Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          BEYPNH4RicEqT+xGVlE70eqkzbkA+IepyPKGBugRMp0=
Subject key identifier:   95:A3:00:58:45:20:2D:4F:77:B9:46:4A:B3:39:E6:A9:37:C2:D5:C3
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       01962E990A60F0966C769AAFF2457A377877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0678
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: PnJZ5qTdRZbc/XbfbmMwQ10sHNiuWJ+TKuqVYnZNMWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0a:60:f0:96:6c:76:9a:af:f2:45:7a:37:78:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=95a3005845202d4f77b9464ab339e6a937c2d5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:ee:14:62:d9:7f:fb:2f:d7:95:8d:42:4d:
                    e6:f7:28:08:41:4a:2f:1f:2e:c7:a6:03:c7:88:17:
                    c7:7c:20:95:f2:e9:90:30:8d:08:15:68:9f:67:85:
                    63:c1:83:de:bd:2b:95:34:a7:98:6b:32:ec:30:38:
                    79:a7:ae:36:f9:34:82:7d:ae:cb:a8:01:98:1f:e1:
                    66:c5:d7:d1:64:d8:93:07:0f:b3:77:59:5f:95:33:
                    d4:50:4a:50:7a:d1:ea:9f:cc:30:ef:ca:d9:fd:21:
                    a2:18:5f:5b:4f:ac:af:13:96:c1:fc:b5:1e:3e:c9:
                    91:c4:d5:93:43:33:a4:f8:58:f6:9e:f6:cb:46:f8:
                    56:d9:c5:41:b5:90:5d:50:91:21:ea:89:0e:70:d9:
                    22:6f:49:11:28:96:ed:f8:8d:17:11:ce:88:08:5c:
                    6c:77:d2:50:99:3b:dc:46:e7:b2:0b:02:71:3e:93:
                    a1:c9:bb:19:1d:f5:80:5f:15:fd:13:af:da:40:90:
                    74:a4:40:a1:3f:59:75:38:e2:21:47:3f:ed:df:b1:
                    32:12:39:b8:c6:d0:0c:a9:aa:3f:07:9a:24:fc:16:
                    73:c6:32:7f:b0:5e:c6:12:e8:92:1f:dd:f5:d2:73:
                    f5:82:b9:8c:cd:c6:61:ba:5c:14:88:2b:f1:c0:3a:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:00:58:45:20:2D:4F:77:B9:46:4A:B3:39:E6:A9:37:C2:D5:C3
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:ae:d8:42:c0:4a:fa:56:be:a1:7d:e3:88:47:b0:bd:b5:
         82:91:c9:39:32:55:14:6f:31:91:db:19:cc:c8:aa:ec:29:88:
         02:34:3d:74:b4:a6:b5:4c:28:49:09:ac:1e:2e:97:eb:75:40:
         ad:cb:d7:43:71:f5:70:63:cb:ec:82:08:e7:d3:83:04:71:5a:
         86:16:6e:aa:5c:5c:db:2d:53:9f:9e:5f:7d:61:4a:38:f7:3f:
         13:6e:02:8a:3e:db:50:8d:86:00:38:f0:39:09:e8:27:27:34:
         7c:5e:4e:df:c1:27:50:ff:a8:e8:d4:3e:bc:74:cb:cd:d4:70:
         81:20:f9:30:2f:b8:65:e4:ca:ca:eb:68:9d:48:7a:79:44:6f:
         b4:ab:63:c1:eb:dd:8f:83:dd:01:c1:86:21:e9:33:fb:5d:57:
         e1:76:d3:c7:54:b9:f2:f9:6c:be:42:25:ca:5f:4a:57:0c:67:
         66:14:38:25:58:6a:bc:51:4e:a0:4b:32:96:a8:a3:73:51:2b:
         7b:e0:fb:cd:d6:d7:49:d3:b9:87:7c:22:01:9e:1f:ac:ec:97:
         6a:79:86:d4:e2:9c:7b:0c:45:cb:13:e2:fc:38:41:a4:dd:a3:
         9c:2c:3f:1f:74:0a:5c:53:76:28:00:04:ba:25:eb:d3:31:67:
         5f:0c:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----