Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File:                     1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier:          jNhKB/WXKQqwX5zZCmpcQnuBnbQldqVWZT7JAz0pZ94=
Subject key identifier:   B2:6C:D2:E8:88:8D:2F:A1:E9:96:35:6F:A6:40:39:89:B5:36:B0:1C
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer:       /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial:       01962E9948DE8FAB183A6EB7A91645669F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number:          0C1F
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: e9lWuQfmAaX6YSWqGpF7rV7j0PANJbDcpeUjMuKW2z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:de:8f:ab:18:3a:6e:b7:a9:16:45:66:9f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=b26cd2e8888d2fa1e996356fa6403989b536b01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:0c:02:65:d9:c6:3a:d2:9a:23:a1:de:cd:
                    c2:40:36:d9:2d:bf:04:d4:3a:27:8a:de:a4:36:d4:
                    29:a9:1f:97:4e:f4:eb:8a:4c:a5:89:f1:f6:13:d9:
                    cc:c5:fc:5d:c7:59:bd:27:1b:cd:ba:3c:5f:02:ec:
                    51:cc:7d:09:66:32:42:ea:60:3e:78:84:b2:ab:57:
                    b6:60:d8:2a:c0:a3:b7:62:ca:a3:33:88:e8:91:a2:
                    dc:c7:d0:66:c0:3f:67:6e:3b:00:8b:bd:7a:87:57:
                    d6:93:5c:8e:2d:f7:d9:7d:66:c6:40:cf:cd:15:ef:
                    31:13:55:dc:8a:24:13:49:61:65:55:e7:cb:b5:4c:
                    1d:af:4a:ed:39:7b:d5:c2:96:82:e9:df:57:de:48:
                    d0:b8:4b:45:b2:89:18:87:d4:46:04:bb:0f:20:1f:
                    12:42:a4:56:1b:b9:3b:ed:52:4e:fe:df:af:dc:36:
                    7f:c4:12:9d:6e:8c:e4:46:3e:79:9d:d9:35:7e:c2:
                    5f:56:cc:30:6a:44:d2:bf:de:72:39:c5:68:0e:73:
                    02:ba:56:b4:0e:28:e1:15:d0:46:8a:e1:e6:e1:15:
                    6d:39:80:8b:f2:16:4d:1c:11:29:1f:32:0c:12:67:
                    19:97:96:df:17:3c:90:e8:3d:82:ed:54:1e:bc:e8:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6C:D2:E8:88:8D:2F:A1:E9:96:35:6F:A6:40:39:89:B5:36:B0:1C
            X509v3 Authority Key Identifier:
                keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:b0:01:db:01:e5:6f:24:4a:d6:76:01:bd:90:84:97:38:
         c4:bb:6b:1b:f5:f6:7e:20:b5:f3:ce:08:1c:0a:76:df:9f:5a:
         29:5b:2e:b9:19:da:db:6e:6b:35:d1:32:6c:2a:97:fb:da:64:
         3c:ee:d1:18:f7:fc:2a:f4:dd:e3:09:b9:2b:37:ba:a0:2f:2c:
         40:a3:2a:90:f3:64:0f:9a:2f:4f:a1:e0:04:03:c5:62:14:41:
         52:07:26:e7:95:37:79:e4:22:90:f4:7e:99:44:d4:db:11:ab:
         23:74:ff:10:ab:5f:b3:24:ed:8b:18:6f:8f:7d:42:4c:19:4e:
         36:31:7e:a8:59:37:e2:d0:60:52:10:b3:3a:b5:d0:13:2e:a2:
         95:7e:17:e4:f0:51:50:9b:49:18:7c:4b:97:34:fb:68:87:d3:
         f2:fa:f8:a5:c0:ed:3a:65:45:6b:c8:03:2e:62:6e:69:48:67:
         95:e1:c5:87:47:c1:6b:0d:41:fc:ce:de:ee:b9:6e:de:cd:94:
         88:92:02:55:4f:bc:e4:ac:66:dd:62:cc:96:bb:1b:1f:2f:38:
         39:5c:4b:1d:5d:e4:27:73:28:35:66:db:5e:f6:51:e3:ce:ee:
         b6:fc:39:d9:42:53:fb:a0:e3:a2:f7:b1:4c:fa:d8:18:2c:5e:
         f4:a5:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----