Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          9VaeDzmLQL24WZ2sYQpG6vTgC+5e8PWGqaEt9I9cL2A=
Subject key identifier:   74:D3:2C:2F:4C:B6:A0:DC:00:0E:7C:FA:8B:BE:F1:D0:50:37:AC:CC
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       01962E61D7998A6951B4BBCAFAB2C9EBA848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          0E99
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: F/7BHplAT3B8JPlR33PV3zYoOb4LAqz8TlVdP496Ywg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:99:8a:69:51:b4:bb:ca:fa:b2:c9:eb:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=74d32c2f4cb6a0dc000e7cfa8bbef1d05037accc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:b4:5c:de:cd:39:94:ad:02:85:a8:c0:4f:
                    e3:a1:7c:92:49:9c:b7:b4:1a:ef:a1:ec:19:7f:84:
                    27:d9:f6:76:e8:a0:33:38:cd:66:af:5d:be:bc:ad:
                    47:48:f5:51:a0:79:da:ba:2a:09:b1:ba:d3:b8:7f:
                    14:1f:35:d4:7d:d2:c2:d4:b9:59:66:26:ba:47:d5:
                    93:06:83:bc:eb:95:9b:bf:52:b0:de:1f:eb:b6:97:
                    35:09:28:07:ca:93:b0:e8:14:5a:4f:8e:35:f3:97:
                    31:b8:37:8b:c0:2a:20:bd:01:4a:c6:20:7d:43:b2:
                    e1:05:f4:73:0c:4a:bc:39:b4:66:e7:99:a9:52:16:
                    af:f7:c1:f4:2d:98:5a:05:e9:d0:42:2c:4a:40:14:
                    a5:8a:66:c6:f3:ad:4f:21:67:80:cd:5c:05:7c:d6:
                    49:a6:3d:bf:2a:fe:4c:05:93:8e:52:5d:f7:b5:e2:
                    db:81:52:0d:fe:84:a7:40:56:56:fc:63:8e:2a:ba:
                    06:c4:a2:12:69:dd:ae:91:0d:68:b1:43:38:0f:2c:
                    fe:9b:31:62:ab:4a:e7:86:15:fa:77:ee:3a:38:97:
                    2f:68:e2:aa:d3:6d:e8:75:8a:5a:15:39:d3:88:a2:
                    44:f3:db:ea:f1:a7:f5:34:22:c7:2c:6d:de:83:fd:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:2C:2F:4C:B6:A0:DC:00:0E:7C:FA:8B:BE:F1:D0:50:37:AC:CC
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:38:7b:ae:cf:bc:64:25:33:94:58:cc:00:dd:05:44:39:
         9b:f2:60:30:de:25:3a:1d:cf:dd:74:0b:de:4f:9d:37:b1:d1:
         46:89:90:b7:01:54:95:e9:0d:64:52:2b:87:0d:d8:84:75:18:
         aa:76:77:0b:3d:69:79:53:04:f6:de:a1:3f:ad:12:1d:31:e3:
         db:75:fb:b5:74:49:aa:86:cb:2d:75:96:09:b3:09:bf:44:6c:
         37:cf:ce:00:ac:0a:7d:8b:b3:54:97:0c:01:5f:6c:e3:70:38:
         87:cf:60:4e:37:40:96:47:93:c1:7f:0d:30:5c:27:99:a8:72:
         8c:8c:49:53:73:3e:da:a1:22:a7:1e:7c:bf:ef:a9:a9:91:a2:
         8e:78:35:ce:eb:8b:05:fc:99:0b:4d:19:ec:d6:1f:f0:3f:e7:
         a8:a9:d3:06:bb:af:2d:56:82:90:e0:d0:3e:8b:4f:da:16:67:
         97:0a:fc:6a:f1:e3:d8:be:6d:1a:49:e9:53:ab:b2:8a:e2:08:
         2f:df:23:7b:f9:21:a4:21:81:2a:67:ec:08:30:2c:19:3a:76:
         59:ad:ed:ed:09:d8:8f:82:6f:38:ab:63:6f:ca:6c:1e:f1:dd:
         84:bc:e6:b1:a9:f9:ee:ae:c8:9d:0a:d7:17:75:40:c0:21:e0:
         45:63:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----