Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          VXbusgZE7sJhPQoJwhBpg9XtPRy0CPvYOxkAe7hzEok=
Subject key identifier:   8C:95:84:14:EC:6F:73:81:1B:F9:EB:95:3C:2B:50:78:8F:FC:A1:63
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       01962E61DCE654957871D56C6467089491FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          0BE1
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: VgBj7l0w3AR3VQV00u/MmCoiScCH8jB1uZnotvzeUcc=)
                          2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:e6:54:95:78:71:d5:6c:64:67:08:94:91:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=8c958414ec6f73811bf9eb953c2b50788ffca163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:9f:05:d1:78:87:20:6d:c7:1d:e9:55:f6:
                    2c:b6:f8:2e:af:2c:b1:36:91:7b:5a:13:cf:66:0f:
                    9d:7d:18:fb:0c:f1:a6:33:d5:8c:9f:b5:ef:74:0b:
                    07:2e:38:02:76:ec:86:5d:cf:61:6c:5e:87:1e:54:
                    bc:88:07:fd:91:46:ff:c8:4d:c9:de:ea:5b:1c:04:
                    27:f0:81:d4:56:eb:a8:57:0d:7a:d8:46:f5:6b:0a:
                    e2:85:48:69:1d:5b:1b:5d:bb:66:d8:fb:04:62:c8:
                    3f:1d:2d:45:e0:99:3d:eb:c6:93:73:32:60:9e:5e:
                    96:60:cc:bc:1b:bd:38:dd:81:73:77:de:1c:13:01:
                    62:85:44:91:d6:c8:b3:6a:27:97:b8:9c:8b:79:a0:
                    7f:54:0b:81:d9:c7:13:3e:52:4c:f5:80:8a:53:20:
                    87:23:7b:e3:58:2a:16:e7:bf:7f:49:7a:97:fd:bd:
                    c0:b6:8a:e4:cc:52:bc:b2:f4:d7:58:a0:40:83:20:
                    36:3a:38:94:c6:31:9c:f3:7b:fc:ea:52:23:fc:16:
                    20:1b:a6:0b:8d:bc:61:27:5d:ca:a6:8b:ca:69:2b:
                    07:c4:89:1b:e4:c6:29:7e:a2:8a:e1:71:bc:99:dc:
                    f7:bd:03:dd:cc:fd:ba:64:ef:9c:5e:08:f0:98:bb:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:84:14:EC:6F:73:81:1B:F9:EB:95:3C:2B:50:78:8F:FC:A1:63
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:3e:a6:10:dd:70:04:5d:36:73:13:fe:8f:20:c8:eb:b2:
         c7:88:79:da:94:48:6e:ab:aa:96:f7:dc:a5:38:7b:0f:7f:d4:
         a0:49:4b:d9:01:07:bc:0a:f1:8b:c5:37:d7:38:66:b0:1e:18:
         16:95:0d:72:ae:de:bb:75:99:30:d4:f3:84:c7:6f:9c:35:de:
         a6:79:d5:57:3a:0f:4b:cd:d8:6d:c1:3d:7b:37:19:d4:3b:94:
         35:31:62:f6:45:df:a4:6b:e0:57:f4:25:b0:9b:ec:0a:cd:97:
         9b:25:9c:6d:03:8f:a5:92:18:1d:e5:3a:2d:7a:78:d7:d8:1c:
         38:79:49:45:cf:1d:41:79:fb:45:d7:ea:b7:fb:45:77:0f:75:
         41:01:4f:29:6b:71:b7:46:89:9f:48:fd:e2:8e:21:56:ec:b1:
         fd:a2:53:c2:9b:58:e0:45:c1:15:e3:1a:94:1a:17:17:5d:53:
         1b:6e:60:af:54:0b:b1:df:e6:40:c6:cf:54:a9:8a:e7:a0:0f:
         3d:02:d6:77:f2:4d:af:51:97:18:a7:bf:95:9b:76:8a:6f:51:
         92:25:99:a0:70:13:ff:f9:df:75:8e:fd:01:78:4d:29:3d:8d:
         f5:d9:d8:ea:4b:51:6d:51:86:63:ef:c1:74:0e:03:65:ec:2c:
         b4:2d:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----