Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File:                     SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier:          zk2YiIgn/FYnVTHSh56OmPKfXH0b07b6EwR/iIsFqVU=
Subject key identifier:   BB:D7:EB:19:25:E0:6F:8B:11:96:3D:8C:DD:F9:D5:A3:71:CA:9C:6B
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer:       /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial:       01962E993D477F0CB2B3988E5114AD12FB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number:          10D1
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: S/Whsl3WM3ptT042lxOKGJ26vl4f/9bZFCqYlSiWgU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:47:7f:0c:b2:b3:98:8e:51:14:ad:12:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=bbd7eb1925e06f8b11963d8cddf9d5a371ca9c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:30:9a:c5:f4:af:9f:dd:c1:db:8a:cf:a8:
                    46:1e:68:f2:09:18:99:d8:98:5c:8a:da:8a:4f:03:
                    4a:b6:c5:cf:ea:f2:b0:05:61:a7:bb:62:86:1f:28:
                    0e:b3:1e:47:0c:93:04:d7:b5:3c:de:84:86:9e:3f:
                    97:92:d0:92:8d:d4:20:a7:f5:50:d5:1b:e2:cc:dc:
                    1c:4d:1a:63:6c:cd:61:fb:7d:1a:16:b9:6d:4b:5c:
                    3c:1d:c2:19:88:24:6a:0a:68:66:9f:c0:89:48:78:
                    6a:c5:0d:df:d2:a6:b6:23:8c:04:52:a8:a9:45:56:
                    8d:dc:28:19:4a:2e:24:55:00:2e:f6:6c:71:67:8c:
                    c4:84:0e:68:4d:27:68:35:4d:45:7f:ae:66:10:12:
                    11:b0:0a:6c:68:f8:ef:d8:9e:ce:1b:2b:b7:47:ff:
                    d6:a5:d3:cd:35:b8:35:68:dd:75:da:71:e2:cf:33:
                    16:64:81:e9:ea:5e:f6:22:0f:f4:a5:26:b8:10:e7:
                    d4:41:f4:af:35:84:67:8a:ba:bb:53:b9:48:81:aa:
                    e3:b7:64:7d:ae:1d:b3:5d:8e:12:e9:59:3c:7f:45:
                    a5:ef:bf:91:26:54:18:0c:5b:29:ce:a4:b1:ca:18:
                    ee:34:08:3d:61:88:5a:ce:49:ba:6e:42:bd:55:a5:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:EB:19:25:E0:6F:8B:11:96:3D:8C:DD:F9:D5:A3:71:CA:9C:6B
            X509v3 Authority Key Identifier:
                keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:14:fc:ba:41:b7:fa:84:24:67:f7:2f:46:53:96:ad:31:
         e8:0d:1a:60:27:b1:b2:c9:df:f6:8b:66:2e:9f:56:27:69:c2:
         50:ae:b4:42:52:42:da:93:b1:86:74:65:d5:69:59:20:07:14:
         79:b7:94:b5:e5:d1:c1:bd:07:01:e4:db:09:2c:12:27:e5:26:
         fd:a2:7d:77:87:5e:22:89:99:e6:a2:fa:a2:9a:9d:22:a0:d3:
         ca:fa:86:a1:2d:75:dc:93:1a:4f:00:d8:fc:7d:fa:37:fe:36:
         92:6a:67:90:e3:0a:eb:d8:b9:25:6f:44:a9:be:06:29:15:12:
         9e:2c:05:8c:13:20:80:26:50:03:89:c9:78:74:7d:2b:48:fa:
         1c:fc:d2:46:9e:d0:77:d6:e2:2f:b9:95:20:26:9e:28:b9:eb:
         97:fa:42:36:e5:80:82:35:9c:7e:63:94:8d:74:b3:fc:68:5f:
         10:1e:a9:b2:35:6a:5b:b1:d9:01:f5:71:ce:99:58:aa:03:9a:
         2d:fd:f1:ed:f5:75:af:4c:a1:49:4b:42:c2:cd:f7:27:41:f2:
         3d:44:0d:f1:7a:7f:d9:18:2f:29:88:75:53:ad:1f:54:61:1f:
         70:11:73:12:e4:a4:cd:0e:af:74:93:89:7b:98:94:fe:b1:f4:
         b8:5f:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----