Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File:                     iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier:          wV5oHpKLTWFYlcUQZQNwbdLp3wilJyy52W6/zF1xGwo=
Subject key identifier:   78:53:0E:30:7D:89:36:41:A5:94:9A:33:64:EE:C7:81:9F:FF:7F:21
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer:       /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial:       01962E98F597F36A5040D518E862D4E90E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number:          112F
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: TKWZFPj9z+hKs7RV24fi/rcaZQPsI979Nid3NXC9Xy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f5:97:f3:6a:50:40:d5:18:e8:62:d4:e9:0e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=78530e307d893641a5949a3364eec7819fff7f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:d1:25:87:b5:f6:0c:1a:e6:9a:72:f4:88:
                    73:cb:f0:4c:8b:9e:89:6e:8d:b8:cc:19:43:65:88:
                    a6:0c:1c:9d:58:b7:5c:36:a8:61:fb:2a:ae:ee:87:
                    cf:db:ea:35:39:4e:bd:c5:6b:07:ff:67:e7:09:50:
                    a4:95:b0:c7:27:67:ba:12:39:0d:37:f8:cd:55:ac:
                    af:80:ef:50:06:fc:dc:45:75:8e:1e:c4:39:3c:48:
                    98:13:a3:ff:cf:5f:f5:fc:dc:09:f2:4e:46:47:db:
                    1e:f5:eb:be:86:aa:db:0b:dd:57:bc:cc:b7:1b:0a:
                    36:bd:a9:04:3b:08:b4:c2:6c:af:6e:80:31:f6:51:
                    af:10:63:cb:1e:c3:33:13:8d:8c:b2:33:3c:a6:12:
                    79:0e:1e:15:42:38:de:b6:dc:fb:f4:f3:f0:1d:ff:
                    f5:c4:b0:d6:a5:99:67:97:43:20:86:9c:81:c1:d7:
                    44:43:6b:5c:bc:e5:84:07:1c:db:92:58:03:b5:81:
                    69:5c:38:78:81:ca:23:43:0a:ed:32:62:8c:01:c5:
                    22:7f:7c:0a:d0:49:82:21:d5:3a:ab:42:1c:04:89:
                    ed:82:da:cd:5b:75:95:99:c7:e0:cd:25:df:e3:d2:
                    cc:f2:7d:22:17:76:e6:e7:9e:53:14:3b:9d:3d:66:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:0E:30:7D:89:36:41:A5:94:9A:33:64:EE:C7:81:9F:FF:7F:21
            X509v3 Authority Key Identifier:
                keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:50:b7:56:2b:33:8d:30:5c:53:44:48:c7:72:7c:a1:d6:65:
         0c:29:e0:13:c8:9e:93:00:e6:d2:52:aa:20:ac:86:af:86:bf:
         ae:e9:7b:13:2f:c4:bc:62:e1:a7:d7:45:08:72:ed:a5:e0:79:
         9f:f9:e4:a8:5f:69:4c:f4:82:f1:97:37:47:82:64:92:c1:d0:
         f4:69:f5:c3:83:a6:51:d5:68:be:c7:6d:2d:76:45:6b:e1:07:
         91:26:91:97:cb:56:3d:46:48:7c:dd:ae:4e:59:bc:9c:a2:25:
         b0:c1:a8:22:ca:28:e3:65:10:33:62:f0:b9:1a:42:a3:1d:90:
         17:e3:2d:be:51:7f:65:5e:b7:c2:5e:0f:1e:96:52:a9:0c:72:
         42:1f:58:9c:06:73:ee:42:a9:91:41:35:b9:51:a3:2c:fd:5a:
         4f:00:e4:22:62:3a:d2:16:b9:ee:be:b6:b3:ba:4a:4b:7f:de:
         1c:98:88:af:cb:06:42:53:46:ac:22:8b:18:f0:fc:9c:ba:c2:
         53:36:5e:38:4a:52:7e:2a:de:59:64:cb:83:22:13:1b:5b:cc:
         95:8f:1e:25:af:99:c7:c1:89:98:37:35:b0:84:08:28:39:06:
         6e:d9:79:cb:59:ad:66:de:59:57:8d:95:30:4f:ef:fd:d4:b8:
         7c:49:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----