Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
File:                     ii3QX1WC-f6w8_e98E24skiGqS8.mft (raw, json)
Hash identifier:          jgazOI669iKZkUtHhMuEZBRMTWjF2dKMcXSk52bZgA0=
Subject key identifier:   4A:E4:77:43:FE:2D:B4:E8:43:78:63:EB:EC:14:8D:E9:E1:EA:70:31
Authority key identifier: 8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F
Certificate issuer:       /CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
Certificate serial:       01948F63F97DF96A7FD8379C89BF1ADB7F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
Manifest number:          067F
Signing time:             Wed 22 Jan 2025 19:01:21 +0000
Manifest this update:     Wed 22 Jan 2025 19:01:21 +0000
Manifest next update:     Thu 23 Jan 2025 19:01:21 +0000
Files and hashes:         1: ii3QX1WC-f6w8_e98E24skiGqS8.crl (hash: C+sSciLDWW/7k/vd3KUk4GEDa+BKYw3hY/fdJUH+xlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:f9:7d:f9:6a:7f:d8:37:9c:89:bf:1a:db:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
        Validity
            Not Before: Jan 22 19:01:21 2025 GMT
            Not After : Jan 23 19:01:21 2025 GMT
        Subject: CN=4ae47743fe2db4e8437863ebec148de9e1ea7031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:77:b3:6b:34:7f:94:c2:e4:a7:0d:c7:c5:
                    f4:87:00:84:5c:9e:a7:59:1b:5a:6d:5b:4a:43:c3:
                    08:e2:44:e5:06:55:07:ef:bd:70:34:fc:d9:08:ef:
                    be:1e:c6:49:5e:95:27:11:9f:11:b8:98:a9:5f:cc:
                    51:45:20:56:fb:4f:8e:a4:a3:7c:ef:4b:af:8b:21:
                    3b:55:65:95:6c:78:ba:d2:6e:6b:49:e4:12:5b:6e:
                    25:82:ac:f4:8d:b3:d4:f5:a3:57:da:9d:19:d9:e1:
                    e1:e0:47:ed:ff:84:53:63:59:44:b9:de:8d:50:9a:
                    3a:68:82:ad:64:99:ea:8f:71:53:cc:bc:3a:70:b3:
                    ae:a6:5e:cf:65:f0:f0:ff:92:c0:dd:0b:29:ce:8d:
                    b7:f4:c6:71:a7:67:94:55:6c:ce:e3:80:1a:ba:d7:
                    3c:cb:cf:03:65:e6:56:97:46:f5:ca:58:25:e0:36:
                    69:ca:8b:41:b7:94:aa:c3:79:87:3f:0d:1f:69:3b:
                    78:b2:7b:7d:7a:ac:34:34:22:e2:38:90:67:41:62:
                    7d:10:fc:65:f2:26:7c:a5:f3:fc:69:0a:6c:11:b7:
                    e2:5b:d0:49:d6:72:dc:a4:ac:5c:c6:64:1d:2d:b8:
                    60:29:b1:6a:9f:15:6e:08:28:fe:d8:7c:44:03:d3:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:77:43:FE:2D:B4:E8:43:78:63:EB:EC:14:8D:E9:E1:EA:70:31
            X509v3 Authority Key Identifier:
                keyid:8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:37:2f:35:94:b9:c2:85:83:27:65:60:8f:cf:8d:cb:d5:
         a7:13:00:b1:63:6a:bc:89:d2:3f:3b:fe:81:41:2e:1a:25:c2:
         51:4e:26:42:aa:fc:ac:bf:3a:ff:58:d8:28:78:1d:b0:83:dd:
         df:62:a5:eb:6e:bd:ce:b6:48:3e:3c:0b:ba:fb:cd:1f:0e:64:
         38:a5:e6:2e:e4:62:1a:98:78:19:a2:4c:ec:c6:3a:74:6e:b9:
         26:10:34:b8:be:9b:41:e4:14:09:e7:8c:b1:c6:e2:b9:62:c3:
         0e:c7:c8:00:86:d0:9a:0c:a6:38:7f:c4:b8:13:13:c9:29:f8:
         69:93:a1:77:67:00:74:70:8e:2c:19:7d:d9:68:44:13:aa:93:
         42:4c:af:e3:21:03:b4:12:be:42:a6:f2:7d:65:a4:d4:18:03:
         54:c2:ea:af:18:9c:7c:c7:1d:db:0e:fe:24:fa:67:2e:8f:21:
         40:0d:a7:3c:b4:fa:dd:cd:81:e9:21:b6:dd:f8:e9:db:5e:dd:
         ac:08:22:a5:63:3d:01:87:93:86:62:75:75:84:1f:92:15:b7:
         ef:69:a2:a4:f1:ce:e5:08:28:c4:46:e7:50:52:36:ee:09:e9:
         da:84:c9:d2:b6:6e:ea:87:2b:08:09:0a:cc:e9:dd:0d:28:9b:
         61:b4:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----