Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          qzWkNFiXuw6EBAM78Tw9vm0ceGize7n79GJ6d5RSkh0=
Subject key identifier:   29:45:F8:F0:19:B8:C4:07:AC:DC:6E:62:95:3F:CA:77:E7:3E:8B:6B
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       01962E99381ED245DFD14CF0A17B3483B928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          139A
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: q2DNyXPT8h4gz/XmGZ1qVWHNS1vQkxr7EFItI8uB5gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:38:1e:d2:45:df:d1:4c:f0:a1:7b:34:83:b9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=2945f8f019b8c407acdc6e62953fca77e73e8b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:a6:b9:17:e1:19:31:33:5c:cd:11:47:14:
                    d9:a4:8e:ad:f7:19:a2:0e:0e:2d:23:15:9c:bd:f6:
                    1f:33:dd:c9:af:46:59:06:d3:57:4c:a4:bf:fb:78:
                    ec:a4:3c:2d:c0:73:ed:55:f3:52:59:73:ee:3a:cf:
                    bf:f6:cf:15:5e:78:b0:f8:24:78:0a:96:8c:0a:0e:
                    11:3d:41:ad:a0:0b:cc:f5:e1:67:4b:fc:b4:38:82:
                    2c:d5:80:b1:e5:41:f3:ae:40:6e:fe:0d:82:54:a7:
                    41:28:36:d9:f5:58:e9:53:77:57:69:95:a7:dc:ab:
                    45:a8:5e:cb:a3:79:63:a6:88:6c:17:99:09:59:f5:
                    59:2d:0f:a2:be:2a:c0:09:82:be:8f:f8:eb:33:8f:
                    ca:15:4c:e8:d1:78:00:13:ca:50:0f:fa:e5:83:f2:
                    f6:62:83:bc:f3:e4:42:10:58:20:d1:9f:86:d6:3c:
                    6a:3f:00:e4:08:69:55:d6:a9:14:5b:87:99:37:d6:
                    2f:1b:d7:80:c1:9b:af:5a:76:57:35:37:df:57:6d:
                    69:40:9a:35:c2:02:e5:b6:c8:df:64:d4:11:e1:4f:
                    40:cc:46:10:e0:ca:72:87:f4:81:e8:19:09:28:26:
                    f3:87:02:f0:94:21:26:6b:72:77:1f:2f:c7:9c:d7:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:F8:F0:19:B8:C4:07:AC:DC:6E:62:95:3F:CA:77:E7:3E:8B:6B
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:af:e2:9c:e1:20:9b:8e:8d:2d:35:31:9f:f8:85:27:63:
         6a:4f:d8:0a:61:74:76:e0:bf:8a:41:48:10:b5:d1:8c:af:ba:
         77:20:34:a1:5e:d2:db:a5:d1:e8:4d:2d:73:f4:21:d8:36:71:
         b1:93:b6:a3:27:ac:22:c7:7b:3c:96:ef:26:2a:e5:58:de:db:
         b4:87:27:e8:5a:5e:27:04:73:3d:64:0f:98:25:a4:ac:76:44:
         91:f5:6a:ee:fb:69:e6:de:98:d9:cd:14:da:12:ba:49:1f:b9:
         cc:d4:6a:09:5b:39:8d:47:f5:b5:6a:12:39:27:08:f8:45:c4:
         93:a9:2c:fa:c9:33:77:83:de:1c:19:30:5d:42:a7:dc:29:c3:
         cd:98:f2:db:f2:2e:bf:00:f4:0c:58:34:c9:ad:eb:de:a6:f0:
         d7:c6:f9:c0:f0:d1:75:2d:14:17:ec:f7:62:48:e9:02:8c:54:
         ed:11:f6:06:15:8d:78:64:96:d4:12:f5:e3:b1:20:bb:7d:74:
         d0:24:b4:e7:d6:14:12:15:db:44:16:a8:e7:e3:4d:48:9c:87:
         29:c4:65:ab:1e:2d:ca:5e:67:84:5d:cf:0b:b9:b8:78:62:57:
         fa:df:f7:25:41:6d:fd:b6:0c:18:06:14:8b:15:28:e6:02:cc:
         31:22:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----