Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
File:                     l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft (raw, json)
Hash identifier:          tn1Z9zIqxoLO8O6Y45nO1G30qAA1tU9YWMbN8VcSoi8=
Subject key identifier:   53:BB:C7:7D:C9:F0:B3:33:D4:AC:30:F8:0B:2D:95:F3:2A:06:78:A2
Authority key identifier: 97:57:7F:84:18:8E:28:3F:DB:5D:7A:6F:CC:CC:48:56:C1:99:49:B8
Certificate issuer:       /CN=97577f84188e283fdb5d7a6fcccc4856c19949b8
Certificate serial:       01962F06927872918789B523C85E77B2699E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1d_hBiOKD_bXXpvzMxIVsGZSbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: l1d_hBiOKD_bXXpvzMxIVsGZSbg.crl (hash: z9I/RSd3Z65ykmRP5OgwUG+W6Fgn8/h01opa/6iIWiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:78:72:91:87:89:b5:23:c8:5e:77:b2:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97577f84188e283fdb5d7a6fcccc4856c19949b8
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=53bbc77dc9f0b333d4ac30f80b2d95f32a0678a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:ec:63:7c:a3:8c:f1:82:2e:f8:41:90:5c:
                    be:c0:6b:b3:5f:80:ef:ab:ca:23:2a:1f:07:1f:e1:
                    d1:46:6c:c1:7a:61:02:dc:53:1c:d7:7c:25:9d:8b:
                    02:b9:da:b0:b0:bf:8d:71:75:be:04:f3:65:9d:f0:
                    a0:f2:27:68:7e:5d:97:11:11:4b:c9:42:89:fc:4a:
                    8b:a5:d5:38:0f:f8:c0:9e:4f:f0:49:12:1b:4e:3b:
                    ce:b2:62:bc:e4:be:d0:a9:76:6c:7b:41:07:f7:30:
                    9d:a5:3c:24:69:c0:84:b5:8f:10:37:00:0a:6d:51:
                    79:ed:ca:c1:0f:52:56:4d:60:0b:11:89:cf:56:7e:
                    12:4a:83:17:87:21:86:a9:4a:6c:4e:f0:55:9e:b8:
                    3f:69:a2:7a:29:40:f8:9d:98:8d:bd:bd:e4:d1:16:
                    7b:25:e5:9f:ee:ce:73:1d:e6:3f:14:4a:f2:f2:5d:
                    ee:20:ac:db:32:1b:69:1e:b3:ee:78:cc:45:4a:f9:
                    fb:ab:8f:6f:53:ff:84:25:b8:27:56:15:a3:31:67:
                    f3:f0:16:9a:b7:16:1c:4b:4d:e3:1a:56:88:25:28:
                    55:e1:02:99:c9:bf:c9:1a:7b:75:89:5d:0c:ea:3b:
                    2d:5a:82:68:27:29:14:50:dd:a0:82:33:00:8a:4f:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BB:C7:7D:C9:F0:B3:33:D4:AC:30:F8:0B:2D:95:F3:2A:06:78:A2
            X509v3 Authority Key Identifier:
                keyid:97:57:7F:84:18:8E:28:3F:DB:5D:7A:6F:CC:CC:48:56:C1:99:49:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1d_hBiOKD_bXXpvzMxIVsGZSbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:d6:ae:88:94:45:2f:54:52:38:cd:3c:21:72:ef:2b:17:
         75:c5:46:95:a9:aa:8f:08:96:42:12:bd:51:88:85:27:ed:e5:
         d4:68:7f:14:e9:3e:68:1e:05:18:df:6a:a0:1d:8a:6b:eb:ac:
         13:a4:1e:79:bf:50:4e:e0:c4:db:b7:5f:fc:54:76:18:5d:3d:
         c6:9f:4b:7f:72:b5:cc:30:24:6f:85:3f:98:7d:7d:61:2a:9e:
         00:c3:d6:cb:f9:de:86:b7:65:23:cd:0c:b0:54:ac:e7:89:41:
         b8:86:54:22:59:0b:b0:be:b8:a5:f1:f7:c5:d0:ce:c4:83:0e:
         80:fb:02:6b:4e:a4:dd:60:ac:b5:e6:80:28:d0:d6:f0:25:5d:
         39:9a:db:9f:58:4a:6b:27:2a:e7:a5:bf:13:73:a6:46:e3:5d:
         94:3b:58:25:44:f7:b9:02:c3:0a:b3:42:2b:8d:ac:f9:f5:44:
         1b:aa:28:64:31:e3:bd:88:0c:cc:90:af:e6:10:d8:22:03:17:
         ad:0e:ad:1d:3b:87:38:55:73:de:2b:ce:32:1e:55:23:f5:a6:
         bb:b9:94:5f:8e:75:b1:02:5f:6e:44:25:ce:86:55:68:47:0d:
         df:7c:e5:a8:6f:19:1c:15:59:09:c9:a4:64:95:21:03:e7:31:
         f4:40:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----