Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File:                     syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier:          YSE4fzZj8AT0X4TeYCY5XfSmI9uxCGlHgR5Nfe9mcVI=
Subject key identifier:   2A:2B:E4:9D:EA:74:76:6A:FA:EA:E0:77:90:B8:96:A1:D6:FB:6F:C3
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer:       /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial:       01962E61C396045403FAE91C954FA6F10A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: +2Dx4F432u0H1rpd5GXy/EzYOHkcHKrs2CZFje9kMnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:96:04:54:03:fa:e9:1c:95:4f:a6:f1:0a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=2a2be49dea74766afaeae07790b896a1d6fb6fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:d0:9c:46:91:1d:3e:bb:1b:1a:2b:c3:9b:
                    1f:d0:44:41:ff:89:76:b4:d5:53:d0:79:09:c2:73:
                    5c:ec:b5:60:cc:e2:2d:20:83:d6:39:46:39:59:07:
                    8b:c7:0d:ce:6e:cb:ed:bd:fa:48:05:b3:12:7c:e9:
                    17:55:67:7a:6e:00:17:23:a7:2a:2c:81:e1:24:30:
                    73:85:0f:09:fa:90:ea:fd:3d:25:36:58:07:9d:7f:
                    9d:ac:37:20:7c:97:ed:92:6a:4a:15:63:bb:61:44:
                    4f:71:d2:2c:5c:ec:36:6b:5e:a0:92:5c:90:4b:2e:
                    0e:71:ec:7b:67:ca:25:90:d5:26:83:08:8d:95:2b:
                    2b:73:a9:1f:75:29:29:73:cd:d9:2c:6c:5d:cf:2b:
                    a5:26:3f:47:ee:8f:1b:07:f2:30:fb:24:2e:b7:67:
                    37:2c:e5:ef:0e:8e:d4:a5:39:fc:bb:f6:16:53:17:
                    0f:d4:d4:6c:23:68:dd:e1:b7:0f:cb:68:d3:61:c7:
                    60:f0:9b:f8:52:97:e5:7a:93:6f:07:80:fe:50:c5:
                    94:71:27:bc:56:75:e2:bc:73:26:aa:3f:b9:8d:32:
                    67:1e:c8:c2:71:40:67:cd:38:11:95:99:1d:a7:3d:
                    d1:42:16:60:59:dc:61:9b:d9:bc:0a:71:31:00:50:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2B:E4:9D:EA:74:76:6A:FA:EA:E0:77:90:B8:96:A1:D6:FB:6F:C3
            X509v3 Authority Key Identifier:
                keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:b9:bc:a7:0e:b3:29:b8:b0:9b:18:71:f3:f1:eb:44:3e:
         92:69:50:fc:9e:48:77:c7:61:bf:d7:74:52:2a:7e:3a:2a:38:
         f1:59:9a:8e:4e:46:7f:ad:b9:d1:54:d7:73:f1:85:3e:e1:9a:
         c5:66:dc:73:0f:57:9f:04:29:bf:b1:15:8f:9d:83:b1:38:c9:
         19:62:85:a0:d9:08:eb:88:68:6a:12:d8:ed:e5:dc:89:13:9e:
         44:2d:1d:50:f7:e0:78:82:26:8e:69:d7:f3:e1:47:82:ac:cd:
         cb:51:8b:ea:34:59:3b:c3:5b:c2:2b:2d:32:f0:06:a5:6c:5a:
         4b:e6:6a:20:57:d2:54:45:2a:1b:66:ca:cf:7c:8a:96:0a:1b:
         f4:fa:23:9a:57:39:b8:52:7c:15:fd:f3:55:06:3b:94:71:95:
         3c:8f:00:67:f6:68:f2:91:ef:2a:63:99:7e:7c:2c:9c:6d:e4:
         fe:b1:b5:cd:c5:c8:f1:d7:88:eb:6f:20:f3:bb:bc:be:54:63:
         94:4b:6b:a3:77:ce:f6:1b:05:9f:54:53:11:1e:d0:51:37:ec:
         47:19:74:48:52:30:63:5f:6b:96:eb:6d:79:50:03:9c:49:a3:
         5f:e8:04:81:0a:bd:7f:6f:9f:fd:c2:78:17:d9:bb:5e:e4:80:
         15:3f:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----