Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          gGVOMpaugr6TMyEvvUttM5CDiJfbZT6vxhSxa1Kz/qY=
Subject key identifier:   32:1D:8D:0C:8C:7D:30:F6:08:0E:E2:06:89:D1:E8:3C:BA:1B:A8:56
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       01962E61D17FB2DD3418BD6A4F5029657D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          03A4
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: 1t+D/yugpqsv6mu9/ypie0vA/f5p78TIfoJNYdYLWp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:7f:b2:dd:34:18:bd:6a:4f:50:29:65:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=321d8d0c8c7d30f6080ee20689d1e83cba1ba856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:fb:4a:ef:50:af:66:40:d8:61:7d:2c:94:
                    85:34:f6:53:70:0f:94:55:4d:8d:49:95:3e:0b:6c:
                    68:aa:74:10:1a:d6:18:f1:6c:da:d1:9d:b6:ce:d6:
                    8a:28:ad:9f:26:92:dd:e3:31:0a:e4:ab:fe:c1:b9:
                    15:32:8b:0b:6b:03:0c:5c:3c:7c:ab:d8:f8:14:51:
                    74:7d:13:81:35:9d:4c:06:d8:48:8f:bf:8a:e5:db:
                    30:26:01:46:a3:24:7f:fa:78:8d:82:32:95:13:c4:
                    04:ff:90:21:3a:a8:74:2e:28:e8:07:da:68:16:e6:
                    52:2d:67:c5:16:bb:09:b6:34:70:25:ab:dd:e6:24:
                    f6:b9:c6:ca:ad:b1:f1:b8:f9:d6:57:c5:73:a4:ea:
                    1c:10:c9:68:3b:e0:ed:fe:7d:0f:a0:8a:4e:fc:0a:
                    fb:38:d1:48:0d:db:f7:81:fa:50:d4:e2:1b:2f:e3:
                    8e:32:37:4e:7a:8e:21:04:7b:7d:9e:9a:7e:e3:27:
                    26:38:fe:16:cd:f7:17:75:bd:c4:0f:bf:25:2e:55:
                    2b:08:39:09:58:22:cf:63:03:96:26:79:c1:55:52:
                    e0:55:01:2e:d8:20:81:71:6c:fc:e3:03:4b:ac:6c:
                    93:ab:3d:da:09:29:37:04:a6:f2:95:a7:73:ee:02:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1D:8D:0C:8C:7D:30:F6:08:0E:E2:06:89:D1:E8:3C:BA:1B:A8:56
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:7c:13:69:d9:42:71:3d:18:a9:f6:65:d4:21:29:f5:16:
         02:64:5e:a2:4f:ee:d6:3d:70:a2:63:16:db:db:b3:eb:cd:d8:
         26:76:76:a2:c8:1b:f7:4e:a6:23:05:04:1a:4f:16:04:78:01:
         19:a9:d5:f7:5c:f2:65:6a:46:fd:09:dc:3a:2a:75:4f:a6:e6:
         2c:f6:52:84:9a:49:6c:b6:72:03:eb:21:ba:25:b4:a6:80:08:
         91:fb:37:3a:cd:d9:95:cd:b1:a9:80:9e:3f:3d:70:f4:7e:70:
         bb:dd:b0:af:15:75:ed:24:05:e9:60:1d:a8:52:9e:05:5c:6c:
         90:dc:a7:cf:6a:6c:d5:df:eb:a4:15:12:53:22:42:f9:5e:87:
         cc:8f:0c:53:aa:6a:3f:91:00:26:30:3d:85:8c:9c:b3:79:63:
         1f:6b:71:e9:e1:91:52:20:b2:97:b0:47:e8:65:b4:01:75:33:
         b3:2a:7c:e9:4e:58:bd:69:48:31:05:18:4c:5b:20:96:48:0a:
         dd:c4:eb:0d:a7:53:35:e9:05:34:90:62:ce:07:91:cb:6f:9a:
         d1:23:30:73:82:eb:15:91:69:fd:08:49:51:ce:53:bf:0a:69:
         eb:07:5a:78:b2:41:15:10:44:4f:f0:68:6a:6f:56:9f:0b:02:
         dd:45:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----