Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          raiG6Z8G74PpVSb+lNPWaqfWQbiGl+K3LmgpeiMtLFc=
Subject key identifier:   AC:A6:5A:5B:F5:7D:F6:54:40:A2:B0:22:8F:6E:B6:B9:6E:18:35:94
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       01962E987F27FF8AA200B3A4FB957692CEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: ZYJ8pGcANeXRVpzKUH8AegEw4UMdGEq9pk4i0Do+zwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:27:ff:8a:a2:00:b3:a4:fb:95:76:92:ce:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=aca65a5bf57df65440a2b0228f6eb6b96e183594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:2a:dd:24:a5:70:1d:10:3a:14:8b:d1:23:
                    46:2e:ab:b8:00:d1:4e:0c:2a:ad:a4:61:7b:de:b2:
                    1e:58:4a:07:c1:e5:26:d4:2e:45:21:76:29:12:56:
                    3a:cf:2c:82:76:82:73:53:0d:60:ef:de:a4:7f:52:
                    4e:09:a4:47:ef:de:51:3a:e4:b0:e0:25:07:5d:57:
                    a3:d5:d1:ec:ee:b9:e1:8a:d5:94:6e:cf:cc:3a:ef:
                    63:aa:5a:71:2c:89:e4:a8:90:3c:ab:27:51:ce:f2:
                    2e:22:13:4b:eb:7b:44:d9:f8:64:07:b6:3d:71:d1:
                    cd:e4:7e:95:9d:76:0e:2d:27:7f:d4:7a:dd:ab:1b:
                    19:42:62:6a:b6:62:6f:c3:72:c6:18:2f:a4:be:ab:
                    c1:42:6c:bc:0d:df:5d:5e:18:f7:b2:74:62:9e:e8:
                    70:b9:20:69:00:c3:bf:dc:62:da:50:4d:0f:6d:8e:
                    89:7d:40:21:37:5e:32:e1:2d:f1:f4:5b:1b:37:30:
                    d4:93:b3:4f:60:f5:02:79:31:62:4b:b3:85:4c:9d:
                    21:44:a1:ab:28:b0:18:9a:8e:f7:7e:24:da:c5:61:
                    41:15:5c:17:5f:18:78:af:0c:56:ff:5a:1a:8d:32:
                    5d:ef:51:dd:dc:ec:8d:04:5d:51:96:fe:4a:e9:a8:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:5A:5B:F5:7D:F6:54:40:A2:B0:22:8F:6E:B6:B9:6E:18:35:94
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:95:4f:5a:6e:5d:e4:39:d6:56:de:56:b3:7f:75:1b:b8:
         12:dd:fd:bd:58:01:b9:f4:b9:57:eb:d2:90:b2:b8:1c:2a:19:
         8d:27:e5:33:94:11:a5:66:c0:ab:05:36:05:af:c3:38:ca:64:
         9f:5b:ba:3b:45:87:0e:af:06:3a:a6:d1:22:99:cc:8e:03:cd:
         38:4e:3a:8f:db:07:3d:cb:78:1c:9c:f0:fa:2f:83:f0:ea:d8:
         ce:b5:82:8c:aa:9c:df:a1:1f:dc:9e:1e:a7:f0:ff:5b:f1:93:
         26:1c:cb:b3:09:04:8a:63:f4:e4:02:59:72:8c:4a:f6:e4:6a:
         53:97:80:73:b8:dc:08:b4:8e:da:a0:bf:9f:45:0b:97:bd:db:
         51:8a:86:90:58:23:34:81:64:2c:90:0b:c0:fb:7b:b5:b3:50:
         b2:a4:1d:4c:e4:52:db:3b:1e:f7:80:49:1c:60:e0:a9:2a:cd:
         cb:d5:e6:a0:aa:54:17:43:39:b6:80:4d:67:ae:15:6e:d3:56:
         a9:dd:df:04:e1:9e:e7:61:77:85:ca:c3:35:78:41:67:ef:b9:
         19:d2:ae:b3:ec:c6:26:a0:bc:21:94:5a:3c:fc:87:7b:17:5e:
         37:a6:da:ee:18:10:85:af:71:e6:71:89:78:41:e4:f0:8e:15:
         3f:a3:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----