Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File:                     aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier:          P8l4gdCtFzjOwK7G5vIylXtFbFsFa0Pk56QJQWBSgQM=
Subject key identifier:   38:E6:DC:03:0B:D7:6D:DA:30:86:77:E7:00:85:79:B9:96:E8:F9:20
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer:       /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial:       01962E98B4A32E0473B45045EB0AA411FD53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number:          088B
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: B4a2Jb4+j9J3C1fHjXUHSDsQfaGKC959+JyNg3BRE/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b4:a3:2e:04:73:b4:50:45:eb:0a:a4:11:fd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=38e6dc030bd76dda308677e7008579b996e8f920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:ce:a3:a9:21:48:41:d9:2f:c1:ef:8f:88:
                    2a:8f:d0:49:95:ba:66:fb:97:88:28:de:90:dc:d2:
                    80:a0:50:e1:87:c5:e8:fd:f6:7e:34:1f:08:62:12:
                    6c:39:89:f7:d6:9c:30:a0:d9:b6:05:35:0b:3b:71:
                    d1:c8:1b:78:f2:f7:d8:55:03:51:f8:c8:18:50:a8:
                    16:99:32:46:ac:48:75:56:76:46:3f:69:74:ab:1f:
                    da:e3:3c:9d:0a:77:3d:8a:ef:4b:fa:f6:5a:6e:2d:
                    e3:05:4f:f3:ae:b3:66:17:50:36:3d:7a:4a:1a:7c:
                    21:92:7c:f4:92:12:57:5a:f5:b0:4b:d1:58:12:45:
                    3e:46:ad:72:51:76:53:07:9c:67:1f:e9:e7:19:5b:
                    89:f1:14:39:64:1a:b4:0b:61:30:68:88:5a:f3:73:
                    b1:5a:b6:88:eb:79:7c:38:35:cd:c7:2b:19:59:a8:
                    a6:3d:ae:a5:62:9e:12:49:43:78:84:f9:f7:a4:9f:
                    3c:a4:28:60:98:13:b1:67:d0:ad:2d:db:02:c0:eb:
                    8f:58:44:ae:36:91:c2:b1:bd:70:69:02:09:4f:dd:
                    d5:ea:43:98:11:04:b6:08:f3:8d:42:33:a6:87:bd:
                    84:3f:19:f4:17:ee:24:5b:f1:16:fd:63:32:17:0c:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:DC:03:0B:D7:6D:DA:30:86:77:E7:00:85:79:B9:96:E8:F9:20
            X509v3 Authority Key Identifier:
                keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:8e:a0:5a:df:1c:3a:af:8f:f3:4e:0f:93:6a:f4:73:17:
         ac:d3:ac:1e:82:32:06:50:95:52:5e:94:fd:48:ee:0d:08:8a:
         bb:d2:cd:52:92:7f:df:2d:f9:ea:5d:7e:f6:12:39:b8:7d:f5:
         a6:2e:18:ce:9c:fe:18:4f:33:ee:8e:50:2c:e3:c0:75:1e:2f:
         bc:ce:26:e8:5c:52:8f:9b:1a:6a:1b:4c:42:d8:62:13:86:32:
         22:b7:6c:7a:02:39:f4:2c:45:d7:1d:33:5e:ad:ba:32:bb:16:
         6a:00:bd:cc:50:2a:31:e5:74:5a:84:e4:f8:28:f1:a9:8b:8d:
         d5:2b:b1:b7:e9:8b:7d:9f:8b:9f:2f:8e:1e:c0:b0:1b:81:b4:
         57:4c:70:c3:c5:f4:3c:dc:75:af:d9:90:98:ea:bb:85:e6:f5:
         05:d7:a4:40:1e:58:c9:0f:42:f2:6d:60:18:9d:9b:9d:7b:8e:
         6c:bd:09:a6:66:5e:6a:d7:5b:9e:66:10:74:f9:51:d8:b9:6d:
         24:63:5c:86:65:f9:7e:6d:fb:f9:25:ae:98:2d:94:14:79:74:
         b7:ea:4c:16:eb:93:ba:b4:90:c5:25:b5:73:1a:5e:ca:5c:65:
         80:09:a9:94:e2:06:c6:9a:a0:b8:19:d7:f4:d2:f9:2d:4b:92:
         cb:0c:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----