Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File:                     u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier:          rEsNF3cnJ7WFFTrwp8G/1SN6mK56eoU0pn8PeyI0YmA=
Subject key identifier:   69:94:65:D6:61:38:74:23:95:8B:F4:23:14:FB:02:F1:2F:99:5D:E4
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer:       /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial:       01962E98F2AA3E3276A9BA74E86585083148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: L05f/BV6Ev0oTrdBwrs/4txLBsx4/iegco+kzMIUYSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:aa:3e:32:76:a9:ba:74:e8:65:85:08:31:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=699465d661387423958bf42314fb02f12f995de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:d0:2d:14:df:ed:8c:d5:d6:bc:f5:97:a9:
                    00:de:3f:9f:82:a8:bc:df:a4:61:57:ac:79:79:cb:
                    38:19:0b:75:e2:40:65:ab:a8:9d:6d:5e:d7:09:4d:
                    ca:17:30:d0:a2:e2:ed:2c:ca:bb:72:67:7a:18:19:
                    dd:1f:81:14:bd:8a:de:fd:02:b8:de:cf:be:a7:c6:
                    f8:b7:80:e9:d0:c3:c1:f4:db:8c:47:44:2d:83:0d:
                    d1:71:82:74:4a:3f:37:b3:27:b6:f1:a9:ab:54:73:
                    ea:01:a7:df:02:42:b1:ca:84:5d:59:8c:38:ee:cd:
                    57:a4:0b:ca:d5:84:81:cc:80:6d:d3:fa:e5:17:6c:
                    58:89:d2:ce:e8:46:4d:c7:4d:57:fa:07:6e:f8:2c:
                    d0:b2:17:8f:7d:b1:2b:d6:f8:b4:8c:66:68:ea:d5:
                    f0:ba:15:2f:ca:ca:18:1e:96:5b:ca:f7:ed:ae:54:
                    1d:99:e6:71:08:32:1c:8b:a7:f0:4f:3d:b5:a5:cd:
                    ef:f3:15:7f:2d:eb:cb:c2:d2:11:dd:8c:64:4b:b9:
                    18:06:9b:a6:c0:07:3b:16:c9:ae:2d:7e:7b:d7:29:
                    59:05:75:26:3f:8c:14:f2:60:e6:0b:07:59:63:d7:
                    9c:07:ac:ae:0f:07:2c:7d:0f:dd:0e:12:76:d8:11:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:65:D6:61:38:74:23:95:8B:F4:23:14:FB:02:F1:2F:99:5D:E4
            X509v3 Authority Key Identifier:
                keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:b5:c2:8a:ff:53:f3:05:ce:12:2e:c3:72:51:5b:f7:2a:
         81:02:f4:7a:47:b5:59:97:e2:c0:15:03:49:1a:07:37:e6:9a:
         c9:07:da:e8:c0:71:84:af:46:9d:9f:e4:3c:83:e5:48:44:47:
         61:99:f0:ff:9b:70:7f:43:20:62:c6:94:26:74:94:56:f1:63:
         20:b7:4c:39:e3:b5:f2:b2:b9:07:86:37:ba:03:7f:b1:0b:03:
         5d:83:3f:68:27:85:ce:5f:0d:ed:8c:4f:9e:ee:70:c3:8d:2b:
         36:5e:c3:f2:71:c9:11:6d:cc:de:72:46:91:47:fd:cf:23:c9:
         dd:96:8f:f4:85:81:19:9b:66:4c:7e:ac:19:ee:c0:63:6f:81:
         00:e9:e9:23:b8:13:ab:ad:46:b7:02:60:46:12:30:57:d2:08:
         a3:a7:7e:5d:2c:15:ad:58:3f:25:0f:f9:d6:aa:0a:7a:e4:de:
         60:83:8e:f9:a5:8d:ad:9d:00:49:ba:16:88:4a:82:1b:16:d0:
         31:51:42:a7:61:7b:62:52:da:c2:ad:8d:3d:08:b4:3e:59:7a:
         91:71:23:25:4f:c0:4c:1f:30:5d:45:c3:44:7b:e2:d0:b2:8d:
         d9:9c:bc:e0:d8:65:b1:16:ec:ba:4d:bb:0d:35:17:45:51:6d:
         fe:23:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----