Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
File:                     0m9HluwczjftJ86jmJgDukl2JR4.mft (raw, json)
Hash identifier:          l1612KsIIWTEh+bGdKDL2sF3YA/w/ukw5uFfSOKs5dE=
Subject key identifier:   D4:FC:85:8A:26:71:55:88:F9:79:A0:53:61:84:27:EC:E0:19:C4:53
Authority key identifier: D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E
Certificate issuer:       /CN=d26f4796ec1cce37ed27cea3989803ba4976251e
Certificate serial:       01962FAB3F3BFDBBA5BAAF604EEEF7FE732C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 0m9HluwczjftJ86jmJgDukl2JR4.crl (hash: +49QPFHvYWIKpsW5Uiry0D2RXHzqxQcnQqqELXGXPGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:3b:fd:bb:a5:ba:af:60:4e:ee:f7:fe:73:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26f4796ec1cce37ed27cea3989803ba4976251e
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=d4fc858a26715588f979a053618427ece019c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:ee:fe:ae:3f:1a:cc:b3:e5:e7:30:c8:44:
                    62:55:a0:6a:00:43:e5:e6:53:b8:55:23:39:45:2c:
                    61:0d:48:a3:48:c6:84:c2:37:f8:21:db:43:6d:72:
                    e6:89:5d:a5:46:50:fd:a4:b6:e0:66:b4:a3:2d:19:
                    74:3f:22:ab:9f:a8:f3:e3:0b:55:dd:d9:a7:0d:f7:
                    2d:a9:aa:6a:57:71:ba:d1:b6:30:44:8e:de:9b:4b:
                    fc:d3:71:77:63:85:41:55:aa:d5:f3:94:7d:ba:99:
                    69:be:6b:16:d3:32:c5:3e:03:58:80:a3:9f:fe:e5:
                    52:ab:db:fe:c1:48:4b:3c:32:de:cd:41:9b:8c:4f:
                    2d:7e:69:f5:40:6b:d2:8c:13:3c:65:5e:1c:c5:c7:
                    8d:e3:ea:53:f1:84:11:a9:96:78:39:d7:57:c5:54:
                    d1:f5:ee:df:75:b7:09:0a:2c:54:83:0e:89:43:2d:
                    50:d3:e5:51:75:08:e7:b7:24:9d:a9:0f:ee:39:99:
                    3f:11:64:05:23:31:90:ad:59:3f:50:a6:ad:28:e8:
                    79:b9:ca:a4:ab:59:91:45:31:d5:5d:43:9d:22:f6:
                    30:a9:8d:e8:0a:f1:af:7b:b9:ce:4d:01:57:b2:c3:
                    b4:ee:6c:21:20:43:57:5f:f7:1d:04:50:7e:ff:e4:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FC:85:8A:26:71:55:88:F9:79:A0:53:61:84:27:EC:E0:19:C4:53
            X509v3 Authority Key Identifier:
                keyid:D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b6:14:bb:06:63:90:f5:a6:ab:36:d6:e0:0c:7f:49:61:24:
         ed:a3:b8:6d:49:bb:2c:62:d5:e9:b8:40:f9:60:3d:e8:56:c2:
         50:e4:4a:ec:40:28:d7:8b:f6:7d:be:61:55:f7:24:6d:52:4f:
         21:14:bc:2a:de:92:6a:5a:80:9d:48:b2:b0:15:63:84:ab:25:
         11:4c:28:de:0f:87:df:bc:f7:65:2f:3b:48:62:13:88:53:8b:
         81:01:8b:dd:30:d1:7a:cf:85:c5:36:4e:4d:ff:94:67:e0:2e:
         87:20:34:73:8f:54:7b:0f:aa:40:ad:c8:07:24:a8:f0:ab:a8:
         00:1a:09:19:c0:4b:ae:2d:fd:1c:7b:73:92:84:84:e6:d8:55:
         65:7b:d3:39:01:5b:b3:a5:97:1c:53:8a:0c:04:68:43:4b:68:
         67:87:15:a0:46:79:e4:c7:f4:8e:31:bd:94:a7:e7:ca:19:cf:
         1d:fe:b4:36:53:84:79:50:40:a7:39:86:f2:a6:72:5d:b3:46:
         08:d0:c0:26:08:4a:6f:7c:19:cf:c6:74:03:9d:52:71:11:a4:
         96:89:6b:3b:c2:c4:66:e8:c8:19:0f:0a:7f:ff:45:e1:7f:b1:
         5c:b5:1c:48:d1:a2:19:a2:be:c5:f2:5f:2b:97:17:5b:18:53:
         c8:5f:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----