Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File:                     XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier:          lLDx2z9jd4enMDKzLWC7y/Xzmfq7H7Bw4YPcvhQOsfg=
Subject key identifier:   D5:92:D7:70:02:FA:1F:05:06:8B:B0:5B:C1:BD:BC:12:F5:ED:B2:96
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer:       /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial:       01962F06CA1ED518C4D7201C29AB09A03CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number:          03B6
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: ezx3+HjXqPuQEqpYDYMbWmqq29QsPazoOs/82nC0PzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ca:1e:d5:18:c4:d7:20:1c:29:ab:09:a0:3c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=d592d77002fa1f05068bb05bc1bdbc12f5edb296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:fd:25:b6:01:35:37:5e:e0:a7:45:84:2a:
                    71:71:c1:05:17:3d:bd:6f:fe:a8:1f:ab:66:53:ec:
                    2c:46:b8:0c:ff:64:03:a2:b6:28:50:b7:df:3d:3b:
                    43:6c:5e:25:6b:b4:5d:05:d2:25:88:46:e7:20:a6:
                    f9:4c:f7:54:a9:a3:62:9e:2d:6b:7d:b2:1a:cb:27:
                    54:fc:d2:3e:55:a8:88:ab:56:84:dc:e9:dc:13:22:
                    9d:62:96:3c:51:b7:9a:fb:b7:d4:e4:82:92:b9:8c:
                    c7:9f:15:05:34:3c:87:34:92:6b:31:f7:35:9b:59:
                    e2:05:1b:1c:c6:a0:81:43:28:56:2f:ec:4b:b2:5c:
                    c8:6e:f2:ee:af:d5:43:25:da:5e:b7:50:f0:2c:28:
                    2c:6b:09:d6:97:87:7f:fa:ef:f8:37:08:e3:43:1e:
                    13:a7:3e:48:38:66:fc:9e:4d:08:1d:80:3f:97:c7:
                    82:0c:0e:f6:25:ce:ce:77:f0:38:bd:7e:42:ac:67:
                    3e:1e:db:6c:8c:c9:f1:e0:b4:6f:57:e9:59:cd:60:
                    1b:f0:e7:79:b1:f1:19:a6:23:17:b3:a3:e5:bd:56:
                    7d:6c:ce:e7:ed:2c:eb:f7:90:c8:46:25:87:5a:90:
                    63:e1:6d:e6:00:54:3f:21:82:cb:88:14:d5:93:d3:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:92:D7:70:02:FA:1F:05:06:8B:B0:5B:C1:BD:BC:12:F5:ED:B2:96
            X509v3 Authority Key Identifier:
                keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:82:6f:9b:5d:c8:c6:2a:b4:90:6b:a5:16:e3:95:b8:95:5b:
         45:54:91:43:52:db:1e:80:41:82:b0:c4:1a:95:89:42:ee:66:
         8b:b0:fb:c9:02:d9:4e:d3:7b:b9:45:73:9f:2d:86:aa:7e:0f:
         06:6e:cf:d1:a1:36:79:c1:83:68:52:0b:36:5b:86:c2:c8:1c:
         3f:cc:ce:e2:da:48:1b:54:55:a5:5c:d3:15:3e:02:19:2c:49:
         26:a9:b5:0c:fb:ab:94:80:f4:f4:76:01:9d:9f:c0:51:14:6c:
         03:65:25:1d:0b:07:1d:77:73:03:da:6a:a9:d8:ab:0f:93:3a:
         a5:5c:83:e2:d6:fd:a4:48:7e:6e:97:54:43:8f:d7:4d:6c:73:
         55:09:17:c5:5e:94:1d:f9:bd:3f:45:2c:47:04:27:23:f6:2b:
         16:16:93:37:aa:59:8c:d9:5c:97:d3:29:bd:25:70:7e:d0:0a:
         5d:e9:1f:22:8c:4a:12:78:b5:d1:1c:5a:b8:ca:e2:96:5f:a3:
         78:e6:22:05:dd:6f:95:e5:f1:26:87:e2:b7:99:26:f6:4a:16:
         5d:65:2c:b8:aa:9c:c5:ae:48:3d:30:52:5f:6e:3f:5a:4e:f6:
         43:93:27:37:12:10:a5:c7:3d:b9:25:5a:b4:4a:33:3a:36:e2:
         58:8d:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----