Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File:                     bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier:          3Ve7mMt/0RCDqYeeFCN48u1HPXfYFi25pjR81zBPOVM=
Subject key identifier:   E3:D4:AC:33:60:EC:2C:A7:C3:BB:DE:E1:85:28:5F:28:47:04:96:D4
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer:       /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial:       01962DF3DFF1217ECB897AE01413A0C07E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number:          010E
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: iJtIbdYiAuHgD9c1kYCia0OrCferg8ve2n0tjcFNOTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:f1:21:7e:cb:89:7a:e0:14:13:a0:c0:7e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=e3d4ac3360ec2ca7c3bbdee185285f28470496d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:99:ae:9c:cc:74:4f:7a:d0:4c:7c:d5:a9:
                    15:4a:34:af:de:74:da:b8:7e:a8:6e:ca:9c:fe:ec:
                    9a:1f:4b:1d:46:ef:37:7d:30:c9:89:c3:31:ef:31:
                    af:bf:78:26:53:93:14:1c:01:2c:d9:a8:10:17:fd:
                    f6:ca:7a:aa:f9:68:f2:c6:64:16:47:c0:b8:bf:d8:
                    42:bc:16:d2:6c:d4:c9:64:bd:85:65:e7:10:5b:f7:
                    15:8c:94:e1:b4:91:4e:c9:5e:df:1a:9c:8c:01:b8:
                    dc:5b:b7:0b:d0:ee:0d:01:21:ed:bf:12:44:09:9e:
                    5d:7e:7c:89:66:80:57:c7:de:a4:32:e4:34:93:72:
                    98:b2:9e:5a:82:45:c2:34:a1:41:8a:6f:5c:45:ec:
                    a4:6a:83:d3:f7:95:ef:fc:80:19:5b:e5:8a:cd:08:
                    1a:50:89:80:0b:6c:4d:ba:13:4f:2f:43:8c:71:e5:
                    fa:a9:53:46:0a:1e:bb:bb:ef:df:b1:e7:bf:6e:d0:
                    92:30:10:40:fe:99:16:8a:bf:ec:be:41:3b:a3:c1:
                    e9:87:7c:ee:9b:03:e4:ad:dc:66:fe:88:28:52:ef:
                    45:21:bd:56:21:7a:88:30:ea:50:fd:a4:34:b3:f4:
                    de:6e:1b:37:49:e7:98:1e:60:6f:12:cc:ba:e3:5b:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:AC:33:60:EC:2C:A7:C3:BB:DE:E1:85:28:5F:28:47:04:96:D4
            X509v3 Authority Key Identifier:
                keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:54:d6:f2:8b:03:6a:db:2a:81:ea:20:24:fb:fc:07:df:
         f6:00:33:ce:5d:cc:06:91:0b:45:e5:bf:6e:45:22:e6:36:70:
         8e:98:33:db:e1:b7:3a:4f:26:bc:6e:bd:76:ee:a4:44:e8:da:
         ce:2d:b2:22:ef:fa:2a:0f:ce:07:2f:67:e4:45:0e:cd:9e:50:
         1c:d5:11:2d:71:e7:c9:14:e4:00:9c:8a:18:af:1b:93:0b:6b:
         9d:4f:8b:55:60:3b:3a:b9:6e:a5:cf:ad:75:5c:55:bc:eb:4b:
         34:87:73:cb:20:8d:63:20:28:ee:dd:4d:d9:d8:81:fc:40:5f:
         ac:c5:2a:37:50:22:d7:8b:dd:a4:a0:7f:19:21:d4:b9:eb:f8:
         b8:ba:31:3e:04:47:d2:c1:d6:10:d5:2d:3c:5a:ce:9f:0e:b9:
         3c:e2:68:56:e9:69:20:16:af:43:3b:9a:16:9e:ba:d9:e2:1e:
         cb:60:b1:36:9a:9c:ac:f9:9f:9d:7a:dc:d4:f1:aa:f9:85:06:
         76:41:23:c0:7c:e5:db:32:48:f5:8b:10:35:6d:96:d0:56:6f:
         6d:65:b8:40:8f:c4:10:25:b9:6e:df:7f:da:1c:9e:97:24:25:
         5f:4d:76:39:fa:5e:40:91:5f:b7:20:97:c4:b9:23:3a:77:f0:
         7f:27:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----