Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File:                     b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier:          8bwUpDdN+LdNf16eK2p2ewP8gwH27v/mwQtMc6jWdmQ=
Subject key identifier:   A7:D2:D1:A8:EE:DE:94:4E:98:A9:6B:6F:9D:FD:7D:79:01:9E:63:59
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer:       /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial:       01962F06DA7C56FD2C52DA358CEFA9A10758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: WmKyF5LMrk5gleXILtGCgbkFT8A3lG7FbfD11TF8nBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:7c:56:fd:2c:52:da:35:8c:ef:a9:a1:07:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=a7d2d1a8eede944e98a96b6f9dfd7d79019e6359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:38:1e:11:dc:f5:3a:3b:5e:8e:c7:05:33:
                    83:c4:5e:39:ec:92:e5:d5:51:62:4a:74:93:be:65:
                    90:ae:5b:5e:7d:7e:6d:2e:40:a2:a3:05:a9:05:49:
                    50:56:bf:02:bb:4f:88:04:29:be:85:8e:36:01:a9:
                    9a:99:ff:ee:fc:4e:14:d5:11:16:51:d4:71:f9:df:
                    5a:f3:60:92:0e:e1:82:4d:79:5f:ef:1d:7d:3e:1f:
                    b2:47:41:3d:7e:0e:d0:2d:bd:e2:ae:fe:b4:eb:27:
                    9c:2a:4e:67:f3:8b:a3:c2:1d:c7:ae:e1:bf:7f:e8:
                    25:b6:98:ea:89:e5:c9:cd:fc:00:fc:36:23:a5:45:
                    77:46:bf:cf:46:2c:48:e4:46:4d:f0:db:f3:51:cf:
                    f6:88:1b:23:00:db:0b:e2:3f:f0:52:89:16:be:d1:
                    40:49:36:ee:be:cf:33:b5:e5:7a:3d:3b:3e:68:dd:
                    a2:f2:fe:1a:ef:6d:58:43:ba:86:65:d0:d3:a7:b0:
                    f6:d9:44:78:f0:48:2d:ad:01:6c:a8:7c:49:41:b4:
                    ac:51:79:17:36:0a:e9:b1:6a:45:54:f6:0c:bd:5f:
                    4b:e5:dc:3b:93:2c:15:2e:64:d0:d0:c3:b6:0e:cc:
                    ae:e3:6c:49:ad:f7:95:b2:1d:e6:d3:ec:f6:06:32:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D2:D1:A8:EE:DE:94:4E:98:A9:6B:6F:9D:FD:7D:79:01:9E:63:59
            X509v3 Authority Key Identifier:
                keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:27:c0:0b:56:c3:cc:26:36:f8:25:da:0e:bf:69:7a:22:
         f3:c7:97:2c:42:f2:7f:cf:7d:93:6f:b4:26:71:5d:3a:75:a8:
         20:ea:c0:2a:df:68:4d:aa:e4:41:d7:c7:ed:8f:2d:a5:be:5b:
         b5:7e:0b:48:c2:93:f0:f6:c6:a6:b0:96:9f:40:1d:9c:89:8c:
         83:e3:94:9f:c9:fe:5f:aa:34:e8:bb:8d:d4:90:0e:60:a0:6f:
         c3:23:92:62:49:00:e0:2d:47:b3:ee:2c:18:54:17:43:69:a2:
         6f:9f:e4:63:f5:8f:75:f2:6e:cd:6d:74:41:be:7e:96:e5:59:
         b4:9f:3c:eb:e6:ac:18:9c:ee:34:a1:e3:a5:7e:39:26:78:e7:
         d3:b1:e5:55:81:64:1f:9b:10:89:da:da:d6:c5:2e:12:d2:61:
         6c:06:62:7c:ce:0d:cb:4b:af:5a:c7:51:0a:d6:d0:1f:25:f6:
         82:e2:5f:2a:44:e3:36:9b:aa:7f:5c:e2:d8:6d:ea:65:61:24:
         3d:43:12:f4:4f:15:75:2a:e0:74:7b:3b:f6:bb:9e:06:24:67:
         70:d7:fc:06:32:f0:bf:d1:6f:ac:90:32:cd:45:98:95:3d:85:
         1b:ff:09:b3:bf:ef:c5:2f:91:52:b0:39:d7:a5:a7:18:6b:64:
         a4:f1:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----