Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File:                     BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier:          lck3KkKaVYpdFGXehid5iN72mg1AYO1BBhYQ2Ag3M5U=
Subject key identifier:   F2:6B:B8:43:D4:E0:95:5B:F1:B8:E3:F9:B9:07:F4:AB:78:7C:C7:0D
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer:       /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial:       01962E61F86153BF7ED60AC27388E56F572C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number:          06A3
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: A1SlnkMchRd9F0iOxrbXdUX0kbmXJ/iVIkIi7kCvSa4=)
                          2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:61:53:bf:7e:d6:0a:c2:73:88:e5:6f:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=f26bb843d4e0955bf1b8e3f9b907f4ab787cc70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:02:d8:b6:f8:bf:6c:da:3e:9d:9f:ba:1b:
                    3d:a7:93:4f:9e:cd:ee:f8:17:2a:2a:88:d3:fb:66:
                    3b:a2:af:a7:c1:b3:bd:8e:a3:0a:bf:ac:17:b5:87:
                    b1:2d:60:ee:85:0b:6b:f2:d6:ac:81:06:45:3a:9f:
                    8f:42:41:5d:76:49:e9:df:e2:45:92:a8:01:ed:5c:
                    4a:69:d2:97:4e:cd:6a:e2:2b:a8:f1:e4:9b:d2:1e:
                    15:f1:83:12:0c:12:9a:9d:8a:bd:5f:12:ae:37:2e:
                    ca:66:71:56:f6:09:16:d9:c1:d2:1f:09:00:f9:e9:
                    ae:68:bf:02:10:61:6a:37:69:3e:d9:49:2a:8f:7b:
                    e4:50:5f:78:2f:e6:4e:33:ed:95:b0:6e:06:95:bb:
                    cc:48:e0:84:6a:ee:d9:2e:50:87:87:15:6b:85:62:
                    a0:13:e4:e8:2a:83:97:33:d4:9b:84:f7:28:d7:9e:
                    0e:e9:0e:36:a2:0d:b9:d6:62:51:0c:d0:4f:ad:d5:
                    4a:a2:79:52:a4:ee:ed:2b:5b:36:4d:fc:fb:56:9b:
                    52:11:d3:00:d2:e7:60:b5:0d:d8:68:f6:c7:17:8d:
                    f0:3e:63:2b:77:43:eb:da:48:7a:4f:1e:05:6d:2d:
                    11:82:84:2e:3f:06:c2:83:8b:3f:e0:08:83:ed:0d:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6B:B8:43:D4:E0:95:5B:F1:B8:E3:F9:B9:07:F4:AB:78:7C:C7:0D
            X509v3 Authority Key Identifier:
                keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:4b:ba:f0:cf:40:59:60:89:4e:19:31:c6:82:e7:c0:32:
         77:24:20:19:5d:24:b0:ac:9b:12:6a:5e:dd:4f:0b:b3:98:49:
         40:b9:84:e0:5f:61:58:60:1b:b4:19:76:68:ac:38:2d:df:bb:
         55:bc:1a:c0:19:c0:cb:ba:90:df:28:d1:94:c6:51:36:54:32:
         62:be:40:d0:79:20:ac:28:5a:45:e7:8b:11:91:24:4d:00:32:
         f4:d2:92:43:1b:b5:c4:be:c4:17:0a:34:cf:45:ed:30:64:57:
         8e:93:33:62:6e:dd:cf:86:0d:37:c1:c1:37:db:2d:c6:6f:7c:
         5d:57:89:11:61:54:39:6e:65:8b:1c:14:99:ce:a3:c8:4a:54:
         09:2b:28:bd:6d:f8:4b:82:26:d6:42:17:b0:e8:07:6d:6b:f4:
         7b:6f:d3:1d:aa:fd:0f:b7:7f:b6:31:74:dc:73:52:79:c3:82:
         b4:b4:60:2b:fc:04:53:c0:3c:b4:c1:cf:9e:e9:13:24:df:07:
         76:09:be:4d:0b:33:07:b1:3a:d6:02:a4:eb:77:a6:97:1d:7b:
         2b:8f:ad:a2:a1:98:44:0e:ad:60:5d:5e:63:ed:6d:76:c7:aa:
         e4:78:29:c9:2d:9c:2a:43:25:03:af:15:3f:a8:93:ff:35:1e:
         08:16:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----