Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.mft
File:                     bLdrU2M4PWjlVeUnClkx2DQOGA0.mft (raw, json)
Hash identifier:          bjvqjMcUXUtVch25jeKboKOF/LR0kBgVU6LE0EVlqJo=
Subject key identifier:   56:25:F4:80:70:58:64:DB:72:A4:04:03:A1:BA:3D:57:28:D4:3F:DA
Authority key identifier: 6C:B7:6B:53:63:38:3D:68:E5:55:E5:27:0A:59:31:D8:34:0E:18:0D
Certificate issuer:       /CN=6cb76b5363383d68e555e5270a5931d8340e180d
Certificate serial:       01962E988ADEE637FF328D2C8957CC42B6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLdrU2M4PWjlVeUnClkx2DQOGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.mft
Manifest number:          0C77
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: bLdrU2M4PWjlVeUnClkx2DQOGA0.crl (hash: pMZtAkoOUQV+22du2ZLEtNRM+AsejSDRmRMoSsDmVZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8a:de:e6:37:ff:32:8d:2c:89:57:cc:42:b6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb76b5363383d68e555e5270a5931d8340e180d
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=5625f480705864db72a40403a1ba3d5728d43fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:92:85:64:67:f0:49:8d:fa:de:64:0a:3b:
                    70:dc:78:84:3d:e7:43:01:09:ed:fa:c0:ab:49:2f:
                    99:1a:a2:3c:c2:24:76:90:e8:49:66:95:d3:07:df:
                    d0:ba:81:b4:fe:24:4a:80:8a:fc:91:3d:d4:04:90:
                    17:af:d8:9e:34:8b:09:de:3a:46:91:41:6e:1e:6b:
                    dd:95:fb:c0:3e:19:bd:d6:e3:c1:96:1a:a8:55:a6:
                    71:17:55:57:9a:fa:30:cc:96:c4:9a:c9:d7:f4:34:
                    f5:16:79:01:79:79:f4:58:46:47:fc:26:ce:c2:3f:
                    c8:38:ce:e0:94:e9:41:ca:52:dd:b6:cf:2f:27:ec:
                    50:a7:92:7c:4e:fa:0c:e8:df:f8:35:b2:0a:b8:00:
                    cf:13:22:00:88:79:b7:32:f8:42:4e:99:87:d3:51:
                    df:eb:e4:94:b6:5d:18:e5:9d:50:1e:16:99:1c:37:
                    a4:96:3f:db:28:8e:1b:d3:71:39:8e:c8:c7:12:6e:
                    11:b4:a1:94:2c:ff:a2:e1:63:80:7c:2b:fa:8d:e3:
                    8b:54:0f:cb:cf:ed:fd:6d:23:fc:4c:49:87:9b:af:
                    ef:d7:13:84:3a:3f:d9:18:0f:d0:5f:f4:79:e8:85:
                    84:47:5b:f0:2b:ff:bd:64:4e:79:60:3d:52:6d:e2:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:F4:80:70:58:64:DB:72:A4:04:03:A1:BA:3D:57:28:D4:3F:DA
            X509v3 Authority Key Identifier:
                keyid:6C:B7:6B:53:63:38:3D:68:E5:55:E5:27:0A:59:31:D8:34:0E:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLdrU2M4PWjlVeUnClkx2DQOGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:b1:06:bf:b9:54:16:5f:e9:ed:6c:2f:ba:92:c5:62:05:
         bc:26:3b:70:09:48:70:6d:be:ae:ff:72:c4:ff:14:27:f0:8e:
         b3:8d:6d:e4:e0:69:82:b9:c0:38:bb:5d:6e:71:01:05:05:b7:
         01:5e:b9:01:6f:61:2f:52:4c:3a:1c:05:01:2a:27:e5:ec:28:
         51:21:4e:65:ae:f9:b1:f8:30:fb:16:05:b0:a9:45:43:12:34:
         c8:8f:8c:f5:93:61:00:02:ee:ac:63:a5:d4:df:7d:fb:30:d7:
         b5:26:fa:72:53:82:38:a7:c2:ac:48:53:c3:70:70:a6:ed:58:
         eb:24:fd:06:6f:e8:3e:8f:81:46:31:a0:de:50:ed:27:44:4c:
         c5:ec:f0:a8:8f:73:1f:d6:03:9b:d2:de:42:a0:ab:20:03:e9:
         ea:40:05:86:ed:80:65:68:4f:8c:89:35:a8:04:48:f0:fa:f0:
         cc:90:f7:9f:c8:40:b4:36:d3:8b:01:56:fd:e3:3c:33:5d:5b:
         3f:28:c6:7f:54:93:e9:26:33:46:1f:41:e8:ed:9e:60:2f:39:
         6a:0d:0e:72:f9:c5:71:0f:98:40:a6:3c:69:38:b8:87:77:da:
         80:db:7f:a3:83:af:86:05:6f:0b:52:dd:52:b4:45:68:18:26:
         e6:7a:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----