Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File:                     12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier:          X/de1abFpM+ZU9mQRPUAsxfGLwpm1PBv6tCAcI31j0o=
Subject key identifier:   78:7B:97:89:95:F6:21:2F:68:BF:06:22:68:3D:72:4B:64:8B:A4:16
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer:       /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial:       01962FAB1538BD31B1B52B760EBDE196038F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: 3scmaxgL0izHo4KLaYQoJs+iH0jPiuqeE9oVMqPzaWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:38:bd:31:b1:b5:2b:76:0e:bd:e1:96:03:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=787b978995f6212f68bf0622683d724b648ba416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:7d:18:3a:26:d6:ab:ed:81:f9:bd:16:55:
                    cb:01:85:35:b1:85:e1:4b:22:aa:2a:09:48:88:f6:
                    51:19:dc:15:ca:f3:1f:23:c1:99:5b:e6:76:13:ac:
                    5f:3e:1c:f0:ab:3c:67:e3:6a:37:58:97:1f:77:30:
                    76:d3:ff:09:16:37:2e:12:54:bb:7d:d5:ff:c8:dc:
                    d9:28:4b:67:ab:07:af:7b:45:20:2a:9c:d5:e9:30:
                    9b:6b:04:92:81:17:19:16:28:bd:58:bf:f0:ab:74:
                    a0:b9:45:68:12:79:82:8f:1a:74:5a:97:eb:20:b3:
                    8a:8a:61:4d:53:0c:01:1e:14:2d:37:91:66:ec:0c:
                    b9:aa:2f:34:07:1b:db:e3:3a:2e:f6:a0:a2:67:2b:
                    da:36:8d:8f:39:24:99:41:9f:32:04:df:71:d5:70:
                    d7:6e:dc:58:37:57:95:99:78:d7:b2:9a:a3:cf:19:
                    52:20:4a:9d:6a:93:d3:2e:82:66:51:ac:c5:a8:4b:
                    db:c5:e1:a2:02:6d:3d:db:7c:56:d3:6a:af:7c:5b:
                    4f:b9:4d:6f:c6:06:31:82:4c:9f:2c:54:59:14:77:
                    01:5f:aa:ac:81:1f:1d:cf:b6:93:88:b1:96:0c:7b:
                    35:dc:ec:4d:b3:ae:48:7b:95:49:79:26:f7:b9:c2:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:97:89:95:F6:21:2F:68:BF:06:22:68:3D:72:4B:64:8B:A4:16
            X509v3 Authority Key Identifier:
                keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:88:63:d1:ec:d3:3b:36:96:f8:bd:b5:c6:5c:54:2d:83:29:
         62:06:74:0d:92:02:c7:fe:7e:ed:bf:8e:16:8c:cd:84:91:4f:
         f7:d8:d4:58:52:71:67:92:5c:64:dd:10:d0:b9:61:3b:3a:3b:
         b4:c5:a3:c2:29:cd:b9:2e:78:5c:93:86:33:8b:72:4a:d8:42:
         7b:b5:0e:44:9b:47:f7:40:b2:8a:ac:0c:42:51:06:41:7c:fe:
         55:ee:7c:6a:fb:97:c7:76:c2:54:f7:12:14:62:61:95:ac:dd:
         c9:ac:39:30:0a:1b:3d:04:4f:82:9d:e6:7f:4c:7a:a0:9f:1d:
         6a:0b:16:d0:ec:fc:3b:8c:d3:2a:16:aa:7d:b8:96:5a:e9:50:
         6f:0c:3b:31:b0:b8:1d:6a:ae:15:85:4d:5a:2c:6f:51:49:a7:
         f8:40:87:bb:58:5c:f2:af:a9:5b:18:d1:97:6f:01:e1:67:92:
         4b:eb:39:aa:eb:01:e2:1a:52:fd:f4:4f:ad:a9:62:63:5c:8c:
         f2:34:dc:22:d5:54:3b:89:0b:53:50:09:1a:1f:79:54:a9:38:
         26:86:8b:84:e3:3e:f8:8e:ab:5f:12:4b:e0:0b:f4:de:d3:06:
         71:79:f2:0f:57:b6:ca:ee:42:28:80:6d:28:a4:75:02:9f:ff:
         4b:84:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----