Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File:                     UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier:          hMnFgQ8xS6A7xQxOOetLNRogLB6K805dPy47sv+455Q=
Subject key identifier:   6D:5A:32:7D:04:4E:F8:5D:E2:2B:87:44:04:90:9E:64:7C:CA:86:48
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer:       /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial:       01962F74F25D3B9C686F54B81E3EA85463C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number:          107E
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: 0S1CHcSZd4A2J5TC+m/4zU95TPkD2bq58qPMNOAJBgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f2:5d:3b:9c:68:6f:54:b8:1e:3e:a8:54:63:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=6d5a327d044ef85de22b874404909e647cca8648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:43:e0:d8:f7:6d:a4:cb:73:5b:6a:51:64:
                    7c:da:15:e2:5d:f6:ce:2e:df:53:ab:b8:79:b5:38:
                    17:25:85:28:fb:47:4f:d7:ad:48:96:61:e4:da:6d:
                    00:2a:79:91:d7:99:7c:0f:4b:88:6c:2e:f6:f7:56:
                    86:c9:78:e2:9b:aa:09:f9:b9:25:47:82:1e:2c:b0:
                    57:86:76:8d:95:1a:cb:a8:a4:19:b5:4a:11:12:e8:
                    96:c4:9e:3e:e9:9f:72:3d:b0:36:d3:cf:57:e6:b2:
                    e1:e4:02:68:77:a4:7d:b2:57:fc:5f:60:e4:c0:dc:
                    22:c2:d7:2b:18:a1:8e:bf:75:4b:c0:5e:49:9c:25:
                    3f:6e:2f:89:7b:2b:cd:2e:ed:47:46:8a:aa:0e:f5:
                    ca:39:34:eb:21:c2:ed:6c:23:b8:53:76:d6:c4:09:
                    54:fd:2e:3c:17:75:1c:14:06:d9:e4:1c:a7:c4:e3:
                    de:d7:4e:ce:d2:b0:75:fe:f8:b0:37:1d:32:e3:53:
                    14:45:fc:28:63:11:e1:2d:db:ec:d4:0f:4d:e4:35:
                    2d:cb:72:80:7c:33:a3:53:15:78:f4:e7:8a:21:d3:
                    ae:52:a6:67:fc:15:f6:f8:9d:ce:c1:ae:45:96:82:
                    c5:b1:31:75:0d:df:54:ce:0a:eb:f6:8b:ea:1c:b7:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:32:7D:04:4E:F8:5D:E2:2B:87:44:04:90:9E:64:7C:CA:86:48
            X509v3 Authority Key Identifier:
                keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:96:01:b0:49:92:d0:b3:c8:b4:f1:ab:7e:23:e1:17:32:
         44:46:d2:bd:bb:65:32:08:5d:2e:99:7e:6b:d4:7c:2e:71:dc:
         c2:82:83:86:58:6c:91:f9:48:e3:6c:d9:2a:09:38:51:e9:d9:
         e0:21:de:73:5d:fa:cf:05:ea:b6:80:ec:6b:5f:06:7b:31:4d:
         0c:92:b3:bb:ce:9d:fe:ab:60:d6:6d:b6:ab:cc:b1:ee:bb:93:
         4e:cc:9c:ed:f3:23:0c:eb:ad:43:6d:e8:43:4c:29:c3:a7:b5:
         1a:16:49:4f:64:e9:53:bf:43:dd:54:ee:f6:8d:d4:b0:a3:c4:
         24:38:f7:f8:db:09:63:70:43:e0:58:55:3e:6f:c5:91:27:17:
         65:21:ca:af:7b:a6:99:8f:e2:8f:20:09:8f:07:5c:8f:7d:fb:
         73:e1:b7:12:55:7b:82:c5:68:1e:3f:9a:be:f3:0c:c2:5e:ed:
         c1:4d:d4:f7:55:8a:16:92:7f:09:c8:96:8e:25:a5:52:6b:a5:
         7b:05:32:11:fb:1f:6f:ed:ab:61:80:5c:32:3b:e5:9d:dd:05:
         d3:18:18:75:59:e8:1a:0f:ea:d4:15:3d:4c:fc:d3:d7:8e:df:
         0b:14:83:42:48:aa:69:21:4e:1a:e4:a3:ac:ec:9b:04:bd:56:
         9f:05:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----