38:38:00:81:c1:13:4a:9b:00:da:c0:
                    13:5e:d7:16:67:2c:7d:65:dd:29:bb:90:28:17:c6:
                    04:f3:96:3f:12:52:5e:da:8c:b2:bc:b2:ec:da:b3:
                    d0:ea:1d:dc:11:e3:04:52:79:f1:ff:41:f9:85:84:
                    70:30:b8:73:b2:ea:fa:b3:61:e6:45:e1:55:8f:58:
                    27:0d:0f:18:22:29:82:e4:c8:ac:ad:0e:31:68:05:
                    f4:61:73:93:9b:d7:01:9a:d0:33:4d:80:4a:3d:45:
                    b2:47:8d:e3:50:28:15:9e:98:07:ff:8e:fc:34:fa:
                    21:cd:a2:d6:f6:69:3a:cd:b8:22:54:96:81:61:d7:
                    9b:59:1c:0a:70:da:97:43:a0:28:7a:82:cc:24:dd:
                    98:d2:f6:81:c1:ba:56:15:27:36:26:b7:40:84:51:
                    a0:bd:57:58:27:3d:7d:ab:bf:60:b2:d6:94:51:38:
                    8b:b6:e9:4e:4f:59:59:ba:ff:4e:37:25:d1:d4:01:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:74:83:F6:56:C9:34:9D:1E:A5:A0:C5:78:25:38:17:53:08:3D
            X509v3 Authority Key Identifier:
                keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:e4:55:db:5a:fb:7a:71:6c:9f:ad:53:b6:e7:a2:46:28:
         94:2f:ed:82:58:0a:fc:b8:c0:3b:a9:75:37:72:af:cc:09:4e:
         97:b9:16:3d:48:d4:90:7b:e3:d6:5f:4b:f4:dd:b9:d5:e6:90:
         12:e9:fa:94:18:04:58:20:8a:17:a1:3b:f8:8d:d2:77:f8:4a:
         f3:25:36:28:c9:07:04:69:71:96:e3:c9:eb:9f:dd:9b:b4:d7:
         64:d4:2b:f3:d8:4c:9e:ed:b3:67:a2:10:79:b6:fe:81:de:b7:
         b5:9f:7b:43:d2:27:3d:84:4e:8b:89:83:83:9e:eb:1b:d3:2a:
         d6:e6:7b:82:fd:98:10:e2:a1:79:67:3a:8f:3f:e5:67:92:35:
         a1:ae:95:c2:9c:bc:0d:a4:3c:82:75:72:48:8c:bd:09:de:91:
         ec:a9:a9:68:61:3c:d5:c5:60:0c:11:a9:77:f7:d8:16:96:f8:
         c9:88:04:2f:df:dd:9a:d2:fe:c4:13:45:75:eb:ca:bc:9b:54:
         fc:68:d7:58:b9:93:73:bc:7b:e9:f3:79:ba:5a:06:60:1a:d6:
         7e:ec:42:8a:37:9a:e5:82:f1:7f:16:fc:17:90:a9:45:a1:1d:
         5b:ee:06:0f:c5:6e:77:af:5d:77:46:34:c1:39:ff:47:22:8f:
         89:bc:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----