Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          FVnkzl70T3tqI+TpOgQBrUnxcYZw69kJlNn/7l0tktM=
Subject key identifier:   55:D6:FF:C1:F3:79:9E:0F:A0:68:A1:F4:D9:90:5C:43:CD:4C:F0:2F
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       01962E990B0F005096002CB8004A6FDCB373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          09F1
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: AaXKlQSKWOzY4wkODJIwHZewRmQG1hqDiZAUZmmR4i4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:0f:00:50:96:00:2c:b8:00:4a:6f:dc:b3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=55d6ffc1f3799e0fa068a1f4d9905c43cd4cf02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:85:95:4f:a5:21:d6:d4:74:6e:12:26:1e:
                    8c:72:38:42:f5:16:5b:72:c7:4b:98:3c:22:8b:b5:
                    55:30:45:e8:93:a1:eb:27:64:f8:74:b1:ba:c1:6f:
                    df:96:1f:ea:b4:69:01:b3:cb:51:d8:14:24:a8:6f:
                    7a:73:65:8e:91:18:5d:08:08:1a:49:c2:aa:54:7e:
                    27:7b:1a:83:ee:a3:31:cb:54:c2:1a:c9:7f:4c:3e:
                    dd:c5:de:f3:3d:1b:b3:f3:54:78:d5:9c:c1:f7:16:
                    12:1f:a3:ce:ef:50:fe:f4:65:a5:81:3c:37:e0:7e:
                    4c:6a:e4:84:2a:cf:ee:46:84:6f:56:87:40:c8:4b:
                    b6:45:93:26:62:f3:42:7e:0c:35:c3:6a:ee:8f:cf:
                    c0:89:8e:a3:81:a7:2a:24:cb:1d:19:fc:76:1e:d4:
                    78:35:4a:a9:fb:bd:3c:7c:11:c3:68:72:8a:00:65:
                    d6:3e:b3:d3:3b:e7:66:b4:12:07:7b:de:74:80:63:
                    8a:31:00:78:11:05:ef:2a:ba:24:d9:69:24:dd:52:
                    cb:52:37:f8:f6:b3:d0:93:2a:fc:63:54:c4:6c:66:
                    3c:c4:72:4f:e0:51:94:de:66:c9:6d:1a:5e:68:43:
                    5f:6d:61:ea:8e:94:b1:0f:dc:55:39:6c:b3:19:8a:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D6:FF:C1:F3:79:9E:0F:A0:68:A1:F4:D9:90:5C:43:CD:4C:F0:2F
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:cb:40:d6:be:ad:8f:46:88:71:23:af:f8:b5:74:1f:0e:
         28:c1:34:3c:29:1d:2a:d5:ba:36:eb:4a:1e:53:c9:18:d9:fd:
         6d:6f:69:2a:58:6c:67:be:33:84:31:eb:df:2d:19:d0:bd:04:
         bb:47:46:b7:04:06:a3:89:c4:66:1a:67:a5:ec:84:4d:98:c3:
         d1:6f:49:e3:88:09:d5:9f:4c:06:a7:68:8f:67:70:b9:f5:53:
         33:b2:b2:19:78:cf:c8:91:ec:c1:72:91:a0:db:21:e5:cc:56:
         67:b1:0c:18:01:9f:ca:5e:e9:62:78:a1:29:ed:31:31:df:56:
         e9:ac:82:8d:89:36:3b:71:4b:9b:ae:fe:19:1f:65:19:77:5c:
         18:b8:7e:ae:7f:ea:7c:73:ec:20:77:6d:23:c3:04:19:38:17:
         03:b8:74:90:34:01:28:33:fc:53:da:37:0d:8f:cb:38:a6:37:
         2d:75:88:6a:a1:3f:57:ba:d1:e0:ba:e2:8b:1a:97:06:d7:ed:
         06:26:a6:d0:49:27:e7:a3:f9:b2:1c:3d:bd:01:07:49:e2:a9:
         2d:7b:4a:3a:08:4c:df:f6:56:38:af:a7:b4:da:04:39:29:bc:
         bd:48:50:66:85:d0:3e:85:58:85:be:54:9b:e0:c2:62:2f:d0:
         49:93:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----