Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
File:                     tbU9N1ctag--wt36NciFiLsbKSg.mft (raw, json)
Hash identifier:          hKiPOGtRqfqZZCdKs0FeAMBT5SQK2AEkgPmINpk44R4=
Subject key identifier:   CB:F4:FD:5B:14:EE:A6:04:CB:DC:45:72:86:09:84:D2:4B:5E:56:47
Authority key identifier: B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
Certificate issuer:       /CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Certificate serial:       01962F3D8C93C446E8C28CEC4A748E1E2CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
Manifest number:          3E
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: tbU9N1ctag--wt36NciFiLsbKSg.crl (hash: JDS9d7NRNhQ18Uhn5KQbe6+9m4CL8zAUpYbAtC+N0b0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:93:c4:46:e8:c2:8c:ec:4a:74:8e:1e:2c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=cbf4fd5b14eea604cbdc4572860984d24b5e5647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:a7:7e:4a:58:54:c2:ce:4f:7b:06:81:d9:
                    a8:1f:17:60:2e:71:a7:c5:6a:76:13:7c:c9:cc:c6:
                    f4:25:14:62:2f:d4:f6:4f:0e:03:ea:c4:1f:03:4f:
                    1f:31:c4:cf:17:a4:72:d4:c0:b8:ca:ec:28:43:b9:
                    1a:38:f4:30:08:41:f0:31:a5:2e:d5:77:01:33:94:
                    d1:f9:49:e7:f2:d4:ab:d8:05:bf:3f:ee:e0:00:0f:
                    63:32:51:90:28:d6:01:99:b9:98:6a:f0:47:6b:da:
                    bb:8b:4c:3c:4a:4d:9d:02:63:61:62:c0:4f:14:e6:
                    6f:6f:3a:06:89:7a:e5:5f:0a:29:06:37:ab:39:d0:
                    1a:40:df:dd:d0:70:9c:4c:69:2a:0f:a9:10:94:34:
                    1b:1e:fe:fc:3f:e7:5e:fa:99:e0:0d:48:f9:9f:84:
                    2d:08:5b:4b:9c:dc:02:05:81:78:8f:3d:36:db:a6:
                    ff:f5:ac:ec:8a:fd:f6:da:17:d8:8d:1d:1c:62:bb:
                    23:71:46:5f:95:46:6d:1a:68:0c:a6:81:b8:97:6c:
                    93:74:4a:03:ab:95:62:1f:3e:49:67:8d:b7:7f:f4:
                    a9:a7:dc:d0:76:5d:c9:f4:50:d3:9b:fd:da:91:51:
                    10:94:d5:40:18:e6:2a:8d:8b:4d:1f:f0:e3:03:f0:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:FD:5B:14:EE:A6:04:CB:DC:45:72:86:09:84:D2:4B:5E:56:47
            X509v3 Authority Key Identifier:
                keyid:B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:bb:4b:24:86:d3:4b:b7:fe:cb:6f:ea:56:b5:2a:84:f2:
         56:d3:7a:b9:15:2d:0d:d2:13:6c:09:cf:c7:f1:96:3e:9a:db:
         d3:46:12:d9:dd:5c:3d:0d:ab:0f:70:e9:b6:3f:ce:9b:d8:ea:
         2a:67:2b:05:d7:13:0e:b3:26:37:93:fe:45:ec:b5:68:83:50:
         60:46:0a:d3:a0:cd:64:79:f9:6b:14:60:c3:cc:b7:93:ee:a2:
         01:0d:87:d8:11:12:4f:49:5d:c6:45:67:c3:99:71:39:45:36:
         52:df:25:07:88:c5:48:8d:b2:77:fc:cd:03:3e:b6:9d:e4:4e:
         74:dd:ef:32:68:e2:f3:ad:f7:8b:2c:8b:89:51:fd:c5:7a:a1:
         2d:52:c4:10:3f:c7:c3:2f:5e:09:c2:c8:23:cc:0f:19:f9:79:
         37:9d:a7:32:60:6d:26:42:0b:06:c3:83:04:6a:86:3c:5f:46:
         20:0d:61:6e:19:d2:6b:f4:06:3d:ee:03:ac:83:dd:6e:a9:e5:
         9e:32:92:eb:5b:a6:c9:f5:0a:6c:c4:b0:22:82:71:b4:b6:66:
         26:04:97:e9:8b:7d:b6:f5:9a:d6:3f:cd:d7:88:ad:40:21:34:
         c1:55:ae:c3:22:ec:c7:60:0a:92:1c:8d:f5:b6:63:93:c3:26:
         1b:2a:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----