Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File:                     fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier:          9vxLTwImLWi1UaAxBCHRzx8dJ39l+fmcLvrW8QDlsJQ=
Subject key identifier:   36:97:9B:AA:42:02:09:66:AD:08:53:24:10:DB:DB:B1:68:32:B3:4E
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer:       /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial:       01962F3DA9031B78DD4861E94001EF7000EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number:          0615
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: 5nRLMFnUBZXln93LtTtr8NX7bKQLKn8iYpPJe2Es7qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:03:1b:78:dd:48:61:e9:40:01:ef:70:00:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=36979baa42020966ad08532410dbdbb16832b34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:33:22:80:a8:ce:0a:5a:bb:da:23:44:9a:
                    b5:d5:1b:8c:22:46:85:cc:40:9a:9a:36:9f:b4:e4:
                    94:f2:5c:2a:59:00:48:48:1f:6e:8e:93:01:62:ae:
                    e3:ff:ad:31:5f:9f:db:1e:8a:74:09:bd:f2:ab:cf:
                    40:69:3d:5a:92:8e:92:02:3e:f4:1f:f3:2a:50:54:
                    0e:31:a5:01:7c:8a:c5:8f:5e:cf:59:94:f9:be:67:
                    ad:f3:c3:a2:6b:0d:48:10:c2:5c:60:0e:aa:04:00:
                    38:fd:02:7b:f4:be:d6:d3:75:21:56:3f:22:6e:81:
                    af:82:74:7c:b0:6c:e0:8e:d7:f1:25:b7:97:c6:2f:
                    57:2b:d5:5c:7c:98:1e:2c:10:47:b7:2f:a9:22:b0:
                    d2:a4:7f:80:15:19:5a:4c:ed:48:fd:7c:00:65:7e:
                    1a:9a:82:fd:e9:36:65:82:e6:69:54:5b:68:18:31:
                    69:2a:50:7b:a7:db:a8:70:ac:93:b0:e5:ff:1a:ad:
                    f4:8f:c3:63:3e:cd:a7:e9:ea:f6:69:ab:80:40:ab:
                    bb:17:04:d5:26:49:e1:a7:60:6c:63:4a:4f:db:b1:
                    c2:85:7f:bb:4d:ce:83:20:49:de:86:51:99:43:fc:
                    16:5d:41:35:15:44:ba:30:9c:83:38:21:e3:87:e6:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:9B:AA:42:02:09:66:AD:08:53:24:10:DB:DB:B1:68:32:B3:4E
            X509v3 Authority Key Identifier:
                keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:bc:0a:18:b5:39:50:0d:72:54:71:f1:58:c3:e2:6c:92:
         6b:6a:32:bb:d3:a3:40:d3:83:a6:91:c9:86:d0:f9:9c:4c:09:
         7e:1d:37:14:5c:a4:ea:50:e8:c2:14:27:e6:2f:53:e4:18:98:
         0b:25:51:d4:28:ef:3e:d6:10:04:e2:85:90:29:f7:11:ab:ac:
         c1:ae:e0:3e:39:17:47:96:7d:1f:c3:98:05:ad:61:c1:5c:0f:
         da:61:0f:5d:67:44:99:f4:90:9d:9b:43:bf:8e:c6:62:fb:b0:
         b0:e0:43:91:40:88:f2:46:bb:8c:22:f2:87:e2:c3:1c:73:54:
         e2:1e:78:2d:23:3d:35:bb:3b:d5:1b:a5:c4:61:19:9a:68:c2:
         60:ba:9f:31:ae:75:8f:26:b9:fa:0c:0a:9b:a0:99:08:eb:bb:
         ea:44:b1:27:06:0d:e0:1c:16:55:dd:f2:4b:b1:fc:a5:21:7d:
         fb:94:b2:e9:09:34:8f:ee:5e:3e:4f:97:c9:2a:a9:e4:58:e8:
         93:6c:95:99:cc:72:34:c8:3e:6a:af:05:b7:23:04:2e:d8:68:
         17:be:01:f6:4c:b1:a7:97:58:76:f7:72:1f:09:67:b3:34:dd:
         a8:72:1f:49:07:cd:9e:a3:c5:2e:6f:57:9d:fd:e0:12:8c:07:
         6b:b4:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----