Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File:                     tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier:          7L/DcNXZ40ncOtr7KHn+tTAOKqe0abq3gvVQ0Mjh+U4=
Subject key identifier:   A6:F9:FB:9E:10:80:7B:E7:D5:0D:23:3D:5D:11:15:91:7A:60:DB:CC
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer:       /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial:       01962E98E6A78741567C37769D04F9FB76E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number:          0D84
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: DOCxgfeZWmnyNt8KaXaJ1kN66W1baVARqUF1nxNQlHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:a7:87:41:56:7c:37:76:9d:04:f9:fb:76:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=a6f9fb9e10807be7d50d233d5d1115917a60dbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:58:94:bc:53:a1:6e:e8:90:20:b0:92:32:
                    e1:98:e1:8a:1d:ce:f9:4d:c5:7f:0d:04:90:72:12:
                    ae:e3:a8:8e:81:2b:7f:b1:c7:87:da:71:1b:3f:e4:
                    1e:1b:16:92:58:f9:af:ed:bd:71:78:25:c9:39:92:
                    df:b1:b9:5a:cf:69:47:f8:70:dd:ce:64:0c:04:e2:
                    ee:bf:66:17:95:e7:11:50:06:f1:22:ed:59:e7:8a:
                    01:5a:17:18:32:26:65:72:26:2d:f8:1e:26:1d:8c:
                    a4:c7:4f:fb:0c:ba:36:c8:74:bb:9b:09:c2:60:2b:
                    9c:8e:42:54:42:81:65:ea:4a:7c:6e:11:f4:b6:6c:
                    25:40:f7:0c:5a:01:fe:c3:31:4f:e4:7c:41:8c:85:
                    19:ac:42:54:7a:68:62:a2:31:ff:8a:05:84:58:af:
                    37:c7:7b:92:fb:8a:0b:4d:1e:e1:36:6a:7c:26:5d:
                    50:90:ea:25:68:9b:09:5b:b4:c6:fc:91:6c:9e:1a:
                    34:7a:03:c3:9c:4c:16:c5:f0:1e:9b:0f:df:f8:4d:
                    81:c6:51:e0:ae:61:a7:bb:f7:12:b1:45:ff:3b:85:
                    7d:22:f6:62:5f:24:20:f0:86:f2:da:94:ec:58:2a:
                    12:c3:0f:5c:21:22:32:5d:1d:88:f2:cd:6a:30:55:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F9:FB:9E:10:80:7B:E7:D5:0D:23:3D:5D:11:15:91:7A:60:DB:CC
            X509v3 Authority Key Identifier:
                keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:41:ea:76:ad:42:14:97:18:c0:f8:07:5b:3f:83:5c:66:
         85:8f:3f:73:cb:7b:54:ae:6e:ab:25:88:2f:2f:e6:aa:83:94:
         06:e0:dc:6a:b9:c0:e7:94:7d:aa:3d:c6:f8:97:35:8c:a6:22:
         e6:1b:cd:ce:60:73:97:11:c1:3c:95:db:06:a9:77:69:2d:a5:
         ca:7a:b1:b2:10:ad:1a:77:f6:a5:16:31:59:eb:a8:b1:54:27:
         9f:10:e2:32:41:af:ef:43:bb:83:38:38:cc:94:4a:1f:a6:d4:
         86:20:3a:d8:94:11:9a:e0:70:8f:d7:e6:ac:54:67:b4:14:9e:
         9d:47:a4:9a:ec:80:0b:1e:07:21:18:a8:43:87:c9:0b:70:8a:
         c6:ca:71:c2:c2:54:66:db:91:7f:3d:af:1f:53:6a:a6:6f:70:
         04:3f:6b:1e:37:60:f3:4c:e0:e0:1a:44:f7:60:4d:f8:04:9b:
         43:fc:d8:00:de:57:85:42:30:fd:6e:72:48:9f:ce:a3:44:0d:
         fb:5d:07:96:32:88:74:07:84:e9:9e:c1:96:6f:53:5c:59:9d:
         2e:0d:cd:6b:55:82:95:49:d4:e1:93:38:b8:69:bb:0d:3c:da:
         eb:06:8c:21:1b:f1:dd:4c:4f:ff:b6:98:a4:61:02:d2:ae:bd:
         b9:fe:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----