Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
File:                     4BpLB7xMpvoFciL96uhg9kRAR-A.mft (raw, json)
Hash identifier:          9nBpUneRG2sh2RjdEHLIXacNg6YyjPHMkX3tbMRewkg=
Subject key identifier:   70:40:79:B6:D8:6D:B0:76:B1:6F:B3:BA:9F:B1:E0:0C:97:72:39:A7
Authority key identifier: E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
Certificate issuer:       /CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Certificate serial:       01962E2B0CF19DF9415A070458549D11624D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
Manifest number:          02BB
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 4BpLB7xMpvoFciL96uhg9kRAR-A.crl (hash: coW90q00Ro16dxh0rQEq8JzGSOfsdzqMthiolJlr9rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:f1:9d:f9:41:5a:07:04:58:54:9d:11:62:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=704079b6d86db076b16fb3ba9fb1e00c977239a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:53:e7:17:14:43:01:04:d5:f3:97:e4:65:
                    f0:27:f0:fd:82:84:e8:14:13:7b:f8:0d:4e:61:c7:
                    9a:ef:08:1c:80:1c:65:23:1e:66:37:a3:1a:22:5d:
                    ad:63:59:7d:a1:a1:4e:1e:80:d5:17:ed:82:df:90:
                    7c:05:44:19:06:61:52:24:30:73:47:5d:25:a2:60:
                    cb:fa:70:60:a6:58:bf:22:04:c4:e0:3f:64:11:4e:
                    c2:51:27:2d:e1:00:26:0f:c3:b9:1e:29:f7:a6:12:
                    87:57:c5:e3:34:b9:7f:56:0c:f7:57:11:b4:05:43:
                    6d:c6:4a:6b:8e:09:29:1f:be:2c:99:5b:23:9e:8e:
                    35:f7:a7:cb:0d:1a:8c:5b:4a:3a:47:7f:ec:0b:3e:
                    c0:cb:6e:97:0a:a8:eb:59:76:fd:f6:91:74:d8:bd:
                    45:22:cc:67:3a:b0:82:01:0d:4b:01:3f:d6:38:27:
                    4b:41:cc:3a:8a:0c:b4:bc:1b:8d:31:b7:29:97:87:
                    a3:8c:d0:63:11:22:a1:f5:d7:d7:5d:fa:1f:36:d9:
                    22:f8:33:f3:90:b3:0b:21:f3:86:1f:12:32:18:45:
                    85:e8:23:9a:4a:8d:96:46:b2:0f:bb:4b:b0:65:fd:
                    a8:a3:d3:e4:97:bc:54:8c:33:22:58:1c:15:5b:ed:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:79:B6:D8:6D:B0:76:B1:6F:B3:BA:9F:B1:E0:0C:97:72:39:A7
            X509v3 Authority Key Identifier:
                keyid:E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:13:8b:dd:88:77:83:23:27:23:32:55:01:d2:45:36:9f:7c:
         2e:04:8d:1c:33:a4:2e:d5:c8:15:6b:d1:89:f6:94:c7:ce:5c:
         0d:76:4b:25:94:8a:3b:c1:ed:23:62:0d:cf:fe:bf:49:4d:f0:
         4f:86:7d:02:a9:e2:09:ac:89:61:34:d2:84:e1:21:0d:04:df:
         77:01:3d:35:10:69:14:08:35:ce:a2:fe:09:42:ca:3b:e5:73:
         55:52:6c:d0:e1:ff:11:36:6f:01:5d:20:d0:27:7f:96:b9:38:
         29:53:72:d4:12:b8:5f:fa:fd:b2:8d:e9:e5:c2:cd:59:53:f6:
         74:f4:64:94:7f:15:d8:5d:8d:f3:5c:50:93:7c:3a:6d:b9:af:
         33:48:e8:c1:f9:0f:f0:84:65:1a:62:5f:9e:cf:8e:65:fe:02:
         b3:89:1d:c9:64:ab:91:78:bc:c9:9e:e1:99:04:86:bf:7d:ac:
         05:63:16:27:f8:30:ab:94:1a:cc:e8:c3:7b:c4:9f:40:33:df:
         b3:2f:ea:cf:ac:94:89:bf:1f:70:05:4e:79:f9:73:22:6c:fd:
         31:d0:d7:c6:1c:e4:00:9f:11:1d:5e:d3:59:23:55:38:1d:97:
         eb:0f:bf:fb:53:38:3f:75:7f:a6:14:23:52:63:ac:49:30:23:
         3d:85:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----