Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier:          Ek/YtFggYqjd/af51WntMgm4Rbq9HX/eDylJ1XKlWd8=
Subject key identifier:   7A:8A:64:15:1A:81:4C:02:68:8E:C3:C8:10:07:96:6B:06:BB:DD:25
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer:       /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial:       01962F3DBBE15676434980E29C77C90FA4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number:          0571
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: txm1K8hw+UK8N9Ldbk0tP4s3Y3gnRIUVxWV0wDK4CAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:e1:56:76:43:49:80:e2:9c:77:c9:0f:a4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=7a8a64151a814c02688ec3c81007966b06bbdd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:69:93:ef:2e:a3:a5:26:77:2e:bd:d5:d0:
                    60:1b:27:f7:ad:d3:19:66:0e:44:8d:a7:c0:2a:f9:
                    43:05:1d:f7:26:db:45:85:46:6f:b4:cc:bc:12:94:
                    5a:54:6d:9c:d9:0d:2d:39:6c:5d:4c:7c:f3:64:4f:
                    ce:d0:32:c0:4d:1f:7a:0b:c2:b0:80:fd:e1:e7:78:
                    a2:c8:eb:82:57:b2:76:88:61:0d:0f:b0:e1:1c:f5:
                    85:9c:0f:32:03:1a:50:0e:6c:ab:00:a6:66:d5:5e:
                    19:5b:30:bf:cc:87:7d:b3:35:4c:11:64:b7:d0:04:
                    c8:d7:57:23:2b:5b:0d:7b:62:e1:f5:15:e9:b8:2a:
                    85:38:aa:aa:fa:af:51:94:02:b1:73:d4:d5:e4:34:
                    66:b8:92:5a:3b:80:7a:0d:7b:2e:1a:d2:b9:ad:a3:
                    c0:b4:14:28:6d:c9:f7:00:83:f0:d8:18:d3:ee:d0:
                    a5:0d:46:67:ea:0b:30:15:ab:1a:2a:23:39:7a:46:
                    0f:31:f7:b5:a8:f5:97:41:3d:12:c7:c1:ea:bc:a4:
                    57:8a:9c:e7:08:2f:7b:21:01:b0:6c:dc:1e:af:11:
                    b1:27:92:69:18:48:12:1c:fb:5f:ee:1e:0a:b8:22:
                    78:5a:85:a7:73:09:64:94:1a:c6:c4:73:1a:b7:82:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8A:64:15:1A:81:4C:02:68:8E:C3:C8:10:07:96:6B:06:BB:DD:25
            X509v3 Authority Key Identifier:
                keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:99:e1:4b:b1:a2:f1:43:07:57:81:98:3f:0a:5f:34:34:c6:
         90:f7:e9:ff:5a:bb:47:a9:f1:bb:96:9e:7a:2e:a9:b9:63:e1:
         60:a0:5f:9c:a5:7c:c9:08:b2:46:2b:cf:2f:8f:08:f1:61:26:
         af:63:91:3e:49:9a:38:63:24:e2:7a:4c:dd:ce:77:d4:a8:ce:
         e7:78:d0:bc:ea:d3:71:63:69:6c:43:60:70:07:7a:10:0f:d3:
         92:f9:3d:35:28:93:85:a8:65:dd:b6:32:6c:c0:bc:a2:43:4d:
         52:7b:3b:1b:28:ac:6d:46:58:84:84:c7:d4:52:76:96:70:e7:
         7e:b5:0c:27:6e:ed:ab:84:81:a8:8e:f9:95:78:09:26:b5:26:
         87:78:3f:8e:e1:98:b4:98:ab:9d:74:42:d8:02:fb:2a:88:19:
         da:e5:96:fe:9a:7b:4c:df:94:81:24:a3:00:e5:74:80:ef:f2:
         54:89:63:d2:a9:53:59:8e:21:42:7e:fd:ad:18:e1:60:3c:06:
         8a:e6:ac:15:63:84:9d:92:42:44:3d:15:92:34:6a:26:de:52:
         92:96:24:c8:3e:ce:9e:17:74:7c:59:b2:ae:0a:63:17:3f:8f:
         f5:c2:6e:ea:19:48:e9:05:99:dd:5a:6b:95:74:f9:95:62:01:
         b0:ec:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----