Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File:                     BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier:          dh016NA0CRTQ1XPdGv3IH/SaaNOolBpQtJjHh2ffQuk=
Subject key identifier:   93:16:29:A9:DF:83:6E:A7:B8:3D:B5:F1:22:78:E3:C3:44:B3:4A:2E
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer:       /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial:       01962E988B93B9EB62391CD53750CCC7D580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number:          0C22
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: 0A9rPZGkAgvaAqMwt+d3oCRlZBS3FJN4hFgA/b+KH+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8b:93:b9:eb:62:39:1c:d5:37:50:cc:c7:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=931629a9df836ea7b83db5f12278e3c344b34a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:ea:01:2c:a5:10:73:4f:ad:f0:a3:e1:0c:
                    26:ac:ec:20:72:12:cc:0a:a2:9e:47:ab:fd:86:27:
                    33:2b:4e:6a:8c:b3:83:85:e4:77:19:69:80:e1:e2:
                    bb:f5:3d:ca:a0:ed:02:10:2a:d2:be:52:0e:71:53:
                    09:66:a7:ba:bd:5f:f7:12:55:66:44:69:9b:0d:52:
                    ac:cd:13:90:5a:db:ca:fc:95:87:88:56:e3:60:57:
                    98:c1:10:56:a4:2e:10:3d:d7:6b:01:1e:d0:14:e6:
                    d0:38:38:bd:47:c6:23:03:d9:4b:0f:50:07:d4:fd:
                    a5:ef:10:2e:18:c5:f9:b3:81:84:db:a6:ee:2c:14:
                    80:75:c4:ea:01:88:05:a5:aa:01:67:f8:8f:7d:6b:
                    d4:99:cd:fd:bc:e5:3f:2e:3c:f1:b8:21:7f:4b:58:
                    5a:a2:90:90:e3:f6:83:03:2d:42:29:4e:04:f3:c9:
                    bf:0e:9e:dc:ab:8a:70:8d:d1:73:63:11:e1:9b:a1:
                    7b:e6:d6:6e:de:44:82:35:09:c3:c0:aa:18:e1:e2:
                    53:22:66:58:3a:d5:20:18:aa:bf:4b:bd:75:ac:85:
                    6f:62:cf:ab:a0:e4:0a:d6:13:29:d9:64:36:34:9c:
                    0a:99:e7:d6:74:6f:5a:1f:34:af:7d:da:38:3c:33:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:16:29:A9:DF:83:6E:A7:B8:3D:B5:F1:22:78:E3:C3:44:B3:4A:2E
            X509v3 Authority Key Identifier:
                keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:39:5d:e4:40:d5:0a:ba:8c:c6:bd:2f:71:e5:6a:d2:75:
         3d:80:6a:fa:46:de:b8:75:eb:25:ac:1f:5f:38:a6:f7:dc:5b:
         48:8a:3a:1d:71:b1:7a:06:53:a7:3d:6a:29:a7:51:7e:6f:5c:
         10:57:98:68:39:9f:6a:8c:9b:14:2d:e2:a3:a6:57:9d:4b:a7:
         42:f7:63:bb:b9:08:d3:74:ed:a0:22:b2:e1:04:d1:ea:2f:36:
         89:cf:ed:3f:1c:2c:dd:be:d8:9e:db:72:fb:b9:59:be:de:9d:
         7a:0d:b7:81:e4:07:a0:8a:68:ee:26:52:ca:d2:68:5f:70:7c:
         18:02:a6:c3:27:05:c4:db:b0:ce:91:08:54:a0:3f:5e:72:b7:
         65:44:a2:6e:2b:c3:10:c2:7b:39:7c:31:a7:5d:dc:00:61:e1:
         e8:e2:f2:e2:00:d7:a0:ad:c0:5f:c0:bc:88:96:0f:14:16:c2:
         e3:d6:62:d1:97:48:a8:d7:9d:85:60:4a:5f:23:a9:a9:b6:20:
         52:70:85:57:73:74:f6:8f:5a:6d:f5:a4:25:76:0b:e8:92:45:
         7d:0a:aa:5c:f8:a8:4f:f7:9b:9d:5e:19:69:b7:c2:4c:d2:45:
         01:3a:91:46:4c:21:41:5c:66:a0:fe:18:36:1c:27:c2:89:f2:
         1d:de:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----