Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File:                     BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier:          e+ZNiVSjYVqDAKXpmNxXpSLaAJoVZE6bknHQjbxtRbA=
Subject key identifier:   DB:81:34:02:60:8C:D1:40:73:4C:BD:D8:A8:70:86:20:6B:27:FD:55
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer:       /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial:       01962F069DBB6CC8307D5D160C47BD020054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: f68rwg6fgqDhvDHDSie52XzOvd0UpOEbdy6pwyLHvyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9d:bb:6c:c8:30:7d:5d:16:0c:47:bd:02:00:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=db813402608cd140734cbdd8a87086206b27fd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:c5:54:24:80:ee:36:59:e7:bd:44:1f:bf:
                    5a:4a:25:74:0f:57:fb:4f:e2:60:52:45:31:2a:64:
                    27:74:c5:48:01:e6:22:42:a4:f8:82:35:46:73:1b:
                    0e:d4:e2:a1:d9:27:d5:2d:bd:d5:9e:cb:f3:36:82:
                    2c:90:f9:fa:f6:fd:69:81:19:fc:7e:f0:c5:32:9e:
                    ca:08:fb:a1:e8:e4:9a:1a:1a:e6:80:1d:0c:fe:0c:
                    fa:95:b0:19:a1:1d:ff:4e:f9:be:7c:85:a3:74:bc:
                    ed:6d:63:1c:ee:98:7e:1c:f8:f1:56:16:06:5a:e1:
                    0f:4c:d4:3a:4a:c9:a8:b7:99:74:ef:17:b9:9f:7b:
                    7e:ab:2f:49:87:a1:db:d5:37:58:fc:5d:b5:a0:99:
                    45:c8:7a:d3:3b:ac:90:17:0d:99:58:eb:78:6c:19:
                    0f:ca:eb:88:b1:f1:2e:df:27:70:bc:8b:9d:7f:6a:
                    8f:7b:81:3b:08:36:ff:14:89:85:38:ab:57:7d:7c:
                    dc:75:2d:70:13:0b:19:81:56:60:5e:04:10:4e:9c:
                    d9:da:8b:3f:b9:78:72:fb:97:1e:86:a7:39:ae:03:
                    50:53:e0:d4:65:c0:c7:84:af:3e:06:cc:8b:75:6b:
                    5b:b5:75:e0:28:c2:30:6d:c5:60:cd:97:3e:7c:a2:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:34:02:60:8C:D1:40:73:4C:BD:D8:A8:70:86:20:6B:27:FD:55
            X509v3 Authority Key Identifier:
                keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0c:f1:22:02:bc:84:a9:e7:d0:40:93:09:a8:6e:f7:ff:4f:
         55:2e:35:8f:d0:b4:cf:ec:81:5f:50:b5:63:9f:62:2c:ff:54:
         77:49:e7:1e:47:23:60:1b:48:da:02:69:ff:8b:2d:53:e5:88:
         d0:1d:6f:e9:4c:0b:a3:fe:9c:ca:26:96:4e:6a:d6:a1:d2:57:
         47:51:5d:b8:5f:27:87:b2:fd:41:11:9a:5c:17:6c:6d:fc:93:
         2b:10:e7:42:08:52:c6:ef:f3:0c:02:1d:74:b0:4b:3e:0d:04:
         ca:27:a8:c9:29:cf:0b:f2:38:9b:ef:f0:32:0f:03:9b:b9:a8:
         5b:8c:6e:7c:a7:0f:e2:df:47:94:9f:0f:0c:f7:fd:49:21:48:
         18:42:3c:88:52:4f:f8:72:74:df:ce:67:f9:e9:4a:00:7e:8c:
         1d:31:a3:2c:ae:43:56:53:3f:c4:49:9d:97:77:d4:95:9b:0f:
         ee:1d:bf:f6:00:e4:4d:93:0a:69:c2:66:36:8e:6d:71:c4:ff:
         5c:0b:5c:69:00:0c:be:e5:3b:28:5b:fa:8f:b8:b8:46:e7:b6:
         b4:d2:37:81:e6:2f:f4:ba:28:81:23:ff:e0:a3:a7:ad:14:9c:
         28:ec:2b:43:16:00:5b:fe:06:0d:17:ce:17:7d:ba:c3:19:56:
         8a:fc:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----