Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File:                     B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier:          gK1HzpteqsXJs55VkT6LVQGXwDxRfd4Wzgfg4PEBZ+w=
Subject key identifier:   AB:AC:6B:69:CF:90:5F:C0:AB:09:5F:77:A7:99:AA:83:D0:D0:31:D6
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer:       /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial:       01962DF4562FAAB8CC4EC070D51CC4CDACA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number:          0EBF
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: 0YwraeOKHKwv82LAhtwdqI6wk3uTbrZB2koNmc7dTZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:56:2f:aa:b8:cc:4e:c0:70:d5:1c:c4:cd:ac:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=abac6b69cf905fc0ab095f77a799aa83d0d031d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:5c:26:ab:0b:0e:d3:57:28:17:62:46:aa:
                    9e:8c:77:24:44:91:ba:36:3c:f2:9e:7d:61:50:08:
                    9e:12:b3:51:e0:7a:fe:90:00:89:1b:72:e2:2e:06:
                    cd:fa:7a:88:ae:37:cb:3f:92:8e:f3:cb:95:3d:8f:
                    04:a3:03:3d:04:a7:82:c9:6c:45:12:8c:30:81:be:
                    cb:35:07:9c:be:b8:e9:d2:d2:d6:85:3e:6e:2d:6c:
                    69:02:65:d6:65:8c:72:a0:31:8d:ab:2b:8b:97:91:
                    de:5e:d1:19:0f:35:aa:e6:01:1b:06:54:f2:72:94:
                    e5:c9:19:36:96:37:17:bf:07:35:7e:d8:86:36:a1:
                    dc:fb:71:79:3e:db:57:25:41:e6:d5:90:de:15:3c:
                    21:f4:30:fd:41:e2:cb:b5:87:15:f1:4d:07:bb:07:
                    e4:17:ee:79:92:b9:92:e2:77:4d:05:8e:c6:a4:d8:
                    27:41:4c:e8:1b:56:3b:6d:13:91:b4:ce:e4:43:f6:
                    d6:71:01:fc:c4:95:24:0c:b8:99:7d:cb:5a:fa:46:
                    8d:da:e8:83:73:e2:2f:3f:93:5e:db:af:72:06:96:
                    b0:f4:a7:4e:b9:ea:1d:6c:22:63:59:70:50:30:3b:
                    7a:ee:81:66:5a:71:d4:b5:1d:8a:1e:af:a9:b7:ec:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AC:6B:69:CF:90:5F:C0:AB:09:5F:77:A7:99:AA:83:D0:D0:31:D6
            X509v3 Authority Key Identifier:
                keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:04:73:08:7d:f0:8f:37:91:c2:d2:64:88:4e:70:57:e6:e6:
         58:10:96:16:92:1b:0c:b1:1c:6b:30:de:f4:22:b2:cc:48:79:
         92:91:74:53:13:ce:94:7b:57:52:b0:6d:01:f3:d3:36:c1:63:
         f6:bb:1f:42:b0:46:53:51:14:8b:1d:19:21:9a:c7:f0:ed:29:
         1a:df:5b:24:de:b9:8a:0a:f0:cb:85:90:fb:7b:14:e7:25:48:
         18:eb:17:41:71:5f:3b:a2:c3:9b:84:f6:67:86:69:fc:4c:68:
         a4:04:6a:1b:d0:a0:c6:82:2c:21:5c:2f:73:68:d3:57:c0:2e:
         6e:3c:75:b6:a6:d4:fa:fe:99:a6:30:e7:6c:a5:82:de:63:f4:
         01:8b:41:f1:af:19:e1:d2:fe:d9:91:95:a3:ce:7c:7c:90:23:
         7a:5c:a4:02:c3:4e:41:f3:07:48:22:2d:29:8a:9a:f6:72:67:
         94:de:96:9c:dc:0d:1a:46:ae:c1:93:1f:8c:aa:42:14:7d:31:
         11:a5:d0:09:23:82:99:2a:1b:72:83:c2:4b:7e:cc:83:b4:4b:
         7d:35:9e:ac:4f:34:8c:d6:8f:ad:48:04:b7:ce:a3:7d:e3:e0:
         d9:7d:2b:8a:d5:8a:df:fa:1f:7d:3c:17:02:3d:96:99:3a:d4:
         1d:e9:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----