Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File:                     i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier:          2rS9aTTWP7jKIX7VBrkjCZ6vqxklgrUJ3cYmL0wUn6M=
Subject key identifier:   5B:BF:B5:CC:1A:3C:9A:A0:D2:3F:C5:1C:A6:89:8A:B1:2D:5C:B9:F2
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer:       /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial:       01962E98F8E8657AABCA9BD53B567443C38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number:          0B63
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: yzeiu2eHCbctSRTbdF4VWYblwmlx/Wp+0snFCKoSIpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:e8:65:7a:ab:ca:9b:d5:3b:56:74:43:c3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=5bbfb5cc1a3c9aa0d23fc51ca6898ab12d5cb9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:a8:16:f3:81:eb:58:0e:51:54:1d:e3:6d:
                    85:a1:b3:6a:fd:9b:2f:7e:d1:05:d8:46:a6:b9:97:
                    5b:03:e8:23:ea:49:e1:00:fc:6a:8f:bd:ba:cd:d3:
                    97:c5:74:90:c9:8c:25:6c:1f:90:eb:86:82:fc:52:
                    77:62:90:6b:3a:62:56:cf:30:77:4d:57:50:e8:97:
                    56:d8:2d:ba:fb:85:f3:ba:f6:3e:a0:e6:70:9f:d0:
                    ab:19:91:36:88:eb:0f:68:68:c9:19:e6:48:cb:f0:
                    bc:63:6d:b0:19:05:0e:07:18:67:54:ae:41:a9:f3:
                    7c:79:5f:cf:99:d7:95:0b:28:cc:36:bf:74:ef:44:
                    f8:ce:98:dc:f3:47:ca:f9:43:c5:aa:fa:09:4f:e6:
                    d4:4e:18:88:b0:84:c5:56:be:fd:b1:8d:48:34:70:
                    02:3d:6f:ed:c2:80:63:bd:11:e3:b1:72:07:5b:b3:
                    32:75:be:13:c8:02:d0:72:15:a4:66:ed:ad:2b:73:
                    46:79:82:29:dd:c6:98:0a:be:48:4a:ab:a0:83:18:
                    6d:8f:a2:5b:ba:38:33:97:5d:2a:2e:d7:97:52:21:
                    9f:da:8d:14:d9:f9:f7:11:99:14:1d:10:14:3f:f1:
                    67:7d:30:4a:70:9e:ec:ed:60:3b:12:c0:8b:ea:4d:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:B5:CC:1A:3C:9A:A0:D2:3F:C5:1C:A6:89:8A:B1:2D:5C:B9:F2
            X509v3 Authority Key Identifier:
                keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:55:9d:98:76:e4:f0:95:df:b3:f5:4f:95:05:c5:6d:1f:e9:
         39:cd:06:85:8f:b7:2f:4a:7c:1e:06:8a:9a:7c:56:dd:9c:5c:
         f7:36:29:1e:86:fc:66:ee:95:43:b3:1d:81:3c:92:e0:ce:f3:
         48:6e:92:35:fc:4f:39:7d:56:2c:6e:33:2c:27:35:b6:a1:06:
         c7:dd:4e:af:56:6a:16:54:e6:3f:91:a5:8f:53:fc:97:23:a0:
         bc:6b:0f:68:10:92:5d:8a:68:c6:6f:a3:38:5b:de:46:ba:a5:
         16:5a:0f:60:77:f1:ad:56:45:e8:fc:cc:cc:33:99:fc:0d:21:
         f4:4b:37:f9:be:13:44:7d:58:c6:41:f6:f0:13:f1:df:32:9b:
         8a:2f:ae:60:2e:14:83:8e:25:e2:ff:81:ac:a3:d7:c9:0e:47:
         71:6b:30:35:04:51:09:4a:70:37:9d:5e:53:29:83:a9:6b:ed:
         94:42:72:1c:1c:aa:de:1a:2a:6a:43:79:36:30:34:04:d5:34:
         1d:fb:e7:e2:c4:2f:38:3b:7b:3f:10:d6:cc:af:19:d2:10:50:
         ce:fd:4b:b0:f4:74:32:16:bf:f5:5b:59:f4:fd:89:6c:db:32:
         fe:15:28:81:6d:5e:33:03:55:9f:e6:d8:42:77:3e:d5:c2:ed:
         c2:3b:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----