Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
File:                     s1IytLD6jIPU_4wSROhk67yt1os.mft (raw, json)
Hash identifier:          QiYGl+8rvDD+uzz+AUUNdokrr/9+KXfogXPz3V2VVv8=
Subject key identifier:   80:26:79:D9:C3:8A:47:A8:DC:86:46:64:4E:6E:FD:D3:D8:0E:F1:6B
Authority key identifier: B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
Certificate issuer:       /CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Certificate serial:       01962E99BEB3AFF8E68C839A055FF7905EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
Manifest number:          0F61
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: s1IytLD6jIPU_4wSROhk67yt1os.crl (hash: bqfTYeL4XXfVDF/bGbJx89EXCT9nmbyZ5a1YHDKyAI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:b3:af:f8:e6:8c:83:9a:05:5f:f7:90:5e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=802679d9c38a47a8dc8646644e6efdd3d80ef16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:91:92:0a:7d:2a:1b:a5:2b:df:fa:82:06:
                    22:45:e7:b5:a3:3b:76:34:33:f8:28:08:3f:b4:8a:
                    fa:3a:33:cf:e3:74:85:bc:c0:45:57:14:4c:59:b6:
                    98:b0:96:a2:e8:bb:84:74:96:78:16:a0:6b:fa:82:
                    46:9e:b5:be:e8:0c:73:43:15:f2:63:26:12:42:ef:
                    27:94:ea:d7:6a:8a:ae:74:b7:da:7b:f4:f6:60:a0:
                    2d:7a:16:31:31:ce:e6:c4:51:b2:00:bc:62:ed:f7:
                    5e:2e:90:67:10:f5:bf:58:17:8d:37:37:a0:88:43:
                    44:33:67:75:e1:8a:1c:f0:c9:6a:2a:92:00:50:60:
                    4c:57:f8:e3:43:0f:1c:d4:88:02:a6:81:fa:85:be:
                    d5:aa:ee:1a:8f:a4:d7:e8:97:9d:e8:91:93:29:36:
                    95:28:40:9c:fd:ef:ba:65:ae:d3:84:aa:cf:18:46:
                    ae:97:1e:84:8f:ab:1b:44:f1:f8:d7:5f:14:b5:97:
                    c9:f8:bb:e8:b7:a4:b3:8e:71:7b:4f:90:67:ef:d8:
                    73:37:20:f6:2c:05:ef:59:a1:e6:30:70:35:ef:30:
                    e1:b1:69:24:0c:ec:b8:e8:e8:8c:1c:d1:f8:c7:7f:
                    d7:c5:e0:7c:a3:7c:cc:5d:22:76:fa:4c:be:93:51:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:79:D9:C3:8A:47:A8:DC:86:46:64:4E:6E:FD:D3:D8:0E:F1:6B
            X509v3 Authority Key Identifier:
                keyid:B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:3d:d4:55:1d:0f:1f:70:0f:63:50:83:ee:27:17:df:4e:
         7e:20:11:6e:44:25:5b:fe:bf:e6:aa:25:8c:cf:09:bf:40:d0:
         27:38:9d:47:a7:32:12:af:9a:6d:9c:87:1b:41:f2:3d:24:b5:
         75:36:87:13:35:4f:1d:e2:51:db:d1:40:9e:bd:94:13:c8:9d:
         9a:4c:97:cf:5b:e7:b7:54:b1:01:14:4d:62:53:fd:86:90:3f:
         2a:ba:a8:3c:15:27:03:d9:3f:ed:6f:85:c8:be:91:da:f1:09:
         31:25:64:d9:0f:f2:d4:b4:24:0d:6c:90:a6:7e:81:d7:19:3b:
         8d:e1:4b:53:62:e2:de:e1:68:2e:95:17:72:27:1b:4b:f3:3c:
         de:c4:d5:18:f8:b6:bd:6e:4f:36:25:63:42:fc:66:52:20:9e:
         c3:b5:fe:c7:27:e3:af:e7:4b:64:01:3e:b4:67:b2:1e:19:11:
         ce:04:5b:51:a5:a8:0f:45:2f:61:c5:e6:92:4d:36:e9:d0:d5:
         aa:30:2b:c5:84:4f:16:56:47:a5:f0:5d:ff:d9:33:d1:a3:d3:
         dc:39:b7:0d:a2:fa:9a:cb:94:51:70:19:10:bc:81:7b:6a:28:
         99:8e:bc:8f:94:09:25:43:0f:bb:4c:10:7d:01:cd:80:e4:2c:
         5e:1a:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----