Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File:                     aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier:          H9EL++vu/kjp5DrzcCxS7z5V/5NR7HWRyQgf+m9A+z8=
Subject key identifier:   38:6C:B6:55:8E:4C:F4:6F:29:FA:10:76:1F:08:D0:6F:10:4B:B4:7C
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer:       /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial:       01962E9982FD8696BA0050F62A95F0379DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number:          0F60
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: KuDsmGe8YfaZFyRxGT0r/UQzjJ03JoTqyvmOmvQn7gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:fd:86:96:ba:00:50:f6:2a:95:f0:37:9d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=386cb6558e4cf46f29fa10761f08d06f104bb47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:81:7f:dd:27:73:db:40:9c:d8:aa:f5:c9:
                    86:f4:24:9e:f6:4d:fd:98:8e:dc:ac:3e:76:dd:07:
                    f9:44:e0:ee:ed:90:35:da:42:dd:75:47:44:97:77:
                    de:fa:7c:a2:ef:9f:8d:d5:90:b2:94:5b:a0:29:4b:
                    07:69:4e:be:1d:9d:04:64:02:4d:b5:53:86:dc:10:
                    4d:0a:5b:1b:df:93:d6:e8:84:7e:a7:96:b5:c2:2d:
                    8d:f0:98:19:1c:7b:90:0c:68:69:58:53:f3:08:85:
                    57:95:9a:63:b7:84:f4:0a:c6:3d:f0:c3:38:5a:34:
                    f5:c0:25:c1:52:bf:6f:8c:b0:a9:e6:84:0e:39:14:
                    6a:bc:e3:04:a0:c8:bb:86:00:36:c3:a7:b1:6c:69:
                    a8:96:55:dc:6b:60:a5:e3:57:f2:15:a3:2f:e1:7c:
                    f9:15:11:e5:48:90:51:5d:11:3a:f2:26:55:fd:60:
                    31:ff:ef:4b:e3:ff:76:44:b5:b8:6d:83:22:03:7c:
                    b2:7c:f2:b2:89:ad:3f:da:87:c6:6b:bb:97:3a:bd:
                    9e:00:1a:29:f8:2e:2a:80:aa:39:d8:31:13:42:3e:
                    2e:cc:f3:07:c2:59:5d:ea:0f:d3:50:c7:f5:4b:2e:
                    ba:eb:96:9e:aa:b6:87:59:99:da:d7:02:84:6a:37:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:B6:55:8E:4C:F4:6F:29:FA:10:76:1F:08:D0:6F:10:4B:B4:7C
            X509v3 Authority Key Identifier:
                keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:90:40:52:77:f7:e3:84:93:f6:1f:09:d9:85:35:a2:a7:90:
         4a:f6:74:65:c8:ad:01:1c:28:c8:a7:27:5d:4d:5f:c0:a8:31:
         26:db:4c:ea:ca:cf:27:6b:6e:b9:d3:b0:a6:42:79:8b:7f:e0:
         a6:59:97:dd:ed:03:b0:ef:0a:71:e8:94:c4:74:82:e1:bd:f9:
         4e:15:5f:d5:f6:10:2d:fc:ad:87:09:29:9e:87:94:ee:84:2a:
         68:aa:32:6e:fe:9e:19:59:58:59:c9:4e:f8:40:2e:4a:86:83:
         7c:f9:00:40:6f:9e:20:cc:83:73:c2:2b:02:c7:c4:e1:36:37:
         06:77:0d:b7:0b:1b:1c:fd:40:f3:73:f3:27:50:e0:29:95:83:
         51:f5:b4:34:e8:13:8a:f4:19:0b:c9:a2:8a:cb:d8:f2:6a:c2:
         a8:ed:79:bd:35:71:66:33:e2:f7:78:73:56:55:77:c4:4c:74:
         7e:dd:51:74:ee:c7:2d:05:76:6c:3a:95:40:47:ab:28:21:5f:
         f0:10:fc:dc:5f:5b:0a:46:79:9d:98:ea:04:d8:91:c7:33:d2:
         61:b6:e8:f2:d8:81:f3:18:a3:03:ac:c8:50:3e:84:72:bb:48:
         ed:2b:3d:5f:89:89:13:cb:a4:9e:9c:56:c4:d7:27:97:76:15:
         ee:69:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----