Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
File:                     r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft (raw, json)
Hash identifier:          3lGO+NQf2hrvtOWnmsgeX3V8+nDMQjPPhd6cNQRdR3Y=
Subject key identifier:   4E:D2:48:AB:45:6D:DE:81:D1:A5:E4:F7:73:0F:98:B9:14:7E:1D:C7
Authority key identifier: AF:82:A0:97:A2:8A:6B:6A:69:9D:8D:6A:BE:4D:CB:95:BB:19:83:30
Certificate issuer:       /CN=af82a097a28a6b6a699d8d6abe4dcb95bb198330
Certificate serial:       01962E98B171BF484C1AEB6504D98ED205A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
Manifest number:          0D7F
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: r4Kgl6KKa2ppnY1qvk3LlbsZgzA.crl (hash: MwU7kpvMcWGcSk2tI0Xr3+Jeq8Dw+cV2e+FMFNJszms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:71:bf:48:4c:1a:eb:65:04:d9:8e:d2:05:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af82a097a28a6b6a699d8d6abe4dcb95bb198330
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=4ed248ab456dde81d1a5e4f7730f98b9147e1dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:50:1f:aa:df:4a:dd:9e:17:3d:98:ee:0b:
                    e8:4a:41:60:88:ca:4c:b0:88:ff:dd:34:04:21:89:
                    06:e1:b1:8f:d0:d4:4f:5d:e1:ec:c6:ab:b8:f3:71:
                    99:f8:7c:8c:27:fe:a8:2a:35:8b:e7:92:c8:cc:21:
                    e0:7b:69:d9:77:3c:98:16:17:b7:30:d0:38:b7:e4:
                    0f:5d:81:c0:80:f1:56:5b:43:99:ee:43:4e:cd:4b:
                    f8:0b:81:a8:b6:cc:9b:c5:aa:4d:9a:13:29:8e:ee:
                    c1:1e:97:d1:e3:ea:d1:4d:3a:1f:63:0e:79:92:ec:
                    9e:2e:e4:c4:d6:c4:30:0f:e2:07:ce:4f:33:fb:66:
                    eb:42:11:ff:56:4b:57:82:fe:d6:5b:de:89:e4:08:
                    48:27:31:07:d2:5f:66:4a:a0:27:db:ce:48:81:55:
                    ab:54:34:4b:31:ae:3d:2d:de:9d:17:ef:bd:2f:cd:
                    f6:5c:32:d6:0b:54:ad:4b:e5:03:fc:87:a2:e8:77:
                    11:74:aa:c9:88:8e:fa:f3:07:58:bd:84:e2:a9:35:
                    06:52:6d:7d:1e:3f:7b:a8:ac:bc:95:2b:7a:26:eb:
                    b6:6e:7c:ab:f3:68:89:6a:90:72:9a:0d:a1:0f:d9:
                    51:66:14:43:07:e4:46:ac:fe:0a:e0:7d:b8:fa:fe:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:48:AB:45:6D:DE:81:D1:A5:E4:F7:73:0F:98:B9:14:7E:1D:C7
            X509v3 Authority Key Identifier:
                keyid:AF:82:A0:97:A2:8A:6B:6A:69:9D:8D:6A:BE:4D:CB:95:BB:19:83:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:88:03:57:03:c1:89:60:87:56:09:89:e2:9a:a1:28:f5:
         42:6d:72:af:58:d2:56:36:75:9d:d1:3d:d3:a9:ce:ab:da:c7:
         74:8b:2b:49:4b:70:43:df:aa:14:c7:d9:b3:0f:c3:ab:67:f9:
         05:76:1b:4a:3c:c4:ec:ff:95:34:9f:d1:af:b6:bc:eb:e5:ae:
         c3:aa:67:99:51:32:9d:5b:ea:f7:0d:7d:08:48:fd:84:77:bc:
         9e:94:96:f9:74:a5:fd:d8:a6:3c:39:95:d4:62:2e:92:b6:22:
         53:97:2d:1c:7e:cb:68:50:26:2f:af:a3:1a:fd:e5:43:6d:51:
         fe:0c:9a:a4:18:3b:b1:08:b9:84:b9:d8:63:a9:0c:28:47:a5:
         6c:3e:b3:c9:34:c7:68:72:ab:49:1a:60:c9:3a:17:c9:4e:9f:
         c6:ea:81:ce:f6:c6:18:26:59:a9:14:29:ba:17:3a:15:c3:25:
         41:36:5c:a4:56:7f:bd:77:55:6d:31:af:02:35:7a:86:11:84:
         2a:09:1e:85:c0:35:6d:1b:9a:7d:08:be:5f:5d:bf:24:db:77:
         60:1c:4d:29:65:6d:5a:2e:ec:59:e3:d4:6a:86:a0:b2:77:32:
         fa:05:1b:fe:8b:04:1c:eb:5d:84:c9:a6:47:50:e7:d1:0e:a8:
         be:aa:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----