Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File:                     bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier:          EiEIFEqGzY5d6uGOiuTJWnFJJ6ZeM4zFYoRhJzNPPog=
Subject key identifier:   76:F8:C4:E2:F4:D0:F4:88:7D:A0:06:19:1B:7B:48:72:40:37:68:D1
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer:       /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial:       01962E6197C3A8B35BAB6CB7EE2498E3933D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number:          0880
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: ehL/hQnvybkegNvuD9+wkjA+Gi4fPgPojWLZCot0pRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:97:c3:a8:b3:5b:ab:6c:b7:ee:24:98:e3:93:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=76f8c4e2f4d0f4887da006191b7b4872403768d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:57:4a:ec:d2:ea:bb:4d:e5:a1:aa:2f:7f:
                    d3:51:fb:00:77:33:3e:87:6a:63:cf:97:ed:6e:88:
                    5f:a6:4e:3d:e3:25:94:6b:1a:c3:ff:9d:e3:06:5a:
                    fd:dd:47:96:c3:d3:7e:fd:a8:56:7c:61:26:db:bd:
                    35:40:89:71:ac:9e:eb:9e:16:37:4a:71:06:66:ba:
                    3d:4c:7b:83:6d:b8:01:e9:c8:8e:00:fd:67:6e:01:
                    58:07:b1:e7:2c:85:51:db:80:ed:1a:7a:a4:bc:d8:
                    75:d9:8e:01:00:17:f7:95:f3:21:bc:d7:69:c3:99:
                    5d:ab:c5:ed:6e:8b:13:59:c6:67:8c:88:48:df:cb:
                    4c:86:6e:97:2a:27:87:32:5b:e9:0d:1d:64:64:f5:
                    1c:49:43:55:bf:f1:f0:97:af:3e:ad:51:84:97:88:
                    d4:c1:68:a7:5d:62:25:51:4a:6e:9b:24:83:1f:70:
                    20:62:c0:ae:95:00:fa:87:64:d1:b1:48:83:0e:35:
                    48:ce:72:ff:8d:58:2a:a5:e8:70:05:d2:1c:72:d8:
                    42:79:6b:5c:24:1b:19:b2:53:fd:7e:12:92:e5:42:
                    de:d7:c5:ff:f0:a9:b5:c7:c0:84:4f:1d:cf:c3:1b:
                    2c:79:0f:f0:4e:38:96:9e:d3:0b:00:26:c0:cd:73:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:C4:E2:F4:D0:F4:88:7D:A0:06:19:1B:7B:48:72:40:37:68:D1
            X509v3 Authority Key Identifier:
                keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:70:55:c0:91:0e:24:57:16:c4:ff:48:5e:82:d9:57:ba:82:
         74:3c:fb:1f:a5:2d:ad:9a:b9:7e:40:de:d5:1c:81:ad:7f:ea:
         c5:70:ca:a8:5b:55:e6:c8:95:a4:b5:33:8d:2f:7d:d9:a4:e9:
         f4:aa:17:02:11:e6:1e:42:f5:fb:87:43:34:bb:4c:94:4f:5a:
         53:fd:18:9d:55:c2:9e:69:67:3c:92:3a:59:20:37:f8:e5:24:
         21:3f:fd:f4:81:06:86:f6:fd:3e:2a:83:29:9d:e1:60:a8:ef:
         db:23:78:07:82:6e:e5:c8:81:dd:34:66:f5:e1:2d:67:7a:9c:
         51:1b:a8:8f:52:b2:85:d0:8f:13:f2:45:a9:36:e3:e7:27:dc:
         01:b0:52:33:4f:99:e8:00:f6:25:76:73:a0:40:24:80:e8:c3:
         32:2c:8d:e9:bd:b0:fe:73:aa:e4:f4:16:67:a4:c4:9a:6a:77:
         f9:a3:27:3f:4d:5e:e4:d7:12:a1:0e:c0:ee:ea:3a:68:69:5d:
         ed:98:c0:1a:81:17:16:a5:24:a4:60:66:40:2e:da:fd:57:fa:
         28:b9:03:03:c8:c9:82:aa:eb:3c:20:5f:c7:db:54:bb:a2:41:
         c6:99:39:9e:0f:bd:7d:78:36:ce:b0:38:ca:e9:06:87:35:b9:
         f7:8f:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----