Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          fYz9bvxT+/iy1i0rdjQufcRInTgSVuqiod6pkfHD5xQ=
Subject key identifier:   56:91:57:FC:CA:23:2B:B1:28:AB:99:0B:9E:8D:00:80:4F:B7:60:F9
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01962E9979F63D96BFECD348043F7ECB88F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: a9kqrdHEo3hH0qHQW9g3dzl5XSHhMHZ/aMmQzNOGRKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:f6:3d:96:bf:ec:d3:48:04:3f:7e:cb:88:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=569157fcca232bb128ab990b9e8d00804fb760f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:43:ae:49:42:56:7e:eb:43:a4:cd:2b:42:
                    12:22:5f:1a:f4:ea:09:b0:41:ae:75:f5:ad:69:af:
                    45:4f:7b:fd:43:12:a7:5c:38:e7:cd:83:59:56:a5:
                    ef:64:6a:e5:da:a5:1e:6a:a3:3f:8c:e9:22:25:89:
                    93:0b:87:da:df:e4:ab:9f:23:55:02:ac:eb:81:c6:
                    28:d6:61:ab:fb:d0:f4:27:ce:d9:9c:27:7b:4f:70:
                    24:63:78:49:df:4b:b7:64:02:dd:ce:41:e4:18:d8:
                    0f:be:08:dc:04:44:6a:5b:d8:52:d7:d6:de:43:c5:
                    a8:64:b4:96:d1:e5:9a:1b:10:13:5e:e5:41:4e:3c:
                    06:09:27:79:9b:c6:6e:f6:8a:c9:2b:70:8d:41:71:
                    9a:78:90:69:ae:4b:ab:09:cd:18:f9:70:17:f5:46:
                    b7:a8:35:7d:4a:da:a8:67:e8:ae:4a:9f:0e:d2:6f:
                    8d:a0:6a:87:1e:9f:c4:2b:68:6d:88:9f:ca:d8:5e:
                    21:64:b8:d2:fe:80:14:c3:eb:11:fb:49:61:b9:6d:
                    5c:49:ca:c7:ba:6c:0c:a7:a2:af:c0:c4:5f:7f:91:
                    fa:7c:e9:23:66:ad:bc:a7:be:51:67:e0:4a:e1:ee:
                    c9:44:6d:19:7e:fb:87:eb:ab:7c:84:c1:bd:e8:ca:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:91:57:FC:CA:23:2B:B1:28:AB:99:0B:9E:8D:00:80:4F:B7:60:F9
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:35:dd:71:c8:89:0e:7f:f8:d2:d7:28:35:9a:df:06:92:
         4e:ac:58:92:be:79:b3:d9:90:94:59:3a:a2:b0:b3:33:fc:39:
         4e:e2:09:f7:5a:b3:49:7f:d0:6c:d5:e9:23:14:4d:a3:b5:f4:
         51:b6:bc:fb:00:ca:30:dc:fd:52:a5:e9:54:6b:6d:ae:87:9c:
         1c:1a:f5:0e:48:12:93:ef:fa:08:df:64:ec:96:12:de:f2:fe:
         c4:23:39:1b:70:73:87:ed:85:63:d8:b7:19:51:1a:d4:ce:44:
         b5:b1:cd:28:ed:71:b8:9d:69:11:8c:ab:ad:fc:28:60:95:df:
         ca:ce:f6:e4:12:11:be:4e:86:33:62:a7:b1:70:5e:31:a9:b3:
         9f:5e:88:f8:bd:5e:c4:68:dc:ce:cd:09:9f:56:76:c7:98:1f:
         01:91:d3:80:bc:f5:0e:05:e8:52:2e:21:25:d9:e9:0f:4d:f2:
         35:33:12:30:a7:b3:a5:2c:51:4e:b6:10:99:29:73:ea:27:21:
         e9:77:82:73:24:ea:22:85:73:bc:19:6f:6b:90:a9:96:dc:48:
         be:ff:ce:cf:85:26:79:30:12:55:75:7c:1e:d6:66:8e:e7:55:
         56:7f:21:7e:b2:80:4c:90:63:e3:e1:d7:9f:b1:cb:e4:b5:c0:
         3e:c5:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----