Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          vnDBXJ1RziI8IKPC3Tm77PlDueGl6XqKo8/SOdwn2jQ=
Subject key identifier:   7B:B7:B9:AF:D1:1C:CC:9A:F3:65:03:80:55:69:78:E1:01:75:F7:25
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       01962E618A9E8E84D7BF8CED6A2FFC13E92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: wIM7jDB/xbVLLt18pbVlnLNOKUYjPNYQ+RVlz9YduWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:9e:8e:84:d7:bf:8c:ed:6a:2f:fc:13:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=7bb7b9afd11ccc9af3650380556978e10175f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:47:7b:70:8d:29:de:14:59:fe:91:52:38:
                    7c:df:62:ea:3f:38:b1:5d:54:97:49:23:2f:f6:73:
                    f1:5f:59:fb:38:ad:c1:6b:46:30:90:8f:95:6c:b4:
                    3f:8d:51:93:e5:b3:12:f5:fc:6c:6f:81:10:89:6f:
                    f0:94:8b:a1:ef:c8:39:92:b4:d1:61:e5:03:bb:57:
                    89:09:49:83:1e:8f:57:67:4e:7f:77:dd:04:3c:ea:
                    80:c3:e2:3e:d0:70:30:a9:2f:48:1f:76:97:b3:06:
                    be:e4:52:00:47:fe:a9:ee:ce:28:db:da:6e:09:a1:
                    92:d9:b9:6e:a2:1d:11:c6:72:48:b2:35:4c:8d:f3:
                    af:81:a2:08:bb:a6:82:bc:45:ff:4c:72:12:f6:f0:
                    dd:28:60:9b:75:d3:2e:98:77:b5:00:9a:a6:c2:93:
                    b0:ef:f4:68:c3:a1:53:6b:60:e2:59:80:6c:60:0f:
                    ea:1e:e3:6e:ba:e3:81:7a:ce:1c:38:0f:70:2a:58:
                    6d:87:58:00:4b:7c:7c:18:87:a4:60:00:b0:6d:70:
                    5b:76:fe:81:bc:b8:fa:10:0f:1a:9e:17:11:82:c8:
                    b1:1f:68:c3:7d:c1:e1:83:ad:cc:fa:40:6f:57:54:
                    39:b9:15:21:e7:c5:9d:c9:d5:77:61:6f:5f:84:86:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:B9:AF:D1:1C:CC:9A:F3:65:03:80:55:69:78:E1:01:75:F7:25
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:35:ba:a3:95:d9:38:30:34:4a:86:f7:0f:41:d1:91:a0:75:
         ac:44:fa:1b:5d:16:63:a7:3a:a7:60:48:47:d0:23:80:b9:e4:
         d0:20:53:47:0d:ad:01:5e:69:f7:31:5f:a5:9b:3a:e0:3a:e4:
         f9:3f:2a:ea:68:14:e1:db:21:f4:69:80:3a:12:f2:44:4a:95:
         7a:e8:f8:d4:46:f0:31:6c:ae:91:a7:e6:83:37:57:0a:69:c2:
         85:49:7b:56:ee:2b:c0:19:cd:9d:35:20:22:52:04:fe:d2:27:
         40:f7:3a:f0:51:cd:ee:7c:7e:fd:19:eb:e6:e4:02:dd:31:3a:
         ab:7c:70:eb:16:cb:f9:fb:14:f0:e1:3b:60:76:bb:f7:75:0c:
         4e:bf:72:e7:09:16:be:ba:56:8c:bf:92:90:c7:97:43:af:6d:
         2f:ea:5a:9f:94:3d:f0:db:33:88:2b:98:cc:f8:f5:0a:ad:bb:
         18:8e:a2:e4:06:fe:fe:f4:59:93:14:5f:1b:de:f8:40:1a:8a:
         63:c2:89:7e:65:42:8b:f0:28:f6:b7:b2:72:d9:02:4c:d7:a1:
         ee:85:99:7a:0d:c9:0c:0b:04:0c:0b:2e:81:ea:bb:7b:71:e2:
         49:4b:6b:f2:a2:f5:bb:39:2f:7e:b5:aa:de:5c:ab:9f:75:71:
         73:66:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----