Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File:                     pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier:          z92eR+KjhS/wdGbTGulNvZuQ+8iCljG/CIXeP8jpJFg=
Subject key identifier:   F1:91:8F:8F:B8:3F:84:A5:DD:BC:D7:CF:87:35:AA:E6:0A:97:0F:D9
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer:       /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial:       01962F745B3FE7B6EC3DC05D690381E41A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: pPdwtlP+dy2jJSp4XMNkhJEqFre6x4tLqKVSCVmIMrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:3f:e7:b6:ec:3d:c0:5d:69:03:81:e4:1a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=f1918f8fb83f84a5ddbcd7cf8735aae60a970fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:41:b1:37:d8:2a:c2:c3:d9:09:5b:32:07:
                    2f:96:bf:3b:b3:d3:19:aa:c0:25:b6:eb:81:66:dc:
                    14:57:15:d1:6e:d2:db:d2:41:b3:8a:5e:24:5c:ac:
                    a9:dd:ad:28:ac:10:1b:38:19:f7:32:8c:e1:25:06:
                    b8:0c:ea:e4:ae:38:61:aa:35:be:fa:31:92:6b:b6:
                    a2:d7:b3:f8:85:65:94:e9:2c:7d:ef:05:0c:03:07:
                    77:a2:b4:36:07:32:c2:64:77:4c:7b:3e:d5:71:c2:
                    26:ec:16:65:f2:ba:75:c8:9a:14:1f:ab:a9:d3:ad:
                    da:19:fa:2a:d6:19:13:f6:7e:5b:04:79:4a:16:07:
                    52:79:4b:66:50:ad:e0:65:5b:87:19:ea:aa:4c:c0:
                    13:d5:9b:5e:21:ae:ae:99:e6:cf:54:b5:30:97:50:
                    35:fa:d9:a2:14:a1:77:e0:f2:04:38:39:5a:fd:c0:
                    bd:a7:ad:bb:3f:33:5f:28:21:f7:38:97:cf:f3:75:
                    a8:dc:29:c5:02:1f:6f:32:5b:b1:d4:49:37:28:d2:
                    38:86:fb:76:c5:a8:72:e8:32:2b:09:2f:04:91:89:
                    66:4d:0a:4b:56:8d:f6:18:7f:cd:93:3a:f9:06:69:
                    52:ed:8c:37:31:ac:87:d4:c0:64:2e:7d:48:b2:8f:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:8F:8F:B8:3F:84:A5:DD:BC:D7:CF:87:35:AA:E6:0A:97:0F:D9
            X509v3 Authority Key Identifier:
                keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:37:c4:13:dc:68:99:8e:8b:ea:e4:1c:9d:c9:3f:e9:c9:04:
         0f:ab:62:45:0c:21:b9:4f:c3:8f:b2:6a:0d:24:38:1e:13:ed:
         43:a3:09:a2:68:73:7d:1d:30:28:cc:50:db:8c:af:ff:95:c2:
         27:45:da:1d:29:a5:e5:b0:15:51:bb:2f:eb:6b:06:1d:fc:ea:
         ea:ae:84:34:0b:c1:67:6f:6d:2f:f9:4e:15:8e:ac:ea:2f:6b:
         18:a2:f2:5c:b6:66:d9:14:af:3e:56:be:af:bb:f8:c3:9a:8f:
         81:46:9d:42:46:95:24:8f:e8:a4:00:45:fc:c7:21:c2:c3:ab:
         41:5d:96:62:ab:7f:d2:f9:4f:2b:04:fe:95:dc:27:94:a1:e9:
         b8:23:bf:cb:18:16:f7:24:06:c9:1e:10:97:aa:ea:5e:04:ed:
         a2:5d:dd:0a:b7:99:4f:81:27:28:d1:63:5c:80:5a:8d:80:39:
         f5:eb:8a:62:ba:79:b5:83:ef:83:67:13:e1:cf:51:33:0b:a2:
         5a:e0:f9:1a:83:52:f9:0d:3e:77:3c:b8:40:1b:72:5d:49:24:
         85:1f:12:30:cd:9d:1b:28:4d:73:4f:e1:03:69:ce:9d:7a:8f:
         26:a2:92:31:5a:a4:9b:66:15:1e:c0:f7:51:6b:9b:76:33:af:
         81:10:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----