Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File:                     BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier:          iy5B7a/M9NtG9GsVyG6ir5Bwv0W2GWuxbdC1LL5aVKk=
Subject key identifier:   9F:B1:4B:7C:D2:E9:4C:83:1A:37:BD:76:08:B1:94:41:71:F4:15:E1
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer:       /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial:       01962F74611D02C43DBECFE6E8DBC01791FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 7ONHmc9h9PM/5aE/knL1Q6jVBjFzcva9tZjS60oYRxU=)
                          2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:61:1d:02:c4:3d:be:cf:e6:e8:db:c0:17:91:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=9fb14b7cd2e94c831a37bd7608b1944171f415e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:0c:94:55:5c:d7:9e:79:14:17:14:50:35:
                    f6:9b:05:72:68:3b:cb:4b:b9:21:cc:d0:cd:86:55:
                    ba:a7:30:46:d2:d1:5f:e6:8b:6a:9c:18:25:8b:5e:
                    2f:39:6a:5c:17:27:87:cc:ef:fd:2e:08:78:54:76:
                    23:97:ec:0d:0a:11:34:91:ec:3e:2f:86:38:68:f8:
                    50:ec:b4:8b:7b:9b:67:09:fb:f2:33:3c:78:33:c5:
                    1d:31:13:f1:be:65:3d:1b:d4:dd:6f:ae:40:92:88:
                    b0:54:bd:ec:20:f4:f4:d0:99:d2:05:f1:ae:a3:27:
                    d0:dd:be:41:7c:bd:e3:48:a8:af:1d:fe:97:1a:84:
                    0f:8d:85:fb:fe:3e:c4:df:34:d7:dc:f1:b7:07:de:
                    7f:8a:bf:f8:a8:a3:c9:4b:4e:68:83:af:f2:4d:58:
                    eb:27:cb:ba:6a:ba:b6:1e:b2:12:7b:f2:a7:b7:5a:
                    98:5f:cd:a9:36:f2:aa:39:9c:cd:ab:58:ef:9a:6e:
                    a6:e5:25:4c:37:7f:2c:7c:b2:3f:15:ef:fd:83:cb:
                    37:5e:ef:77:6f:bf:12:cf:cd:ce:6b:bd:0d:59:15:
                    9c:a5:52:2c:24:02:27:6b:8b:b4:cc:06:df:57:d4:
                    63:0e:37:6b:29:98:b5:eb:06:72:52:71:26:fb:64:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:4B:7C:D2:E9:4C:83:1A:37:BD:76:08:B1:94:41:71:F4:15:E1
            X509v3 Authority Key Identifier:
                keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b8:08:ac:82:9d:8f:84:75:9b:d2:15:1b:06:27:d2:9b:a1:
         b5:8b:6f:9a:9e:28:9f:44:3c:3d:77:ac:4f:69:df:44:eb:2c:
         87:00:ed:32:e8:ac:10:bf:69:09:fc:6f:53:55:3f:41:d2:5e:
         48:00:7d:d9:86:5a:88:b1:63:8f:37:58:6a:e8:c6:6c:ac:cc:
         f5:f6:be:50:1e:1e:54:75:34:73:b0:af:0b:7d:a8:b4:8a:10:
         77:ef:f5:31:c0:94:25:3e:19:b5:50:5a:b9:5a:d0:a6:22:d7:
         2f:b9:36:27:6b:21:ca:d4:b2:4a:fe:a8:c4:3c:ea:31:5b:cb:
         4d:14:98:2a:e0:0a:40:2e:d6:36:8a:80:9a:56:6d:3e:6d:bb:
         81:4b:11:27:f5:ad:16:d0:03:ea:ce:b3:89:fc:77:02:15:7b:
         33:a0:ad:d7:7b:c8:13:27:85:48:85:0f:1a:c7:de:89:f8:50:
         02:bc:b6:d5:91:83:55:b5:5f:cb:20:bf:4e:a2:2c:77:96:09:
         c9:f8:69:08:b5:06:99:52:a6:65:e3:02:e8:5d:58:59:14:aa:
         dd:aa:46:68:4d:36:fd:28:72:8d:66:b0:bf:ce:1a:31:36:d0:
         0f:cb:d2:03:50:3d:31:6e:08:ab:f3:f4:c2:e0:cb:24:17:4e:
         1f:70:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----