Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File:                     UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier:          tSJRB+s7AdA1yKKt5yInnJQsKYzxHR6i+3PELSVG38o=
Subject key identifier:   F4:D2:3E:36:5B:03:D0:BE:26:11:E6:41:70:F7:DE:FD:89:0E:72:C5
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer:       /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial:       01962F0660BC99A1AF9055C79F0E6A02C7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number:          0598
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: s61xZCNgrgkWToYNJ8oB/PAy8+bMKLnVdl4s/mzttvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:bc:99:a1:af:90:55:c7:9f:0e:6a:02:c7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=f4d23e365b03d0be2611e64170f7defd890e72c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:c8:3c:40:78:56:90:78:10:a4:2a:77:fb:
                    fd:e3:48:88:69:2d:2d:6b:ec:43:cc:64:28:ec:7a:
                    7b:f7:7f:71:ca:0a:53:e9:c8:c2:3f:3d:06:41:37:
                    10:88:cf:16:d6:4f:eb:12:59:63:c9:c2:ee:4b:0e:
                    5a:47:df:fe:8d:e9:bb:db:bb:93:0d:2e:75:e2:a7:
                    8f:34:ac:47:d8:2f:b4:b8:77:72:25:3b:d7:c5:14:
                    5e:ec:c4:6b:3d:bc:2c:17:52:65:a1:5b:54:63:3d:
                    4a:e8:85:f7:7c:cd:c1:58:fa:cf:98:0d:89:8a:c0:
                    8a:f3:23:b8:91:75:4b:6b:29:85:9a:2d:01:b2:3b:
                    e7:ba:b2:6d:34:a1:4c:ba:13:6d:1d:47:a5:3e:d3:
                    d6:20:b1:99:d0:a3:4e:96:98:f1:35:0f:30:5f:f7:
                    3e:d3:5f:de:df:51:d3:5c:a7:7f:3c:c3:da:32:e7:
                    09:94:76:4d:04:ad:a2:fa:fa:31:45:5a:b4:6e:51:
                    a7:5a:64:ff:a9:26:c3:7f:d6:30:0e:98:3f:a4:93:
                    9b:12:09:09:45:62:f9:f7:15:32:61:50:b5:bf:ea:
                    3f:c5:41:1d:ca:d9:61:6e:27:fb:6b:c7:3d:7f:39:
                    c7:02:09:b5:ad:46:6f:d7:e2:73:e4:c7:20:08:58:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:3E:36:5B:03:D0:BE:26:11:E6:41:70:F7:DE:FD:89:0E:72:C5
            X509v3 Authority Key Identifier:
                keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:74:3a:16:1d:5f:fd:8a:b1:35:ff:8f:c1:dc:ce:2b:7a:07:
         18:d1:5e:44:2e:c2:7b:e1:d7:bc:40:b8:6e:7b:7e:61:ad:6a:
         ac:d0:5b:f0:97:a5:c6:06:e2:8c:f0:e8:54:f8:44:61:ec:7a:
         58:df:53:d7:26:fa:79:9e:60:78:08:05:44:73:49:d9:7c:ef:
         42:0b:0f:41:59:69:0d:e2:86:8b:00:f5:53:52:19:5d:2a:01:
         96:90:33:22:0d:d4:af:e8:27:2c:43:54:0e:4e:46:ae:a8:93:
         88:8c:27:f3:65:85:0d:91:e2:ac:ed:9d:bf:9a:28:71:e2:0c:
         c3:26:02:8f:06:50:14:c2:47:48:f4:42:9e:e4:1c:e0:c0:9f:
         ca:27:3f:ce:d4:ff:6c:6a:73:8b:ed:e4:e4:67:4e:87:1a:b6:
         3c:07:cf:17:cf:b1:13:95:f6:e6:a2:41:12:34:a4:16:ef:c8:
         22:d2:1d:36:a8:2b:56:a2:ba:4c:88:8b:a7:52:89:e3:54:d6:
         15:ab:a3:7a:94:96:41:6f:d5:b2:f7:b9:45:ce:13:5c:a4:18:
         d0:ad:1b:25:90:36:c7:3e:4a:09:71:95:2a:9e:d1:63:5d:be:
         f0:3c:a9:e2:be:36:e1:23:cd:d8:05:dc:1b:dd:35:2b:27:87:
         0a:24:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----