Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File:                     obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier:          /C7xz5BDF7QxaqJl33RUgFvmy0ba+idQ69tngaOnOq0=
Subject key identifier:   47:3B:A3:B4:1B:AF:17:A4:1C:0C:53:EA:1C:32:77:C1:61:4F:43:0D
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer:       /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial:       01962E98E42CC732015B8519B375D3117880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number:          0CEE
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: T3rxUHdCHKQ3IJkbwm0G3/GvRfnvU62odYCGWgwKXTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:2c:c7:32:01:5b:85:19:b3:75:d3:11:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=473ba3b41baf17a41c0c53ea1c3277c1614f430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:76:6e:af:3a:a4:5b:10:fa:7e:12:95:b7:
                    99:41:5a:c5:f9:56:a9:c7:05:d7:59:16:c0:18:39:
                    f7:e5:fc:94:ca:f7:52:d8:1f:d4:58:cb:38:c7:2e:
                    2a:98:19:e6:01:a0:2c:33:ff:7e:02:0f:66:b5:55:
                    ab:8d:40:43:a9:12:1b:f4:48:a5:8f:9c:a6:58:85:
                    1b:0b:a8:37:80:34:75:13:d9:97:fe:b4:6e:43:cd:
                    38:c5:d0:59:01:39:fe:6d:4a:32:d6:d6:08:26:e1:
                    cd:15:f3:c9:b9:4b:7e:14:9e:85:68:2e:73:0a:c1:
                    13:86:77:15:81:c1:4a:99:f7:31:89:a8:8f:c6:cc:
                    2d:f2:ad:15:c9:b0:bd:b2:44:9e:84:4a:f2:da:71:
                    e6:94:c7:73:2d:c1:29:81:ea:f4:c1:62:b4:71:e8:
                    e7:ba:5b:c9:77:bb:bb:94:df:da:4a:95:e2:b2:a6:
                    5b:8f:1b:f7:51:41:e2:b5:30:36:86:ef:e8:45:dc:
                    38:d3:77:5b:66:22:6f:92:d9:37:ba:82:10:54:37:
                    7b:8c:fa:a6:a6:5e:c7:31:aa:27:41:57:fb:b8:8d:
                    17:04:7d:5e:7c:cd:eb:bf:95:87:60:59:52:ec:23:
                    36:3b:02:7f:a6:09:3c:ca:a0:64:d7:c0:ca:03:ec:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3B:A3:B4:1B:AF:17:A4:1C:0C:53:EA:1C:32:77:C1:61:4F:43:0D
            X509v3 Authority Key Identifier:
                keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:e3:1d:55:c2:fc:7f:bf:69:01:3e:38:38:32:de:61:2c:
         77:90:e8:d8:2d:73:23:f5:15:48:35:ff:da:26:84:53:ad:71:
         ce:a4:a6:5f:47:50:15:9d:3c:f9:75:b8:9b:ab:da:8b:b9:b9:
         08:c1:26:88:ef:05:94:20:81:55:b2:40:a4:b2:49:05:57:57:
         f7:08:49:e3:6f:4d:85:a6:33:36:a3:eb:40:d6:27:fd:87:f3:
         04:e9:99:a0:ff:f2:e8:de:2c:fa:8d:ba:52:95:18:79:ce:a5:
         b9:53:05:51:5c:f1:e4:e7:86:ba:1d:bf:85:53:b8:36:0a:6c:
         27:4f:72:e5:14:93:9d:55:03:8c:56:4f:a2:ae:21:d9:4f:0a:
         8d:33:80:53:3d:61:63:93:e9:67:02:2e:c8:64:c5:ec:fe:1d:
         e8:b8:9f:5d:83:7b:15:a9:93:c3:24:6a:43:9e:2e:74:f6:4c:
         54:6a:02:fc:a2:96:77:33:8b:4b:2b:c4:de:1f:cc:2e:8a:30:
         eb:cf:87:28:8c:04:22:41:e6:78:48:2f:ce:2b:96:35:ea:73:
         28:e4:26:41:8e:cc:89:65:71:2a:2e:e4:12:b4:3a:76:4d:ff:
         56:db:27:e9:8a:c5:09:a0:26:01:d8:a6:b0:26:c1:03:80:82:
         5a:38:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----