Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File:                     bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier:          MhWfr+RCoPz57WDkhDuOlVo7vfhFJaAqdxM+5qU2tVU=
Subject key identifier:   5B:12:5E:D9:57:15:89:2D:D4:8D:67:11:3B:17:51:87:8B:45:ED:0E
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer:       /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial:       01962E61CE17F2704CE6DBF4BB3387FC3E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number:          0E56
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: kto1ByhOibzol4pv+WvqM3uSfZLn5DMjabGbhudIZVs=)
                          2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
                          3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:17:f2:70:4c:e6:db:f4:bb:33:87:fc:3e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=5b125ed95715892dd48d67113b1751878b45ed0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:a5:45:7d:d1:d2:df:88:46:05:1a:bf:c5:
                    7f:96:0f:b4:53:db:28:9c:c9:77:82:db:1f:d8:b2:
                    f7:98:84:6b:74:30:11:65:e8:71:31:52:63:92:f2:
                    9a:47:96:6d:a9:3c:91:08:a8:f9:15:4a:de:7c:5a:
                    aa:18:27:49:64:85:a3:c4:03:d0:92:e7:eb:e5:ea:
                    c1:22:76:8e:7e:aa:e6:dd:22:18:2e:f6:c8:58:9e:
                    3c:d0:5f:f4:40:ed:21:f6:ef:8e:0b:bf:40:05:74:
                    58:bc:13:ed:48:b9:af:69:29:d0:38:38:0c:33:9f:
                    0d:bb:d2:ca:1d:96:c0:3c:0c:7b:10:ce:86:d0:d6:
                    37:da:46:16:72:83:ce:03:e9:7c:06:8c:09:04:e7:
                    09:27:41:71:b0:9b:fe:24:6c:92:0b:24:fa:ab:34:
                    3e:b4:67:61:a3:15:81:48:e4:e7:98:8d:ba:7e:0e:
                    60:3a:d2:c5:e1:2a:e9:3a:b7:36:69:24:57:ed:43:
                    8b:71:73:9b:96:86:b6:0b:a6:43:bb:4b:97:fc:6d:
                    01:f8:af:84:35:fe:bd:77:0f:1e:c1:2b:ae:91:a6:
                    e4:4d:0f:a6:28:dd:2b:fd:3f:0a:0f:4b:d5:93:f6:
                    08:97:d0:4d:9f:89:f6:02:82:4a:62:d7:9b:b0:dc:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:12:5E:D9:57:15:89:2D:D4:8D:67:11:3B:17:51:87:8B:45:ED:0E
            X509v3 Authority Key Identifier:
                keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c6:b9:5e:95:b0:51:c9:51:d2:b4:47:4b:03:af:60:20:e1:
         56:90:21:ba:a5:60:b8:25:5f:26:a5:b5:43:45:b5:f6:3b:56:
         b0:c5:f5:81:9b:25:0e:0a:04:82:34:de:e9:b8:fb:c9:2a:fe:
         00:ea:1a:a2:34:ca:5a:55:39:dc:74:c1:62:a0:db:0e:43:e0:
         d9:f0:6a:d2:d5:da:fc:ff:c9:c6:40:dc:38:4f:ac:ff:29:27:
         49:a8:f1:42:ab:9a:c8:8e:02:cb:65:9a:ab:12:f2:19:41:12:
         e1:43:36:35:18:24:79:66:6b:b7:24:3d:53:d1:c7:6e:a4:e0:
         25:2e:5b:1d:08:34:6b:87:fa:53:21:af:47:38:ae:52:c2:cd:
         07:40:27:b7:b9:f4:37:5d:56:7e:8d:99:92:c3:d9:e7:36:a1:
         c2:e9:c6:37:13:7b:7b:df:33:b8:ed:f5:bd:b4:bc:28:4c:14:
         0e:45:3d:33:f7:40:93:95:0a:88:d9:69:d6:96:d2:fe:4a:de:
         6a:8e:20:b9:a9:b0:8b:64:be:87:db:be:f7:fb:8f:d7:82:7d:
         cb:e8:c9:2d:5e:82:e7:ab:8f:3a:ed:47:f6:08:25:8b:09:53:
         e0:c4:47:f6:b7:6b:be:21:3a:0c:2b:c0:23:ce:f9:ef:13:21:
         3a:c5:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----