Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File:                     vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier:          2YSR5+zV+86OhqocyWyFx90f40bJhpGbpPhB3xuRlG8=
Subject key identifier:   39:4A:D4:5B:EF:DA:84:73:1F:90:1E:95:1B:7E:BA:44:F8:F3:60:B5
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer:       /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial:       01962DF455AAE67D283EDECEEF4A77A5D601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number:          0B3E
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: J3HwcfBOg6csrA38u/P0vq7f8a6906ne1nAObSjNsjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:aa:e6:7d:28:3e:de:ce:ef:4a:77:a5:d6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=394ad45befda84731f901e951b7eba44f8f360b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:11:4a:ff:e9:af:97:ba:fc:de:fe:7c:66:
                    be:c5:db:89:80:a2:9e:ce:72:ee:5c:72:5e:bd:e9:
                    5f:47:1e:d6:f5:84:af:c3:13:62:82:84:b1:03:c4:
                    88:46:fc:92:07:cf:a3:dd:2e:f5:c3:2d:be:d5:96:
                    9f:5c:cd:a6:25:1a:68:9f:3d:1a:8e:05:86:7d:8f:
                    82:83:c0:c4:78:14:61:f9:ed:42:cb:1b:5f:c7:78:
                    8d:db:e3:43:9b:62:db:89:4b:26:06:ee:3d:70:2f:
                    81:ed:e5:18:f9:02:4a:5e:eb:7d:05:3d:cf:e1:ab:
                    b7:23:83:56:66:0c:26:b8:7a:09:cd:7c:fb:3f:b8:
                    51:00:3a:e9:ae:15:c9:6b:04:43:db:82:78:94:95:
                    81:dd:6e:f0:b4:5a:35:d9:19:f8:21:a0:30:37:0b:
                    86:63:2c:5f:7e:84:b5:21:db:b7:58:16:3c:5d:fc:
                    fa:ce:0a:35:07:56:9e:ed:bc:3d:43:32:aa:82:12:
                    77:74:c6:1c:e7:ec:0a:9d:26:11:e3:75:ff:94:21:
                    d9:13:eb:58:60:d5:ee:a4:e7:b5:98:3c:ff:c0:4d:
                    81:b0:9c:df:19:55:18:65:dc:bd:71:7c:4b:ca:0d:
                    29:52:78:bd:f6:f2:b7:bb:0e:26:45:8b:82:e0:27:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:D4:5B:EF:DA:84:73:1F:90:1E:95:1B:7E:BA:44:F8:F3:60:B5
            X509v3 Authority Key Identifier:
                keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:b2:dd:b7:49:7d:67:f9:a6:2d:99:d8:2d:c3:44:4f:72:
         31:a7:20:36:e1:44:32:87:95:2a:97:02:28:a2:4c:1a:f9:26:
         a6:a1:28:11:8a:f9:43:e7:5a:65:5b:09:2f:35:20:15:95:9e:
         5f:e3:4b:7f:c0:e1:d2:a9:12:4a:e9:ca:f3:c0:4c:61:b3:94:
         0f:b9:14:7f:6c:29:7e:f8:56:9b:5c:d1:e1:08:51:ca:64:4c:
         57:bf:f7:2f:b4:c1:23:cf:45:b2:42:46:e7:dc:9f:4f:db:af:
         d3:3b:61:62:f8:cc:ef:00:c4:8e:0c:5e:1b:56:85:73:49:dc:
         10:f7:3e:56:7d:67:01:95:ea:3f:ae:c8:a2:03:08:5d:4a:5f:
         96:5b:9d:06:1a:c0:ca:a8:30:01:9e:25:2b:c0:23:68:f3:a9:
         df:00:bb:09:b7:d9:5b:2f:cc:14:17:73:e6:b7:67:4a:55:dd:
         ef:b8:a9:52:ef:5d:1e:03:a2:fa:e1:37:1c:21:dc:00:ef:32:
         03:32:44:16:7a:1d:5a:3d:46:9f:73:f7:4f:e6:2e:de:4c:cc:
         24:16:c7:ea:35:e1:64:2b:e5:d2:2c:37:1e:9f:50:7f:7f:3e:
         d3:75:17:c3:cd:d0:42:99:87:c8:53:f2:0f:98:87:91:ff:e7:
         4d:d6:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----