Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File:                     d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier:          MF7NZzNnUPX0C586EJWSIrPPphj6QVrpotszn8K9WZY=
Subject key identifier:   F5:A6:FA:43:E5:A3:79:5A:57:D4:26:6E:98:C3:48:93:33:86:5B:ED
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer:       /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial:       01962F3D82CA4FF36380CB679E3943183CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number:          03C6
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: R8QWOqo13VdPpZJpgsR445qFCZvWzf6qsDIbQUWytjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:ca:4f:f3:63:80:cb:67:9e:39:43:18:3c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=f5a6fa43e5a3795a57d4266e98c3489333865bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ab:0d:db:e8:ef:89:da:49:f1:18:15:99:57:
                    42:ee:eb:0f:15:99:e2:ac:8c:13:a5:6b:5c:f4:8f:
                    14:4c:52:b3:39:da:d2:63:f6:47:0f:68:10:be:36:
                    e2:19:ba:7f:b0:37:d3:1e:ed:02:42:c6:df:f4:cf:
                    ac:f2:10:63:c3:d7:d5:29:20:8c:5b:c3:dc:7d:eb:
                    59:53:38:77:ab:78:6d:4c:96:20:2c:f7:56:ee:0d:
                    6c:b2:6b:d2:27:81:5b:54:2c:59:ed:23:1f:ae:f9:
                    4f:90:da:12:7b:4a:39:c6:93:43:fa:96:7f:28:ed:
                    77:4d:84:4d:25:a2:87:2d:88:60:5f:82:ef:6f:9a:
                    b8:ce:9a:aa:fc:7b:59:85:50:09:19:36:8a:a8:3b:
                    7b:b7:d2:a4:f7:9c:43:6a:93:69:f7:98:e7:5f:41:
                    5c:41:69:4c:05:31:45:1f:7a:fc:2f:a8:cb:6a:69:
                    10:97:f0:ab:77:c9:5c:36:70:5a:91:64:67:ba:0c:
                    a8:1f:b3:05:a1:42:11:ff:f1:78:96:d6:50:5a:e9:
                    b8:d6:39:be:ec:5d:f2:f3:af:ba:de:cb:f4:52:aa:
                    b5:3d:ed:b8:ca:5a:80:41:2c:b3:d3:76:a4:99:df:
                    12:8c:8b:cd:c3:1d:8e:2b:e4:83:6e:48:ef:12:b6:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A6:FA:43:E5:A3:79:5A:57:D4:26:6E:98:C3:48:93:33:86:5B:ED
            X509v3 Authority Key Identifier:
                keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:85:c3:50:8b:b5:86:74:a3:07:ca:6b:8f:56:42:49:07:c4:
         37:41:43:31:5d:e9:b3:12:a7:05:c2:01:d4:bf:26:26:85:ad:
         6e:f4:cf:1c:0d:50:19:4e:68:a7:21:ba:27:35:82:e8:f8:56:
         b8:cc:64:0c:f1:94:ac:5c:f8:ee:d4:fa:ec:1d:37:0a:0d:a7:
         df:a2:50:61:60:ee:68:8e:ff:ea:b3:63:f4:61:f8:49:cc:fb:
         c4:c6:56:0e:d1:1e:d4:13:57:12:60:94:9b:1e:25:46:06:41:
         6d:d2:b1:37:51:21:62:2f:d6:f0:8d:f1:e4:ae:d6:3a:08:71:
         58:21:89:d9:e4:2e:7e:03:10:46:92:21:40:98:ab:e2:70:e5:
         e1:03:48:68:b3:ee:37:f8:c9:66:e7:2c:e1:ec:b2:a3:43:fc:
         b8:a1:d7:18:93:66:fd:b5:40:7a:8f:0c:cd:ee:c8:a0:c1:3d:
         ce:c0:2b:8b:a5:f5:3b:f9:c8:3a:74:67:18:20:3f:0a:ee:4c:
         b3:df:5a:ce:6e:36:6c:aa:a7:dc:df:c2:9c:cf:70:54:25:0e:
         11:d1:b4:44:5a:9d:cc:0e:e8:f9:b9:b8:02:db:66:22:f5:fa:
         b9:06:4e:31:c8:81:84:2b:47:14:98:d5:ed:da:5e:39:ce:a3:
         1f:6f:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----