Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          +QV3U/YdgZI54f3FluwHhyCMmHamDj6YeduMfTM+CbU=
Subject key identifier:   9D:59:27:F9:3F:28:31:F0:9F:52:34:A2:42:E0:5A:D0:87:3E:6D:EF
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       01962F3D3D5CA819D668C1DF00A38E13123A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          03D7
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: qwBHhlAoCMjMYBJRgeiUn8qUv1zJTNfSoQGJPrzhiBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3d:5c:a8:19:d6:68:c1:df:00:a3:8e:13:12:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=9d5927f93f2831f09f5234a242e05ad0873e6def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:f6:21:8b:35:46:e8:28:6c:0a:77:c2:75:
                    60:b6:28:42:bc:5c:fb:dd:61:8e:7b:24:ff:8b:23:
                    76:e7:67:60:1e:90:ef:0c:9d:ee:17:ef:0b:9f:a1:
                    40:58:6f:76:82:64:2a:33:ae:1c:c9:95:2a:8e:ca:
                    31:14:ca:12:7f:a9:4e:8d:0a:9e:fd:c4:09:07:6e:
                    a6:25:57:f8:f1:57:94:c6:9f:b0:2a:7a:75:e9:3e:
                    e3:d8:b2:0f:f4:fb:1f:dd:2a:49:6b:17:71:51:61:
                    36:ab:d9:f4:e1:1c:81:d2:92:03:28:9d:a9:78:ea:
                    96:cc:c7:d2:4e:c5:84:53:5f:4f:ae:88:d9:2b:5c:
                    cc:5d:60:8a:de:ad:bb:ad:71:7d:ef:dd:8e:3b:35:
                    27:c3:f2:1a:8f:c5:e2:d1:ab:c6:08:22:8b:aa:60:
                    3d:97:d0:e2:fd:70:43:cb:3c:6b:84:b5:cb:89:2c:
                    17:8c:2a:d3:ed:ac:6c:26:1e:b0:f1:bf:c9:1a:f5:
                    44:b7:37:d3:e7:bd:6b:40:46:18:48:01:1b:56:8f:
                    da:c3:4f:bf:3a:48:37:61:ae:e4:75:75:d8:50:a4:
                    d9:b5:71:f4:0f:44:b4:b3:a6:3e:95:bf:02:ea:1c:
                    a9:bf:71:e6:8a:9f:22:d7:9e:81:b5:16:31:e1:45:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:27:F9:3F:28:31:F0:9F:52:34:A2:42:E0:5A:D0:87:3E:6D:EF
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:0b:d9:ec:57:97:07:32:49:00:9f:c5:8b:66:66:9d:5e:
         14:d0:37:77:e1:46:90:c4:32:da:48:ec:c8:06:41:cb:88:01:
         90:2e:e0:15:65:ab:b6:43:3c:ff:39:b4:f7:2b:84:32:4a:63:
         76:68:03:39:26:40:31:08:1f:1d:40:95:58:be:2a:70:d7:56:
         dc:fe:86:32:0a:94:94:0c:a9:8f:82:a2:63:f2:18:d0:bd:e1:
         7d:d2:04:70:4a:9c:f6:1c:9f:9a:d3:65:de:6e:85:b6:3e:85:
         e8:c5:43:28:6e:c3:9f:f8:cb:3c:1b:20:ed:9e:1d:96:f5:bb:
         41:3b:07:d1:99:22:e5:0f:81:1f:c0:b4:d2:70:0e:db:86:db:
         29:7f:a5:e6:9c:4b:93:3c:1d:71:8c:bc:db:37:2d:a9:03:61:
         37:eb:be:c2:79:53:4f:1b:78:3f:44:94:fe:20:db:29:38:8c:
         51:53:2c:cd:af:fe:ae:d8:48:51:de:ec:bc:74:00:da:06:36:
         7f:f2:ad:c6:24:f5:35:e3:ce:55:2a:d0:e2:1f:11:73:15:13:
         dc:b5:75:14:39:05:3c:f6:9f:92:0d:65:dd:c6:20:51:6b:3a:
         04:65:be:21:82:ae:a0:ca:6d:d0:1a:47:93:de:21:0f:2b:ff:
         94:d0:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----