Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File:                     TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier:          q5beglvuHh7Lgr/ZhnIvlU/JUeu5ajICbnE0fWLQp6M=
Subject key identifier:   69:92:AF:D3:DE:F2:CD:EC:29:1F:FF:A9:DD:90:EA:AA:9F:B8:87:F6
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer:       /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial:       01962F3DC23EA968B86C00DA97EE6B238E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number:          0488
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: Tw24N8m1gwPohm+J6gCpGZEXkOL660SA5Ndzzjuaois=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:3e:a9:68:b8:6c:00:da:97:ee:6b:23:8e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=6992afd3def2cdec291fffa9dd90eaaa9fb887f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:0d:b8:47:91:de:f6:78:cd:10:d3:9a:83:
                    01:63:1e:84:76:3d:3f:20:1f:51:de:91:ba:78:d5:
                    00:73:ef:77:02:76:32:d2:b6:87:3e:7a:c1:f3:65:
                    4f:e5:68:3b:4d:0a:46:dd:05:79:79:39:cb:dc:05:
                    d8:3e:82:78:55:56:92:c8:16:f4:54:46:18:55:2d:
                    33:2e:e5:ba:03:98:6c:f9:dc:2b:8a:fa:b4:12:cc:
                    0f:5d:69:3e:f6:18:72:8e:2b:b1:f3:1a:13:6d:28:
                    6b:ca:74:d2:e2:51:c1:40:d9:63:5e:8f:74:9e:6b:
                    a4:93:fa:d4:33:f8:b8:40:13:3f:fd:d5:1d:94:2d:
                    88:0f:e5:75:c0:4b:22:a4:41:a8:0d:e9:1b:0d:ac:
                    d0:04:ee:be:2e:14:5b:63:7e:cc:7c:f2:e4:fd:b1:
                    14:77:4e:a5:16:3d:94:0f:8b:97:16:8d:f9:cd:c0:
                    05:56:66:2e:d2:fa:00:52:44:69:88:cb:cc:e4:06:
                    8e:06:5f:b5:68:f0:a8:51:23:7d:81:2e:87:fd:66:
                    69:49:fb:14:33:02:ab:56:11:50:42:5a:22:cf:34:
                    88:88:ea:c1:67:90:04:89:97:c3:3c:52:db:d2:c9:
                    23:f6:f5:7d:6b:bc:2b:8e:0f:a5:cf:73:67:f5:4e:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:AF:D3:DE:F2:CD:EC:29:1F:FF:A9:DD:90:EA:AA:9F:B8:87:F6
            X509v3 Authority Key Identifier:
                keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:dc:63:a6:cb:9f:57:30:83:77:17:8a:b7:34:ee:65:4f:
         6c:f8:1a:f0:8f:1d:78:6f:a9:94:8a:98:0d:c9:46:1c:a4:92:
         7b:0d:c9:31:f3:35:2a:97:12:3f:58:06:d5:65:37:3b:74:07:
         f4:d2:9d:b9:29:1c:f1:d9:43:39:b7:95:9f:52:e5:90:51:aa:
         6c:23:2c:f7:9b:00:97:c0:30:00:a3:3c:4a:7b:4b:b6:07:d0:
         00:93:eb:c3:29:fe:ef:31:29:4a:5f:23:9a:b6:e8:6d:2c:05:
         63:20:29:3c:09:8c:c9:9c:71:3f:dd:dd:52:2b:ae:13:0c:98:
         8b:1f:b9:f7:f5:96:ef:79:9a:e5:38:04:02:a9:35:ef:b9:0a:
         9d:7f:cd:3f:b3:e3:ce:d0:bd:c2:84:02:99:88:dd:ac:97:23:
         a4:fd:eb:92:a7:5e:9b:3a:7a:01:93:73:39:75:8d:61:9b:96:
         0b:15:99:b4:45:78:15:90:6d:ae:ee:b9:25:4e:b2:c4:8c:41:
         0f:a9:4e:8f:c2:47:50:01:4a:bd:a1:7f:08:7f:dc:ce:49:83:
         dd:78:a4:41:ad:b1:9d:09:de:4e:24:3b:ff:ef:ea:fd:47:4f:
         59:c2:79:20:3a:91:f5:12:ae:18:b6:17:94:92:4d:a6:e0:19:
         8d:8b:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----