Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
File:                     PHQZW9u2a2A65joVGPBm-gsRUfU.mft (raw, json)
Hash identifier:          jZY1L44v0zwwHNwxfki5G2duGDEh71nRkiAdr25nYVk=
Subject key identifier:   A3:A9:8D:68:2C:D2:C9:6E:A8:D2:05:64:1D:D7:D4:E6:25:AA:FC:33
Authority key identifier: 3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5
Certificate issuer:       /CN=3c74195bdbb66b603ae63a1518f066fa0b1151f5
Certificate serial:       01962E98B4D264C3B7C2268F77EDA34C191B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHQZW9u2a2A65joVGPBm-gsRUfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: PHQZW9u2a2A65joVGPBm-gsRUfU.crl (hash: cZcOdnNJsC1U1EIjbLgXFZDHqRmkoBNWJAPFIhD6oRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b4:d2:64:c3:b7:c2:26:8f:77:ed:a3:4c:19:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c74195bdbb66b603ae63a1518f066fa0b1151f5
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=a3a98d682cd2c96ea8d205641dd7d4e625aafc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:b9:11:d4:43:41:ff:f5:ee:04:80:08:93:
                    81:5e:c4:40:da:d7:1b:90:b7:d5:e3:8b:d7:4a:aa:
                    22:de:9d:fa:01:aa:ad:02:77:bd:7b:da:4e:e3:f3:
                    98:1e:9f:46:76:a4:9b:e9:82:fb:2d:d8:29:be:1f:
                    f7:5a:53:c0:62:67:fb:3c:b2:cd:25:4c:19:86:5f:
                    3f:47:66:29:b4:2b:a6:5f:b0:86:e9:a7:4d:71:4c:
                    d7:af:8a:1e:71:50:01:87:41:55:11:60:83:09:ee:
                    f4:72:07:06:f8:d0:00:ad:d5:bc:38:b8:98:ad:49:
                    75:72:7a:2f:da:81:66:3a:64:47:9b:74:f4:10:99:
                    a7:ac:84:01:96:6f:4b:80:98:de:22:04:78:2e:cd:
                    86:98:52:d0:af:82:07:fc:e7:f4:da:ed:d0:40:43:
                    d1:00:a3:f2:ad:54:91:aa:6f:a1:7f:1b:ed:78:5e:
                    7c:c9:2b:4d:88:8f:56:75:60:46:8d:56:72:91:86:
                    a7:08:a3:23:c6:33:24:f3:65:7f:17:c4:62:12:5b:
                    8a:d0:65:d8:29:2f:eb:e6:91:ef:0c:da:a1:4b:18:
                    25:92:a7:64:24:f2:57:70:f6:af:c8:7a:68:c1:a7:
                    9c:fa:14:5d:21:db:85:84:50:20:c9:62:1e:1e:c5:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:8D:68:2C:D2:C9:6E:A8:D2:05:64:1D:D7:D4:E6:25:AA:FC:33
            X509v3 Authority Key Identifier:
                keyid:3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHQZW9u2a2A65joVGPBm-gsRUfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:b4:36:37:a5:e3:1a:ce:9b:a7:92:c8:5f:16:b8:57:d8:
         df:ee:8d:cd:e5:95:02:4b:97:8d:5b:b0:cf:2c:4f:a5:47:da:
         75:a5:ea:4d:a7:97:b8:9f:ec:f3:80:03:90:8e:d9:5a:0a:51:
         ac:80:50:ca:4b:fc:46:43:78:dd:2d:31:78:4a:fd:ad:26:6e:
         41:45:04:3b:72:ca:39:1b:d7:7b:88:cb:e4:60:7f:0a:6a:61:
         cb:01:6f:35:94:c1:36:c7:ee:a5:16:a3:f5:b0:f4:61:86:2e:
         4a:10:52:12:e3:27:6b:78:27:13:93:d5:c4:61:9a:8d:ed:21:
         e2:b4:54:8f:e0:34:dd:0e:25:a6:49:f8:6e:43:73:15:7f:c9:
         bb:13:c7:49:46:d2:f8:2b:ce:78:b2:ba:7b:bc:a2:95:81:77:
         54:9e:f1:ce:3c:e7:3e:d5:46:7e:26:95:bd:f6:8f:79:76:96:
         db:8d:36:9e:a3:a4:93:66:32:f7:f8:f6:95:61:ff:70:f1:8f:
         6e:6c:9b:5c:af:84:3a:f2:50:23:36:af:5f:9f:de:47:6b:55:
         9e:35:22:b6:37:67:ca:8f:35:29:62:8c:0f:ae:11:93:60:2d:
         8e:65:15:69:0c:5f:ce:bf:14:30:3b:fe:99:2a:fe:05:99:98:
         f2:7d:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----