Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File:                     IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier:          sRtPQPK+rzYILDRG5Re10h14ChVxQT4qZyd0F1uO14U=
Subject key identifier:   6C:78:97:DB:3C:A9:98:51:23:74:0A:05:B7:17:DD:04:40:08:EE:AF
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer:       /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial:       01962F74AFF74E796166C379FE81217A6387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number:          116B
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: 2CBaQisbLLPBw+uJejEdknjj1/GEwjjE2xrcFaZRWgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:af:f7:4e:79:61:66:c3:79:fe:81:21:7a:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=6c7897db3ca9985123740a05b717dd044008eeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:e0:27:6b:c8:26:dd:9d:8a:92:aa:8b:eb:
                    72:dd:32:f1:17:9c:dd:5b:c2:53:a5:ab:55:d4:64:
                    a2:3c:1d:fa:c6:81:58:5b:c7:98:2e:d8:a6:cc:bb:
                    9b:2b:8f:86:9f:e6:c2:01:d5:c9:71:b5:0c:33:45:
                    1a:ee:98:f2:5c:44:80:0a:f7:ba:9a:e4:aa:68:c6:
                    ab:ab:8b:0c:cd:35:33:ac:23:c5:0c:71:7b:66:a8:
                    1f:7d:49:c0:5d:11:bc:81:22:c5:5f:73:a3:5e:24:
                    ee:81:fa:cf:ef:79:1c:ab:d5:0e:6c:ce:52:2e:e9:
                    73:33:20:8d:93:b0:f3:b4:e7:91:f3:66:37:fb:41:
                    03:49:14:cf:4f:a9:3d:09:cd:e1:9b:47:72:fc:77:
                    7b:1b:aa:8b:89:8b:dd:63:b8:63:d0:c5:98:64:44:
                    e5:87:bf:81:a9:eb:dd:1a:42:40:1c:38:66:70:9b:
                    1e:e3:62:29:58:55:18:0b:58:08:de:21:49:fe:74:
                    2e:8c:91:87:43:2e:7f:69:10:de:aa:64:1c:f5:cb:
                    16:34:a7:d0:1d:96:83:73:d6:f1:54:02:88:b8:a7:
                    52:77:c9:06:bb:bd:b2:f5:02:c5:f2:1b:a1:3c:a6:
                    b1:0c:d6:a0:84:94:d1:7d:6e:b7:5c:da:ef:9d:ed:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:97:DB:3C:A9:98:51:23:74:0A:05:B7:17:DD:04:40:08:EE:AF
            X509v3 Authority Key Identifier:
                keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:33:43:c5:7d:76:79:8a:24:d2:26:5d:62:bd:c3:77:5e:d5:
         3f:78:c5:17:32:b3:42:c8:fc:98:4a:69:68:54:55:85:32:a0:
         05:5d:1e:61:d5:01:f0:c8:d6:7b:b3:93:e0:e8:f1:f3:72:ac:
         79:85:c2:37:31:d2:94:6b:34:f8:b6:43:94:7d:dd:16:39:97:
         a3:e1:4f:1a:b4:df:5d:84:8d:94:d1:13:a6:3e:0a:99:f7:46:
         7f:25:e6:db:eb:0f:37:86:ed:6f:9e:90:ec:97:9c:ca:e3:f1:
         14:f0:66:fd:9a:11:1a:a3:32:ed:8f:c5:1f:a9:17:53:73:91:
         05:36:17:79:af:02:9a:1e:3f:df:93:24:3e:65:d6:62:48:b7:
         c7:2c:27:cc:b9:60:8b:64:97:88:f2:0f:de:9d:53:f0:ec:43:
         5c:2b:e1:1c:da:88:37:5c:be:37:db:1e:d7:b8:1a:94:fc:41:
         78:7e:91:4f:82:28:bd:4d:4c:06:05:ad:20:0c:cb:f0:90:6b:
         90:4e:52:08:54:44:00:1f:db:94:a2:bd:e8:e6:f5:5f:8b:22:
         1a:d6:59:7c:44:cc:b8:ce:ec:5e:ef:ac:ea:45:7e:9a:2b:74:
         a5:7d:14:a5:8f:19:74:a1:a8:56:69:bc:39:2b:96:a6:4d:46:
         d9:b1:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----