Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File:                     STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier:          AHmzBYGDtsto3jKvynojEjPazBMbYAqnGUNBBAqXYN4=
Subject key identifier:   93:1F:94:BB:92:FD:49:37:4F:AC:1C:4A:C2:EB:C4:97:16:F4:92:99
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer:       /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial:       01962E998682633A9D12877072500589BD2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number:          03AC
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: 0NYxcPbb0N7cstO/qLngbzLGUlLo5Eps/ZpRjDLVCHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:86:82:63:3a:9d:12:87:70:72:50:05:89:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=931f94bb92fd49374fac1c4ac2ebc49716f49299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:c6:1b:1d:0c:55:18:e0:14:f9:26:c9:ee:
                    e5:50:62:db:23:fe:23:dd:d5:b5:fc:c5:b9:14:9c:
                    95:8c:58:3e:d5:11:e1:90:b9:85:1b:36:aa:20:c4:
                    a1:19:d2:1f:91:04:20:93:80:82:02:13:8f:1e:7f:
                    85:2b:c7:59:52:e8:c0:d9:e4:87:c7:29:57:34:73:
                    f7:2f:cb:40:fd:c8:e3:73:93:40:80:cd:8c:eb:f7:
                    fb:f9:1d:f7:ce:03:7e:f2:dd:55:c9:73:06:fa:12:
                    27:ff:47:e3:01:dc:56:06:19:78:77:f5:96:23:fc:
                    4a:75:6a:32:3d:2e:8c:56:8a:6d:05:0e:f7:32:1f:
                    a2:a2:2a:fe:9e:2f:44:82:c2:5d:64:e5:23:6b:a2:
                    f3:e1:db:8c:d1:17:0d:f1:4e:5e:04:f8:b2:5b:0a:
                    22:9c:3c:11:1b:95:99:5d:e2:64:7f:7c:84:f1:5c:
                    ac:c6:10:a6:9c:b8:2a:5b:94:5b:f8:f6:a0:83:2b:
                    77:5e:69:14:94:81:f7:af:05:57:ac:0f:a5:a5:f7:
                    5a:16:65:de:77:63:0f:1c:d6:cd:d4:a6:42:1f:ea:
                    cb:11:f1:fd:e6:91:0e:e9:cd:48:b2:65:c5:66:97:
                    01:ec:cb:2d:46:60:7c:6a:ad:f0:f2:15:91:eb:7f:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1F:94:BB:92:FD:49:37:4F:AC:1C:4A:C2:EB:C4:97:16:F4:92:99
            X509v3 Authority Key Identifier:
                keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:8f:13:68:da:27:66:e2:c9:d0:19:7e:20:1e:1c:ac:a0:
         4e:81:26:ec:26:a8:8b:3e:75:4d:af:81:39:85:81:ea:ce:d1:
         87:19:1a:90:8c:bb:f5:73:ab:46:c8:f4:a4:52:eb:ee:ac:d2:
         69:54:52:89:6d:55:72:de:cc:2f:52:32:c7:bb:fd:e2:79:c4:
         b9:52:32:6a:f5:2a:fc:d9:3d:7e:17:6c:18:85:2f:d5:a9:22:
         b3:45:b2:58:c6:85:72:c2:be:d5:b4:f8:c6:fc:62:bd:0a:ed:
         fc:ae:7e:89:e8:23:ab:bd:7d:3c:c6:78:9c:ab:d1:39:a7:0a:
         6e:f8:09:6b:b7:f4:93:31:95:5e:24:e9:6f:cb:b8:cb:50:7c:
         a7:15:f6:c0:86:1e:b9:33:59:7f:ed:ef:f3:7f:29:d0:16:e3:
         fc:96:8a:50:d3:60:75:ef:0a:db:8f:3b:4c:16:75:09:68:c8:
         2e:8e:0e:18:ab:99:16:74:c3:a9:32:04:44:a8:73:06:59:15:
         0c:ec:52:21:20:92:47:27:0c:51:3f:7f:8e:ca:0c:49:49:a9:
         92:28:cb:db:aa:6a:d5:c0:29:5a:b0:68:03:48:bf:75:8e:7e:
         f1:e6:fa:41:98:dd:86:d1:6e:b9:3c:f1:2c:41:3d:e0:7b:48:
         1a:8b:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----