Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File:                     v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier:          Ee0rtzNZjdou0n66+cX/GAaiunSsIEHEB3+5Np4DjiA=
Subject key identifier:   A6:A3:71:0A:95:B5:41:89:37:1D:25:95:B1:88:34:90:CF:B7:74:A2
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer:       /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial:       01962E99B5D25EBAC3EA5392ACE5B93109BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: Vg/xlzjbGvXGsVEPj2W+8X75ypfRawSs7bxAPTAiqH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b5:d2:5e:ba:c3:ea:53:92:ac:e5:b9:31:09:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=a6a3710a95b54189371d2595b1883490cfb774a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:16:86:75:eb:d6:89:f1:9e:19:d7:9e:f3:
                    4d:71:a9:28:5d:36:73:36:b9:16:d1:59:a4:03:6a:
                    3f:fb:12:d6:4c:bd:42:53:e2:4f:ee:d0:fb:32:16:
                    fb:28:b0:1b:ba:24:06:66:67:c7:bd:d8:66:48:ef:
                    a2:83:3b:45:0d:82:4e:02:e1:47:87:e9:29:71:cc:
                    1d:b6:03:29:58:71:82:eb:b5:22:ec:01:df:e2:5e:
                    34:06:d6:d9:c2:22:94:0e:b7:b8:cb:5f:1c:cd:d7:
                    1e:b3:87:e6:2a:d0:27:6f:a6:f7:fd:cc:71:40:0f:
                    d4:35:da:83:21:02:e5:1d:de:9a:b9:35:95:13:57:
                    e6:29:72:1b:06:b3:d1:a7:d9:f7:5b:9b:a4:31:86:
                    2b:3d:a8:3d:8b:8a:f5:28:ed:05:94:29:ec:38:6b:
                    f6:80:bb:3c:57:30:ed:ba:ff:c8:39:73:7a:59:2c:
                    6d:f2:a2:4d:b9:0d:ea:64:a1:17:f2:c6:ab:a7:ad:
                    6b:dc:e0:24:5a:8d:35:aa:ac:17:f3:00:38:16:9c:
                    4d:ca:f6:03:92:f2:14:ee:e5:41:a0:72:71:8a:18:
                    05:33:10:75:00:ee:b8:6e:c8:8e:cd:a3:02:8e:a4:
                    20:aa:4f:94:9d:0c:4e:05:10:99:e2:0f:f4:b6:94:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:71:0A:95:B5:41:89:37:1D:25:95:B1:88:34:90:CF:B7:74:A2
            X509v3 Authority Key Identifier:
                keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:da:b1:b0:ac:84:a5:7c:ec:f9:c4:49:13:4a:52:b3:9b:a5:
         c0:a5:1c:a7:74:1a:45:ff:ec:e2:79:77:08:6e:04:d7:84:b8:
         4c:ff:b9:c7:f0:2d:1e:04:a0:76:16:e1:36:52:e3:4c:1d:ed:
         19:19:6e:7e:76:78:1c:32:8b:2a:eb:55:03:26:cc:b1:44:a2:
         e4:91:62:bd:d1:55:af:b9:85:1b:23:7e:38:a3:5a:18:9c:c6:
         6d:aa:14:4d:e0:6c:41:4b:72:d2:53:2c:8e:90:e3:6a:05:78:
         c9:9a:84:18:5f:72:c9:c3:ae:54:9d:a6:af:d2:5a:2d:60:5f:
         ab:ea:ef:19:a3:0d:7a:5d:bb:a4:40:17:1c:b8:7a:76:e0:9b:
         2f:89:b7:e7:af:17:d8:13:53:58:a6:b7:5d:1a:db:1d:2a:55:
         c9:38:34:33:aa:13:6f:e8:b4:1b:c7:d3:cd:69:1d:ee:e4:7d:
         db:bb:8b:f9:72:e6:b3:9b:b2:cb:db:24:c1:84:5e:51:33:4d:
         59:f8:ba:85:72:79:39:76:c0:51:b8:1e:1d:ea:eb:9d:c5:1c:
         5c:8d:35:8a:a7:cd:73:d5:a4:80:07:8c:2a:b0:bb:83:d7:07:
         4a:cf:6a:1e:74:58:84:f5:f1:74:8c:9d:d8:d4:8c:5c:41:f7:
         c9:90:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----