Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          f1IgedGhvKfUpgaxD8XusDKvQ/hlxOzRJBpbKJcBtLY=
Subject key identifier:   43:17:3C:AB:0E:CE:62:70:AB:E3:85:FC:9A:26:BE:04:F3:22:12:21
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       01962E98A25F91A8718D87C586B6F196F6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: 3gI0hrUtGnMKbiZ6LU+gZMGKms20a4s8LVkNGj5JxQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a2:5f:91:a8:71:8d:87:c5:86:b6:f1:96:f6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=43173cab0ece6270abe385fc9a26be04f3221221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:ce:22:50:10:52:6a:ff:89:ed:73:07:70:
                    21:4a:44:60:66:a2:23:c0:84:21:3b:69:b6:ff:19:
                    ac:b9:27:06:27:38:8d:ff:0e:76:0a:5f:50:71:c2:
                    40:1f:78:79:e3:32:05:d1:54:2b:6a:1f:eb:2d:1f:
                    15:d4:31:ea:22:4e:a6:2a:cb:10:bc:a9:6b:63:2e:
                    66:fa:83:0a:07:ff:aa:f9:fb:e6:3e:d4:7c:a6:5b:
                    a5:a6:a7:25:22:cd:6a:a8:36:37:ab:28:1d:16:47:
                    ca:92:df:27:dd:be:2a:76:48:41:dc:cf:f8:87:ca:
                    26:78:dc:96:fe:c9:7f:a7:94:5e:f2:0c:8b:64:07:
                    2e:3c:81:d1:6d:8c:9c:90:e0:a4:f8:63:9d:1f:5c:
                    db:6a:ab:ab:5f:5a:9f:6b:7e:4c:cc:f7:b6:ae:0a:
                    2d:f5:b1:c2:36:f7:23:04:9d:49:22:03:30:65:d7:
                    a5:68:8c:d1:8a:5b:f5:16:ae:6b:7d:56:f3:17:47:
                    b2:f3:d2:65:fd:2a:88:07:b4:86:94:ac:a1:ec:04:
                    3e:36:60:bd:7e:89:ae:e1:b4:a1:a3:e5:b0:9d:b7:
                    ab:d6:e9:85:b4:9e:66:e7:af:d4:02:0e:5c:97:2d:
                    d0:59:90:65:05:4f:e3:02:77:f6:61:46:8f:07:ce:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:3C:AB:0E:CE:62:70:AB:E3:85:FC:9A:26:BE:04:F3:22:12:21
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:4f:d8:00:8e:4f:de:fb:b1:f9:e7:3c:3b:79:46:68:f9:
         6d:ae:3c:e7:4d:e0:89:71:c8:2d:e0:13:1c:1d:6d:9b:38:87:
         c5:c4:b5:eb:5d:8d:fe:42:59:a1:d3:0b:ae:25:a7:39:cb:4d:
         31:4f:ac:cc:74:1c:6e:60:87:ea:c7:0a:96:f2:be:a0:5a:d5:
         6d:71:fa:db:8f:c8:f7:2a:75:76:cd:57:01:3c:12:ec:98:99:
         7f:37:25:d4:3a:fd:02:c6:e5:4e:3d:14:95:0c:e7:95:ae:e2:
         b6:ec:3c:59:f4:58:03:f7:29:04:20:9d:87:6d:11:c8:33:09:
         65:63:4d:fc:30:a2:56:fb:83:41:d7:54:df:1d:08:8b:0b:12:
         85:a0:1c:e1:f3:89:ff:f5:9c:19:5c:87:ee:dd:07:93:8b:29:
         30:7f:8f:c2:98:a3:99:df:48:d5:8b:08:b6:ce:1b:54:55:ca:
         8e:13:72:6b:25:00:b3:a0:53:f4:52:1d:ae:4f:cb:e2:a8:4a:
         93:19:39:e1:de:7d:6b:ee:e7:41:55:53:08:9f:02:0b:0d:80:
         ba:24:5b:50:38:6e:a3:26:49:9b:dc:d0:87:d4:76:f6:20:f5:
         97:07:17:71:81:fc:0a:06:8b:19:ac:57:13:dc:5f:b8:4d:fd:
         6c:9e:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----