Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File:                     bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier:          KMh1m+323k0Frb/YPnJfGxoKuPtEVE94XhJ6TifDDMU=
Subject key identifier:   59:BB:5F:78:99:18:85:DA:6F:3B:B0:45:17:9C:04:70:8A:63:35:B2
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer:       /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial:       01962E993012EF10E58EDA62B2FE35B6CD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number:          056C
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: SJwS3FUkCTiPhazGeTz7555a4JENv3JEWAKO4X3AJ60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:12:ef:10:e5:8e:da:62:b2:fe:35:b6:cd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=59bb5f78991885da6f3bb045179c04708a6335b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:ff:a5:33:4e:bb:98:6d:e9:b3:bc:ee:be:
                    3b:00:c5:73:3a:93:ac:81:29:d2:d1:74:bd:ad:9b:
                    42:b9:e3:d4:e3:79:15:78:86:a9:5b:44:18:d1:5f:
                    34:d3:b0:b1:fb:b4:c8:55:22:f0:8c:85:8b:ff:87:
                    5d:a0:90:f9:29:fa:ce:60:02:c0:c7:e6:78:28:f7:
                    9d:2e:7d:56:7c:f8:b8:23:9d:e2:c2:bc:20:bb:48:
                    97:c0:ad:27:20:65:2a:5b:32:a8:9b:09:b9:1d:6d:
                    9d:7c:47:42:8e:bb:de:3c:e5:35:f8:0c:33:97:f7:
                    e1:43:e4:41:60:87:ef:9d:a4:8a:09:f1:27:d1:ac:
                    70:b5:2a:91:d7:f2:b6:9a:3e:f1:b3:b0:70:93:d4:
                    07:f9:f7:3c:33:28:7d:1a:5f:a2:d7:c8:17:a3:09:
                    89:ed:e2:12:68:9b:4e:0e:99:01:78:46:bc:f7:85:
                    47:31:50:2d:37:61:18:6e:0c:33:df:79:83:b3:1d:
                    bd:76:04:0a:9e:7e:1f:46:89:4a:71:8a:44:e7:95:
                    32:6c:f2:97:79:25:fd:d3:11:f6:57:23:65:92:78:
                    42:89:c7:72:0f:96:ab:b8:bb:97:4d:b5:4c:51:f8:
                    a0:fc:e7:4a:42:aa:4f:0a:a8:5e:1d:ee:9f:43:e1:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BB:5F:78:99:18:85:DA:6F:3B:B0:45:17:9C:04:70:8A:63:35:B2
            X509v3 Authority Key Identifier:
                keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:36:33:be:b1:37:6c:4f:5e:3b:26:61:3c:9b:57:6c:52:
         e4:74:37:46:ac:5d:f6:f5:ea:9d:c4:ab:cb:77:87:e4:e3:58:
         0a:af:dd:22:17:99:01:93:cd:39:a8:f0:3e:93:9c:36:97:51:
         03:7a:91:2b:b2:dd:0c:43:92:23:69:ae:f9:f0:a0:19:3b:ac:
         59:09:42:ab:54:37:29:ce:9f:34:bb:3f:16:17:e3:0f:86:49:
         cf:02:03:b4:92:98:dc:45:18:c8:cc:ab:1f:85:26:3b:74:07:
         6b:08:eb:0c:cd:3d:9d:75:71:9a:b0:7a:9e:93:10:13:07:4d:
         68:5f:68:07:87:f3:13:90:8a:c9:e1:8c:47:19:67:a2:45:fa:
         93:29:40:36:30:2d:61:7a:f3:c2:78:56:72:df:9b:03:e9:88:
         b4:ae:9d:a7:5f:00:c5:a8:a0:b1:55:26:12:e3:8d:34:79:43:
         34:9d:3e:89:06:1e:37:db:b4:d5:0a:ea:fa:2c:65:d8:e4:81:
         14:d5:44:ca:16:83:35:95:c1:86:5e:bf:da:0b:fc:79:55:3e:
         a7:85:31:21:75:6e:72:93:b8:ed:4b:8a:ec:be:fc:03:57:45:
         61:32:dc:71:c0:ae:3a:a8:17:1d:b2:a8:67:09:52:bf:9a:e7:
         3e:79:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----