Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File:                     spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier:          pBcsMUijWDQxUmXOl963sekxAe9+K/kvJPR65PcW+MI=
Subject key identifier:   4F:AB:EB:75:66:2B:5C:00:E5:DD:CF:A0:55:A9:9F:84:4A:02:6C:53
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer:       /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial:       01962E98605240341445523928E0C9AD1DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number:          0B82
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: LB4h1szDXebmNoVrmWmg7O+p3LcPCql5WNSQF9G4ToQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:52:40:34:14:45:52:39:28:e0:c9:ad:1d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=4fabeb75662b5c00e5ddcfa055a99f844a026c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:73:80:c2:6a:fe:6b:e7:ae:52:5a:88:3b:
                    29:dc:31:7a:90:e4:54:9b:57:5e:14:2d:a3:d6:a4:
                    ad:e4:f0:71:a4:75:87:62:31:8a:88:40:32:89:c4:
                    51:b4:44:f9:34:d0:69:31:26:96:e3:0a:6e:1b:18:
                    a9:f9:2c:46:c6:20:65:4f:ed:9e:0a:d6:17:f2:c0:
                    ec:5a:d5:fb:61:8b:ef:3f:90:5d:b7:06:50:a3:58:
                    79:51:8d:29:43:f3:e5:0b:f4:a2:cb:52:35:5e:98:
                    a8:49:15:68:11:bf:c9:3f:dc:9a:00:7c:aa:66:d8:
                    44:2e:d4:21:4d:e6:e6:76:1d:81:84:cc:71:98:db:
                    df:4f:b5:39:79:55:92:3b:62:28:70:3c:6b:f0:71:
                    be:af:f4:e5:f1:be:2e:b8:ea:42:7d:1f:88:0d:ba:
                    f1:21:d7:f9:2a:30:fd:cc:c6:f0:d5:93:08:8f:32:
                    34:af:a8:4a:83:c1:bf:56:6d:6e:1b:91:8c:7f:a8:
                    50:5c:59:57:32:55:76:6d:4b:d7:99:ac:2c:93:9b:
                    76:f7:6e:70:14:b6:34:6a:3a:cd:2c:04:d5:5f:17:
                    9d:d8:6d:38:03:23:a5:de:4f:07:5a:18:81:fc:11:
                    7b:f6:ab:de:29:03:b7:71:66:f8:38:23:79:56:f4:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:EB:75:66:2B:5C:00:E5:DD:CF:A0:55:A9:9F:84:4A:02:6C:53
            X509v3 Authority Key Identifier:
                keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:b9:00:9f:5e:6a:c3:75:21:65:38:37:ed:98:d3:a8:48:
         9a:70:e9:d1:f7:ca:69:e3:d1:48:0f:ba:c4:8a:ea:81:30:66:
         63:02:8d:eb:79:9c:bc:77:0b:9a:49:65:9e:7d:68:85:0e:22:
         83:b8:08:28:14:46:07:2a:13:c6:4d:23:3d:49:94:a3:e6:04:
         4a:36:86:d7:5f:38:e7:ef:93:e4:c6:55:41:21:45:a6:94:f6:
         5e:f4:fb:b5:c3:18:83:8d:dc:df:f1:36:c0:8f:e4:48:8c:20:
         b8:52:02:f1:8f:1e:49:54:4b:c8:35:0c:a7:ff:77:f4:af:dd:
         e8:5e:d8:28:75:34:37:a5:3c:d4:01:f8:96:65:3c:32:7a:ed:
         c6:ae:7e:d4:38:49:fc:51:71:d2:23:54:11:4a:31:87:49:2f:
         63:88:53:2f:ae:84:14:48:8c:6f:8a:fb:18:37:76:85:20:c0:
         aa:45:36:31:34:b7:ab:85:db:5f:33:be:6e:2a:e7:08:25:e4:
         19:47:d3:d6:37:f2:b3:f5:33:f0:bf:d6:d0:9c:5c:c9:cd:30:
         49:af:83:9c:35:02:01:85:af:a9:8f:f9:64:2d:ea:c0:20:25:
         2c:9e:fa:d9:4b:35:ad:8d:65:96:20:ca:91:79:bd:b3:7e:ed:
         70:ba:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----