Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File:                     obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier:          q+A/jIX5fYR6CIdy7G3uZ5JHXx3ZutTOvJLAMs3Tg+w=
Subject key identifier:   FF:6D:EC:AF:2A:79:D8:7F:13:23:0E:95:9E:80:9F:9A:FE:7D:A6:AE
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       01962F742320543F9788879D7C2CEBCE58BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number:          04FF
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: Y1Scs17A/71Bqqpz95qI01JqnUp+HC74hK5thkVskVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:23:20:54:3f:97:88:87:9d:7c:2c:eb:ce:58:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=ff6decaf2a79d87f13230e959e809f9afe7da6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:3f:8b:56:4f:73:22:5c:78:e3:7a:5d:97:
                    82:d5:15:aa:ed:0d:06:d0:00:28:a3:07:9d:94:96:
                    30:b0:44:c5:6a:84:98:df:c6:7b:10:0c:bb:96:90:
                    3d:02:78:fe:aa:b9:17:1f:6c:f2:ef:67:60:e5:83:
                    d4:0c:68:dd:57:77:2f:23:7e:a0:55:b1:67:8f:cb:
                    42:36:49:5d:03:0c:46:b0:7f:fd:e2:7c:ea:a4:83:
                    38:9b:ab:00:45:da:81:8a:7f:4d:5f:2c:eb:17:63:
                    5c:ec:6e:6d:f4:2a:61:4d:e8:f2:97:df:b7:7e:e5:
                    32:14:d6:48:64:74:6a:f2:82:7f:fa:52:f2:c1:c7:
                    d6:52:b3:da:7a:5a:e1:5b:86:ee:d6:d0:b2:63:d7:
                    ce:50:b3:b9:e1:2c:4d:fb:b8:b6:80:14:5d:52:70:
                    61:49:6c:cc:da:b4:91:38:b2:7d:e7:38:8b:78:03:
                    3a:84:0c:8d:58:cd:16:33:24:e4:73:f2:60:eb:26:
                    c6:28:87:ca:69:cf:25:03:0d:3e:ca:d5:2a:9c:eb:
                    4e:3c:db:bb:a5:c4:78:1b:99:4f:1d:c5:39:2a:bb:
                    6d:5e:db:ea:3d:0d:ab:04:39:bd:24:66:f1:ea:06:
                    ca:79:03:3b:af:44:14:ac:3a:d9:db:8d:9a:28:fe:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:EC:AF:2A:79:D8:7F:13:23:0E:95:9E:80:9F:9A:FE:7D:A6:AE
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:96:fe:98:7f:e7:70:cb:ce:25:71:74:15:89:f7:32:14:
         19:cc:e3:04:dc:8d:64:ac:91:cf:f5:b5:cc:1c:e7:e5:87:97:
         9d:ca:5c:cb:f5:92:a6:ef:e4:d8:dc:ab:54:3c:6f:2d:95:b0:
         dd:d4:00:45:ac:ec:54:4f:50:a5:79:e2:1d:b0:3b:90:33:c0:
         ba:5f:2c:70:f2:b5:26:9d:1e:9c:4b:57:13:97:96:70:74:b0:
         dc:83:8e:d3:e7:32:86:42:4e:d7:8a:d7:9a:dd:6e:dc:a0:e8:
         c6:73:cd:c5:f7:50:e4:f3:1c:d4:e5:7b:9e:71:b1:c9:63:7f:
         70:5d:32:d3:62:95:df:0b:ce:34:89:29:3d:8b:50:56:02:99:
         ef:67:db:57:1b:d9:e2:b1:89:1a:c5:61:2e:af:2d:02:a9:1c:
         fc:67:e7:01:28:dd:12:46:55:9f:7f:0f:4b:86:5a:f5:ff:2f:
         23:ba:48:5c:34:4f:ca:22:41:d8:c0:4a:60:92:11:dd:4a:ae:
         57:07:14:59:d8:e3:f2:ab:9d:1f:16:5f:68:81:67:6e:e0:9f:
         cd:8d:e2:a0:06:e0:2d:30:ee:47:34:db:91:4e:76:30:63:82:
         16:c5:4e:40:90:b7:68:a8:6a:e5:de:e4:bb:f3:8b:16:95:81:
         67:f0:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----