Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File:                     xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier:          UMXircdCs46xLD/FIsTUiCT6Au1DmtBmcZTnZBdamI0=
Subject key identifier:   EF:15:DF:97:DF:68:55:03:81:E8:A5:76:02:03:5C:60:20:8F:9B:25
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer:       /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial:       01962E99EABEE0FC2DD869666A70EE5A42C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number:          1242
Signing time:             Sun 13 Apr 2025 10:02:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:41 +0000
Files and hashes:         1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: N2GhzwxG8JPr/WmgaFsxtp7J9FXtde4bxa1SCMYDbv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ea:be:e0:fc:2d:d8:69:66:6a:70:ee:5a:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
        Validity
            Not Before: Apr 13 10:02:41 2025 GMT
            Not After : Apr 14 10:02:41 2025 GMT
        Subject: CN=ef15df97df68550381e8a57602035c60208f9b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:8f:84:f1:ed:34:c4:7b:37:55:8a:c4:0b:
                    6c:ed:d7:13:fa:94:6e:db:c6:f4:07:1e:74:58:97:
                    56:c5:f7:d2:5b:a9:01:57:17:73:70:58:56:cf:6c:
                    96:9e:f1:31:0e:9a:ed:89:b9:87:28:34:39:45:78:
                    0a:7b:5a:fb:fb:e4:de:4a:c1:6f:d3:bc:37:47:b5:
                    b6:26:da:36:82:01:fe:b7:a4:e7:1e:d1:0f:a0:b7:
                    48:0e:dc:35:87:da:f9:15:13:ae:a1:a9:44:8f:fc:
                    86:b4:16:05:49:fc:60:ce:81:18:84:6d:86:f9:9c:
                    7d:c8:99:fa:47:1d:d5:26:d4:fb:2e:d2:b2:ed:44:
                    aa:1c:e7:ea:39:2d:87:80:d8:4a:b7:38:1d:3d:15:
                    0d:1c:79:ab:19:e3:01:9b:e2:59:7e:a2:bc:29:fb:
                    c9:e2:60:79:81:12:c8:f5:3a:24:30:5d:3b:42:7f:
                    3d:0f:51:8f:4e:5a:c0:c4:81:72:7f:7a:06:35:7b:
                    6e:33:1f:5b:83:e5:50:14:3a:0f:d1:9b:08:44:31:
                    01:46:b1:cf:bc:36:af:50:6f:51:c0:95:92:69:bf:
                    dd:c7:5f:f0:0d:e1:b5:4b:0d:9e:08:d9:06:4c:6b:
                    2a:c3:d2:1d:bd:2e:21:92:ab:cd:7b:cd:da:88:6e:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:DF:97:DF:68:55:03:81:E8:A5:76:02:03:5C:60:20:8F:9B:25
            X509v3 Authority Key Identifier:
                keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:26:60:69:5b:9f:c6:03:5d:a6:2e:83:b4:15:cf:e6:68:07:
         66:f4:a8:8c:1c:80:16:43:a3:be:21:ce:78:b5:a3:36:1a:9c:
         a5:db:ec:25:9c:8b:13:af:27:5e:78:7d:88:0d:d6:2e:38:19:
         64:29:f6:58:50:fc:b9:09:88:28:4f:19:ed:35:5d:ca:5a:a8:
         68:23:50:85:5a:5d:9a:c1:92:25:8b:0a:36:ed:10:ce:bf:38:
         7d:28:2d:cf:1d:08:15:08:cb:9b:92:33:ce:26:91:47:74:af:
         1a:e1:e7:29:6c:fd:c6:e8:d3:a2:c6:d6:9b:45:05:88:6e:dc:
         f4:aa:15:83:7b:5f:d3:67:48:1c:cf:89:d5:85:7d:cf:64:e0:
         52:10:a1:fe:a9:a4:d7:95:68:fe:49:1d:ea:15:17:0b:47:fe:
         a2:75:a4:71:b7:e7:1f:5a:92:c4:62:3f:0f:cc:1f:f2:68:3f:
         21:e4:d1:c8:76:56:d8:31:67:2a:90:c9:2b:f0:b5:43:b8:b0:
         00:4f:dd:06:a9:02:bc:82:e1:61:20:d0:1c:2e:0d:4f:7d:27:
         39:7f:b5:24:60:81:31:22:68:ec:78:15:2b:3f:d1:69:3c:a0:
         f0:7a:ef:91:4a:b0:db:8c:42:5c:25:1b:45:61:38:1a:dc:33:
         52:8d:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----