Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File:                     1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier:          2hCXwVQpAcALv42Aly2kkeBjvAeeFC843xgF+3fHy8E=
Subject key identifier:   63:71:FD:D5:E5:77:2E:CA:C9:B0:76:B6:17:34:FA:EC:BB:C3:08:26
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer:       /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial:       01962E99621E9B3E704FCECFCE187C5BCFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number:          0BDD
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: s9t9RWMF9/SBuKqfnMGC2MG118/OjSyEZR8U4UXQOfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:1e:9b:3e:70:4f:ce:cf:ce:18:7c:5b:cf:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=6371fdd5e5772ecac9b076b61734faecbbc30826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:a2:75:88:0e:7e:7b:ae:12:07:f0:6a:af:
                    f7:de:39:95:20:2d:d3:35:48:d2:42:00:1b:e9:98:
                    fc:82:75:ae:d7:12:6a:a7:a3:31:df:59:e2:b3:64:
                    ea:ad:ee:a1:19:d7:1f:f4:ed:d4:d5:59:91:16:6f:
                    69:f8:ee:ef:94:ee:b5:0f:39:40:5d:12:bd:c1:c8:
                    fc:c3:d9:20:34:f2:71:3a:0c:c0:14:f8:64:f3:f0:
                    61:49:03:c8:a9:14:bf:0e:8f:f6:41:95:10:b4:5d:
                    ea:d6:8e:13:7c:2c:0e:d5:4b:1e:c0:21:46:42:9b:
                    15:b5:ce:18:2e:93:e3:17:06:79:46:8c:21:fd:73:
                    7c:83:79:44:4a:39:c7:bf:8b:38:8a:68:84:c8:52:
                    8a:17:80:ce:30:88:5e:c3:4c:de:26:a6:1c:6b:cf:
                    d7:38:59:d4:65:cd:11:a8:1d:d1:26:c3:c3:1a:66:
                    15:20:c2:9b:e2:94:e7:5f:09:56:e1:44:e3:74:ca:
                    09:df:43:4e:42:bd:af:d2:b2:d6:ed:7b:b9:bc:89:
                    3a:cf:2a:fe:c7:72:b0:0d:40:b0:53:da:4c:31:70:
                    da:f0:92:f0:26:4a:44:52:42:a1:b1:77:dd:7c:7c:
                    5f:2e:30:5c:e1:de:4f:89:c1:2c:b8:df:26:38:e2:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:FD:D5:E5:77:2E:CA:C9:B0:76:B6:17:34:FA:EC:BB:C3:08:26
            X509v3 Authority Key Identifier:
                keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:7c:58:c2:60:cb:18:e3:77:71:10:ff:4d:ee:64:5a:9d:
         1d:c8:67:1b:cf:23:26:cc:4d:06:72:33:b6:d2:45:c3:ee:d3:
         46:e8:33:4f:9d:c0:16:80:8f:54:e2:6a:4a:ad:ec:31:58:00:
         b2:ca:36:29:61:69:db:fb:89:d8:12:b6:03:70:56:ab:97:15:
         c0:27:fe:ed:3c:fa:01:9e:68:47:0c:39:33:75:e6:9e:e2:9c:
         98:a6:ef:42:5b:c1:9f:55:94:17:80:4e:e7:8a:30:2a:e7:44:
         19:6a:66:e2:5c:ff:d0:63:e4:95:88:e3:d5:55:65:71:18:1f:
         b1:b3:99:9d:02:32:a6:ac:f7:0f:68:9c:4e:d7:f3:92:a3:5f:
         4b:11:d1:ce:1b:93:60:d3:ae:80:cc:67:df:89:e0:4e:bd:26:
         db:8e:ea:aa:e4:b5:e5:af:89:6d:09:a2:10:f6:fe:42:7a:bb:
         fd:17:10:77:d0:a5:2d:55:f2:d5:28:18:d3:f3:4e:2f:48:83:
         2c:58:b8:31:34:17:b9:7a:06:ba:58:74:24:7e:fc:12:29:84:
         c7:d1:c8:85:b8:71:92:ef:d3:0e:de:49:ec:1b:6b:44:9d:7a:
         71:6e:6d:3c:ce:d4:92:59:e2:80:33:76:86:9f:23:c8:38:64:
         6b:b7:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----