Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File:                     fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier:          XXdfLusbXSf8DKH4qjU4IctKQj5xkafQ1qH4QjCqbKI=
Subject key identifier:   E3:4B:02:4F:7E:D7:F6:C2:28:17:DE:83:D4:1E:9E:B2:5C:63:D2:E5
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer:       /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial:       01962DF3D59C295A2C1F57A584193CFBE0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number:          0753
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: Z8qGwLU4ctInfJ7TSDl5xDaipcXiDGPvbXQRg3fN8+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d5:9c:29:5a:2c:1f:57:a5:84:19:3c:fb:e0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=e34b024f7ed7f6c22817de83d41e9eb25c63d2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:54:a4:2a:4a:12:68:5f:87:39:4f:3f:94:
                    a5:d0:f2:b8:a2:a9:f0:b3:76:ff:07:8d:2b:20:50:
                    63:f3:81:7f:a6:5f:eb:07:1d:ec:c8:17:d1:db:18:
                    64:23:c5:1e:1b:f1:08:5f:fd:df:ef:50:35:eb:35:
                    f7:a7:00:98:86:c7:00:32:f7:31:d1:a5:13:c4:c6:
                    62:2c:5c:20:3a:13:33:5e:0b:4a:43:60:ff:03:80:
                    31:52:e5:da:db:40:fe:b6:56:24:8c:f0:8b:ec:3c:
                    cd:83:6a:82:16:43:94:dc:56:7c:f6:c7:e4:79:9a:
                    02:22:ff:ad:6d:f3:a2:44:4b:bf:f7:82:0e:0b:6e:
                    41:94:84:da:d7:f6:9c:1f:1a:08:b5:3b:51:a9:52:
                    53:a6:5e:ee:83:3b:b1:b0:40:fb:20:72:55:1b:1c:
                    b0:0c:78:29:cc:bb:86:69:32:c5:4b:3c:98:92:17:
                    3f:7b:41:9e:40:b6:93:27:67:44:8f:8c:68:da:bc:
                    bb:30:af:dd:1d:bf:15:a4:f6:e9:ff:7d:7e:71:87:
                    98:6b:87:dd:d1:9b:95:da:a6:17:37:b2:a2:c5:35:
                    63:29:0b:7a:71:95:38:da:d6:c7:22:eb:79:ef:9f:
                    74:7f:b9:3f:07:ff:36:39:31:b5:25:80:4f:05:6f:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4B:02:4F:7E:D7:F6:C2:28:17:DE:83:D4:1E:9E:B2:5C:63:D2:E5
            X509v3 Authority Key Identifier:
                keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:37:a3:6d:97:bf:64:7c:33:27:38:c2:fc:6e:55:bd:9b:
         6b:a9:c9:5c:28:df:88:95:0a:d5:a8:1b:67:c7:de:5f:8e:70:
         a1:f1:a5:ba:97:a0:a5:5d:49:ab:22:2e:e8:ed:9a:42:20:ed:
         b5:f8:b9:aa:fd:c5:ed:60:7e:6c:da:51:25:ad:56:23:46:6c:
         7f:a3:35:e0:a5:49:89:c2:bd:02:2c:e6:85:40:63:eb:75:e6:
         d7:ce:ef:a2:7f:fc:bc:66:ae:2f:f3:00:d8:9c:ba:8c:78:fa:
         66:76:d3:66:bc:41:c0:6e:3d:74:71:8d:29:5e:af:06:10:e8:
         bf:1f:33:1f:b4:c3:fa:1f:ee:6d:ed:0f:68:02:3a:67:01:dc:
         26:54:d7:31:30:eb:6a:59:74:2f:f2:2c:d1:be:65:f3:bf:e0:
         98:83:b4:ec:bd:2c:bf:ad:69:01:da:96:d5:5f:fd:33:3e:d3:
         d1:88:ba:89:3a:6b:4c:6d:16:18:20:5f:1d:cd:a8:8b:ec:b3:
         71:b7:35:a9:67:95:e7:a4:b1:16:ca:d6:f5:29:91:93:7c:3a:
         81:ca:28:0b:95:93:a4:fa:e4:c6:c6:04:02:54:e4:4e:84:bd:
         4e:55:25:13:f4:54:89:dc:fc:4c:6b:af:5f:d6:a7:0b:3a:3c:
         ed:cc:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----