Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
File:                     r89alhpnpvrt_v2PKluD8mg3WYQ.mft (raw, json)
Hash identifier:          VtoQmXbpNMp1BNC6Tzjzw88QgSwJOf+D3jAgbA1PPz4=
Subject key identifier:   A8:B4:9D:7D:9C:C9:57:86:C5:9C:0B:96:4D:33:76:F9:6C:39:96:56
Authority key identifier: AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84
Certificate issuer:       /CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
Certificate serial:       01962F750AAB0BAE95BB1D9C28A9B306FA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
Manifest number:          015C
Signing time:             Sun 13 Apr 2025 14:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:01 +0000
Files and hashes:         1: r89alhpnpvrt_v2PKluD8mg3WYQ.crl (hash: 5vkIG632IaFg0/lYuI8/DfrP+iD2BUfKYedGKmoKrBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0a:ab:0b:ae:95:bb:1d:9c:28:a9:b3:06:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
        Validity
            Not Before: Apr 13 14:02:01 2025 GMT
            Not After : Apr 14 14:02:01 2025 GMT
        Subject: CN=a8b49d7d9cc95786c59c0b964d3376f96c399656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:e4:ef:d5:de:59:c2:08:45:e3:1d:99:03:
                    d3:0d:51:3c:88:cc:99:d4:54:b6:1d:56:6d:6f:f7:
                    35:0b:61:db:da:74:b7:71:03:f7:67:1b:58:17:f6:
                    d1:79:e7:6a:b6:d2:a3:e9:d1:8f:b3:91:37:23:d6:
                    2f:94:89:de:dc:c4:28:b9:6c:cb:0d:f7:ef:55:2e:
                    a9:77:0b:a7:53:06:4a:24:7c:4c:4c:f9:ca:6e:75:
                    81:05:c8:ad:17:4e:27:93:16:56:76:21:b5:0f:be:
                    16:a9:2f:4e:fe:7b:93:d7:f6:37:67:df:56:5b:3d:
                    b5:bb:50:64:0d:11:b1:24:5f:4b:14:3b:87:c5:99:
                    04:15:19:5c:7d:3b:4d:9f:fa:56:36:06:c2:39:bc:
                    ac:c9:32:2c:a5:8e:42:a7:2c:3d:7d:cb:72:a8:35:
                    f2:18:45:2d:91:f6:a4:19:70:90:39:96:e7:bd:eb:
                    e1:59:93:3d:b9:0f:1e:79:49:b7:fc:a4:8b:f5:54:
                    d4:bd:04:17:e1:3e:2a:5c:ff:bc:10:b7:ef:48:d1:
                    e6:aa:44:9c:c3:47:63:5c:18:c9:d6:9b:76:6a:15:
                    49:80:bf:bd:d0:b0:10:0a:94:8d:9b:68:a9:1a:ae:
                    0e:a1:f4:ec:33:32:95:ac:ea:19:f8:8a:95:ac:6e:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:9D:7D:9C:C9:57:86:C5:9C:0B:96:4D:33:76:F9:6C:39:96:56
            X509v3 Authority Key Identifier:
                keyid:AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:2e:8b:e4:9f:58:46:1f:a6:28:35:50:01:9c:72:e3:2c:
         48:23:87:60:b8:c7:a0:79:93:0e:2b:f1:88:08:a4:60:cd:7f:
         5d:98:51:26:e1:c3:37:2c:0a:35:44:0c:14:b2:39:63:c7:a1:
         ce:22:49:14:c5:93:95:b0:fb:f7:bd:33:70:eb:9b:9e:5b:65:
         d5:72:6b:a3:bc:c8:76:4a:45:7c:73:f0:a5:0e:76:7c:d8:b1:
         98:db:41:ed:0a:7c:91:a5:c1:4b:68:ff:f1:63:c7:a6:b2:c9:
         8a:24:b2:17:5e:24:c5:33:64:55:da:91:bd:03:0b:ac:36:c4:
         c8:8a:7b:66:27:6e:55:71:9c:9f:5d:77:4d:79:83:82:48:47:
         80:5b:3d:10:2a:8a:78:3d:c8:ab:5f:d0:27:8d:da:7f:16:e9:
         43:19:75:da:9b:7b:37:81:ed:ea:5b:3b:de:fa:56:6c:e8:ee:
         83:ce:5f:62:a3:32:c2:59:4a:93:8a:25:58:d5:53:29:73:b3:
         c8:6a:6d:4b:04:44:31:4d:57:e9:db:ac:e3:e0:21:ec:27:a4:
         94:91:8e:57:76:9e:c4:72:d5:30:b4:5d:8c:d7:cb:57:81:fc:
         b2:b7:31:56:cb:88:d8:d8:e0:19:1d:94:d1:25:4d:c2:36:4e:
         59:92:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----