Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          zVefUdFcSOln3VPryfXJcRZN+igW2nlToj7n5koThN8=
Subject key identifier:   E2:92:7F:C4:F2:32:BB:36:E1:FF:A9:99:4E:98:28:02:5F:4C:59:D6
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       01962F3D3F360B3D1AF2189435048EFDF955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          1017
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: +GHWVtD6aUJku0k4uopJBIb6QTmoDmkdHehbOPjW3Fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3f:36:0b:3d:1a:f2:18:94:35:04:8e:fd:f9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=e2927fc4f232bb36e1ffa9994e9828025f4c59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:29:e4:4e:6d:4c:55:59:b7:54:92:66:10:
                    93:34:33:29:89:2c:a6:99:0a:04:2f:67:6d:fd:c3:
                    c4:0b:4e:72:74:ef:bb:11:27:44:5a:f0:8b:6a:f2:
                    39:aa:72:4e:d9:cd:ea:60:64:b4:67:1f:ee:86:dc:
                    74:28:e0:fe:9a:c0:4b:a0:cc:f1:d6:3f:a2:75:82:
                    77:12:31:76:4a:d8:e7:1e:80:68:fe:72:1c:c7:1c:
                    55:23:f7:4a:5d:7a:de:9b:59:c1:ec:f1:77:f6:d3:
                    d4:b7:9f:7f:d3:3d:fa:b0:f2:43:b2:94:36:4e:f1:
                    a8:cb:21:30:85:6d:ed:41:0f:29:28:ce:b7:36:8d:
                    8a:01:ec:d1:7f:63:60:a8:95:ef:24:bc:b7:ee:ad:
                    2e:77:58:c3:7d:d5:11:c7:0a:6a:c4:aa:21:af:8b:
                    92:3e:6d:3f:4b:16:9d:be:72:9f:05:f5:ac:ca:61:
                    e9:a7:aa:4f:05:ca:e1:b4:71:d3:38:86:60:20:49:
                    3d:55:5b:ec:fd:8f:81:1a:b8:e7:80:d0:06:8f:e5:
                    7f:c8:87:3e:8a:9f:bc:59:a3:43:95:6c:76:ae:8d:
                    7e:26:3d:85:bc:c4:00:d9:59:d4:2a:47:ee:b8:22:
                    2e:65:c8:1c:bc:a3:ea:16:4d:db:91:68:23:ea:30:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:7F:C4:F2:32:BB:36:E1:FF:A9:99:4E:98:28:02:5F:4C:59:D6
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:81:f8:56:1d:07:85:ec:71:d8:88:0e:5a:82:59:29:d4:
         0c:13:1b:8e:e4:fc:2c:b9:81:33:71:eb:7f:ac:56:ed:07:a9:
         22:e6:21:c1:d0:7a:02:ab:61:87:28:29:09:a9:6c:e9:5a:af:
         bb:15:91:2d:af:3e:eb:61:da:29:c6:d9:60:1e:61:ec:12:3c:
         84:5e:ac:06:57:53:b2:70:60:3f:15:02:ee:3c:f9:5b:0b:bb:
         0d:62:e3:14:a7:ea:57:1e:8f:5c:73:86:44:56:27:94:c1:60:
         91:cf:8a:ef:fe:fb:d4:dd:80:b9:55:61:d2:09:9d:c3:07:9d:
         ed:e2:3a:31:2a:7b:b3:25:1a:13:44:54:d4:2b:9c:9a:19:c1:
         4c:36:76:61:b8:c9:3b:9a:cc:75:1b:ee:08:45:ff:10:d4:30:
         a5:4b:ff:7b:b6:4d:3a:21:cc:5e:b2:4b:f4:dd:8a:36:3f:42:
         78:5d:6c:58:bb:2d:60:c3:44:91:ef:20:67:38:1b:bc:1e:73:
         be:7e:3e:d4:2f:0d:b0:7d:b4:53:47:76:d4:9a:83:5f:17:c5:
         14:47:22:7d:15:21:75:77:f3:99:a7:b5:59:b2:10:f0:b6:3d:
         ee:23:a0:d2:ff:09:75:3a:cd:b1:77:b3:11:ba:fd:2c:50:63:
         0f:92:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----