Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
File:                     OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft (raw, json)
Hash identifier:          60y8FT6KjZYjsxhtLTXyL6LWuUHwp79IQuTJcvxQid0=
Subject key identifier:   E0:01:D7:D5:D7:5A:A2:9F:6B:57:99:AA:9C:3B:06:FD:16:28:F4:D1
Authority key identifier: 3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48
Certificate issuer:       /CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
Certificate serial:       01962F74C95BE9936255B467F18427977282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
Manifest number:          0466
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl (hash: twKxFfwY5+/avDDxL5P5IOfIY6Ai88Ysbywccn27FlA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:5b:e9:93:62:55:b4:67:f1:84:27:97:72:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=e001d7d5d75aa29f6b5799aa9c3b06fd1628f4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:eb:75:69:da:66:a6:bb:ff:e8:71:42:a2:
                    f9:e0:43:cf:d5:e9:b9:ba:77:17:83:b1:bf:3e:03:
                    87:f0:42:20:eb:c2:27:bf:5e:23:a4:3e:f4:69:d8:
                    02:64:30:42:d4:09:ef:d4:c3:cc:98:89:f6:ae:18:
                    29:8a:e8:9e:81:f2:9d:77:27:e1:78:3b:06:34:47:
                    6c:58:b9:02:6f:02:02:58:d7:1b:f8:f8:b7:14:18:
                    3a:3d:f7:a4:a6:2e:ac:6e:0f:eb:bf:3b:82:e3:99:
                    16:06:fc:c5:55:27:e7:b8:56:c8:b2:4f:1c:af:de:
                    4e:ea:51:f8:4e:be:eb:f1:9f:96:6f:67:1b:9a:4f:
                    80:ad:b5:10:63:d9:a5:37:29:38:f9:76:ef:15:82:
                    4f:49:0b:32:a1:b8:45:f0:85:98:18:33:9c:28:6e:
                    cd:37:0c:24:29:1c:55:57:3d:d3:bf:83:20:e3:f6:
                    74:65:10:4b:e5:a4:2f:c0:d9:11:41:02:0f:a0:02:
                    26:14:b6:ad:08:45:49:f5:39:85:85:f7:2c:8c:14:
                    d0:f4:0c:40:6e:41:9a:25:11:c5:37:35:3c:6c:18:
                    bf:62:85:2a:f9:be:0b:42:31:c8:30:1c:b8:8e:52:
                    e7:a3:6d:7c:14:45:c9:64:2e:f8:74:54:6b:72:5a:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:D7:D5:D7:5A:A2:9F:6B:57:99:AA:9C:3B:06:FD:16:28:F4:D1
            X509v3 Authority Key Identifier:
                keyid:3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:34:26:18:21:63:92:99:2f:73:d6:8c:6d:e0:4c:71:e0:55:
         2f:eb:51:fe:1b:29:9a:e4:4e:5f:b7:c6:42:84:39:19:15:15:
         6f:e5:9d:16:97:fb:9f:b6:76:67:dc:a1:c4:42:de:f8:7f:be:
         78:14:23:45:cb:7d:db:e5:60:c4:2c:98:c8:47:b0:75:86:5a:
         9d:73:77:70:d6:a6:51:28:60:2a:54:7b:a8:20:1b:d8:ad:ee:
         5e:e2:04:a6:1e:0b:50:16:13:01:45:83:a6:36:45:b7:c0:42:
         fa:9f:dc:b7:7a:74:c9:b5:e3:7b:d4:8e:83:41:cc:89:8a:dc:
         45:d7:da:e2:35:3b:ea:66:68:9b:8c:0e:41:cf:9e:15:29:65:
         16:31:1f:eb:e1:39:71:81:1e:05:c2:74:b5:cb:d4:15:6d:5b:
         3e:d2:00:47:2f:fa:85:9c:9a:bf:6f:31:00:b1:fa:1f:87:15:
         dd:8b:8c:59:ef:e3:29:62:ae:c7:93:4c:04:a1:e4:a5:4e:ef:
         b5:16:cf:e4:e3:69:ce:42:fc:ca:ce:16:95:bf:6e:07:35:b8:
         20:7f:9e:dc:37:c9:d9:c6:6d:33:99:07:03:e0:d9:e0:b4:04:
         55:cd:4f:ab:84:9c:0c:9c:a1:b5:e9:8e:46:13:41:ca:49:6d:
         4f:a0:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----