Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File:                     m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier:          cbl/4+JXwlHx7gQpvsIkOk52udAnJSv30ehEMT9DRVA=
Subject key identifier:   11:DE:EA:AD:A0:71:73:5C:D5:C5:6B:E5:16:5B:7D:00:88:E2:BE:C8
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer:       /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial:       01962F06F4E69B0E66A264E637A1FB64A5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number:          1257
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: 6UVDCnKPVKKw/KsJVKljlDXSdocqgYSIxRiCC8SoATQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:e6:9b:0e:66:a2:64:e6:37:a1:fb:64:a5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=11deeaada071735cd5c56be5165b7d0088e2bec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:08:99:65:dc:58:33:2a:ff:13:5e:9a:90:
                    3a:0f:17:32:15:2b:30:44:5f:21:58:5c:5c:cc:b6:
                    a8:d2:21:40:87:27:88:bb:f5:d7:a5:f7:82:f0:54:
                    0b:99:3e:60:43:85:e3:a7:a3:c4:05:a6:75:15:ec:
                    60:89:1d:ab:d5:18:a0:ea:60:99:57:06:0e:18:7e:
                    18:17:49:43:5a:d2:7a:3d:b2:ba:85:d4:a7:fa:2a:
                    7a:ff:21:a2:b0:aa:97:5d:d5:86:60:ed:f6:9e:a1:
                    79:5e:8e:e7:d0:89:ca:dc:4b:76:65:07:d1:bb:7c:
                    92:75:a7:85:c8:b7:23:92:95:34:58:f0:47:e2:dc:
                    be:5c:12:29:0e:d3:ac:8f:b2:28:92:4f:d0:54:da:
                    07:9c:d9:4c:00:aa:6c:45:ac:86:41:f2:77:65:5c:
                    19:dd:3c:e1:3c:12:23:50:87:89:d4:eb:0a:9b:18:
                    63:f0:84:a8:d5:a7:ab:7b:b5:02:dc:1d:a3:58:05:
                    69:1b:2d:1d:7e:5a:85:5c:d5:21:4c:99:22:e6:3c:
                    1c:d5:e2:bf:fc:94:78:c1:eb:3c:2e:f3:01:c8:05:
                    34:f5:70:d9:1c:0f:b8:58:bc:34:59:12:a8:21:84:
                    b2:b3:02:7d:9d:53:ed:a2:cb:39:25:74:25:fb:b7:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:EA:AD:A0:71:73:5C:D5:C5:6B:E5:16:5B:7D:00:88:E2:BE:C8
            X509v3 Authority Key Identifier:
                keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:4c:61:0b:c8:40:ae:05:a3:23:33:df:d5:88:d3:67:bd:
         85:c3:4c:f4:3c:14:97:29:fd:10:a6:d3:66:59:64:0b:da:5c:
         12:53:c8:aa:33:60:c8:f6:28:ad:86:1d:14:72:90:f9:54:51:
         82:72:fb:44:79:b5:ed:4d:23:b2:39:92:ff:ba:04:bc:78:77:
         78:78:e3:d2:8d:57:9e:08:60:bb:39:de:3d:ea:ac:d1:d3:cf:
         65:40:1d:16:b5:46:6f:cc:67:52:73:84:51:1f:18:2e:8b:89:
         fe:c3:0a:cb:4d:c6:69:f4:ee:ae:c6:a1:bb:52:90:0d:7b:b7:
         70:e1:25:4b:02:34:35:18:30:6d:b0:2f:87:80:8b:bf:87:07:
         04:e7:ad:90:75:71:07:0d:0d:65:47:61:55:46:d0:13:47:27:
         dc:89:13:31:41:7e:c8:a0:cd:4f:0a:ed:80:bf:ca:4f:a4:5a:
         d3:40:da:68:5e:86:e6:de:36:9f:8c:05:a1:78:a2:9a:f5:f3:
         c7:e6:5e:ab:6a:ba:f6:4a:5a:55:ea:4e:06:fb:b1:84:70:57:
         4e:7d:5a:1e:24:f6:0f:b3:c4:6f:35:9e:23:48:f3:ee:76:da:
         51:70:a4:a3:f4:75:ce:58:7e:65:4a:01:e0:54:04:b7:1c:9b:
         c4:c2:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----