Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File:                     xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier:          bsJbbs/Y3KxzK6pqy3d42kZG5UrgyCrVxR/fqc9xxJQ=
Subject key identifier:   44:73:80:38:40:D3:87:11:8F:3C:17:FD:7E:FF:A0:61:5A:66:D9:7E
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer:       /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial:       01962E61A8C2973778200D9120D684B5D092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number:          094B
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: ER9YIe8FZJAxbjOAEf5TnjotNFXufhNjAwLjQR6PMY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:c2:97:37:78:20:0d:91:20:d6:84:b5:d0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=4473803840d387118f3c17fd7effa0615a66d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:13:9e:e8:f5:cb:84:22:81:7e:40:d1:01:
                    c2:97:f5:5a:0a:ac:5f:00:9e:2e:43:32:bd:dc:c0:
                    81:f7:ae:74:ed:12:36:3d:aa:76:ac:80:c9:46:dd:
                    c8:6c:2a:c2:46:a6:8a:91:f1:05:cd:4f:23:6d:a0:
                    f2:b8:32:9c:5a:d7:a9:ca:bf:d5:79:38:98:36:c9:
                    f8:7d:a2:9c:ef:95:b8:38:25:db:67:d6:9a:07:10:
                    2f:96:3d:a4:d8:3c:c4:b1:d1:fd:e7:33:27:f6:26:
                    56:4b:09:c9:eb:8e:60:77:3a:fb:49:72:74:00:3f:
                    ab:ed:1f:ba:16:00:c4:12:ac:bc:5a:91:81:70:d4:
                    55:df:11:7a:f8:1b:d7:63:15:74:fd:71:bb:c1:76:
                    f1:aa:f7:f6:6a:78:0a:4a:dd:c5:73:fd:5f:5b:2f:
                    bd:ef:d6:d9:a3:df:c6:05:af:95:1c:c2:a6:4e:c8:
                    03:c1:87:32:20:82:89:2f:c6:40:1f:a2:6f:7b:75:
                    16:f1:82:f5:e1:2d:4c:ac:8f:64:93:ec:d9:95:30:
                    65:2f:dc:14:93:d5:b7:33:1f:3e:dc:4c:91:50:e4:
                    7c:b5:2f:65:a6:a5:81:1a:53:21:a2:ac:dc:d1:a5:
                    58:92:2f:5a:17:2e:e8:23:6d:80:b6:96:e6:ae:a5:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:80:38:40:D3:87:11:8F:3C:17:FD:7E:FF:A0:61:5A:66:D9:7E
            X509v3 Authority Key Identifier:
                keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:33:21:60:5c:e8:48:d9:b6:52:66:ef:2b:17:52:52:b2:
         fe:96:96:28:41:35:38:72:88:7f:2e:64:42:0e:29:fd:fc:cd:
         90:6b:26:58:36:b1:c7:33:c8:27:81:22:6b:ad:c6:b7:9a:dd:
         62:cd:c2:8b:bb:54:18:ed:38:2f:34:44:27:70:06:ba:ba:73:
         08:03:c0:4d:37:d2:11:a6:06:3f:73:56:80:22:ef:63:da:36:
         77:e8:9b:e4:ee:d6:fa:dc:8a:97:d9:e3:5a:d5:63:f6:9f:13:
         23:23:7d:ab:77:c6:0f:6c:10:6b:d0:14:02:d9:35:8f:c7:57:
         0d:0e:d3:aa:c9:f1:19:37:82:ab:0e:1d:9b:e1:20:07:00:0d:
         84:15:1d:6e:18:3a:52:d2:40:50:1d:c8:98:45:19:6c:8c:51:
         8e:96:04:01:18:0d:02:51:29:66:02:ed:0a:3d:d0:9b:60:b3:
         f3:eb:be:a6:f4:da:de:e5:b9:c6:28:69:af:75:a8:bd:1a:67:
         33:e0:e4:02:89:e9:ca:56:ce:a3:bb:a4:b8:1b:ba:57:86:70:
         98:13:3a:fd:5e:c3:86:99:41:98:f8:e5:a5:2a:77:cd:71:a7:
         2c:a5:c3:4e:f9:18:2d:31:a4:c2:5b:79:07:8d:46:f2:e5:6b:
         fd:7e:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----