Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File:                     u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier:          7NDa+JNZo51sBnH/9ELrZcc/NtS/rTIezkY3jA0uvMY=
Subject key identifier:   5A:EB:A8:95:53:89:A1:C6:5C:59:91:F9:20:AE:FB:1C:61:8D:F0:3F
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer:       /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial:       01962ECFABC5D1A2FCDE81BCD4A1D944EB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number:          040E
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: Or3qdHy+H5C+EYVbjnxSkE2QYsErviw2l6h30ZVtET8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ab:c5:d1:a2:fc:de:81:bc:d4:a1:d9:44:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=5aeba8955389a1c65c5991f920aefb1c618df03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:6e:52:51:53:0e:f5:05:58:b2:76:72:d9:
                    dd:f7:cd:03:4d:b6:68:f5:67:c4:f2:38:92:11:91:
                    cf:4f:5f:d4:4f:e2:5b:69:f0:2f:ea:7f:81:65:a2:
                    d3:5a:35:fd:0c:c4:bd:e7:0b:fb:eb:ca:08:b4:a4:
                    39:30:27:20:fd:07:a3:ba:1b:1d:7d:07:a3:35:e2:
                    b7:bb:8e:a0:c5:c7:24:5d:8b:19:bd:39:d5:be:13:
                    95:7e:4a:a9:64:4f:59:66:17:f4:57:1e:b9:89:12:
                    3b:83:b3:7a:b0:f4:6f:d6:bc:4d:3f:e6:fd:2b:96:
                    f1:61:59:97:91:2c:64:22:2a:bb:ba:dd:64:12:6c:
                    e8:44:8d:91:09:89:ed:f3:9e:1b:85:eb:9a:9b:86:
                    7d:cc:68:c0:3d:27:dd:f3:ef:cd:e0:d1:66:bc:1a:
                    52:3e:a1:41:83:bc:a9:16:88:00:bb:d5:a9:ef:10:
                    e2:4c:71:f2:02:ac:0b:92:c0:52:95:80:e3:29:4e:
                    e7:37:09:8d:b5:f4:b0:ff:11:ea:e7:2c:6e:7a:b1:
                    68:30:29:91:5e:9c:a4:9a:36:02:29:92:fc:d6:1e:
                    f0:5e:10:9d:47:18:75:38:d5:bd:29:65:10:d5:ba:
                    92:42:39:49:2f:bc:ff:df:b7:fd:16:1b:5e:f0:51:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:A8:95:53:89:A1:C6:5C:59:91:F9:20:AE:FB:1C:61:8D:F0:3F
            X509v3 Authority Key Identifier:
                keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:87:e7:92:6f:27:cf:89:94:23:c7:a2:45:13:40:75:c8:
         3c:86:05:e1:a0:e1:d1:e0:ce:9c:c1:b3:1b:31:40:da:ff:fb:
         27:1f:c5:51:ae:28:fb:b0:ba:e3:6c:39:3c:9f:34:2f:e2:87:
         ec:e0:59:b0:e7:43:58:31:93:d3:cb:b0:4d:46:c4:f2:86:30:
         49:79:14:4d:b6:99:5d:20:d0:92:7d:1c:79:ea:04:2e:3d:2b:
         3c:1b:cc:07:1a:87:5c:3e:e0:ed:c2:13:89:95:91:e7:6d:d0:
         8c:3b:96:e5:57:ef:39:a7:da:aa:32:9f:0c:6c:41:1b:b8:e9:
         d7:a4:ca:a7:c3:ee:32:b3:f6:a5:4e:11:d8:cb:c0:55:41:21:
         09:2e:94:05:55:d6:20:fc:bb:84:77:31:b9:1c:f8:10:86:c2:
         cf:63:16:eb:81:07:af:ab:2b:e3:36:a7:6f:81:c7:c0:d7:4d:
         1f:f5:fc:c4:dd:b8:c9:6b:d3:a3:cf:64:56:e1:08:81:2b:77:
         b0:8e:91:04:1b:e4:28:3b:74:30:19:52:e4:7c:a6:90:02:4c:
         c1:0f:1b:6a:17:8e:ce:b8:9c:0a:a1:5a:4b:53:99:a7:7d:1f:
         db:ed:c9:40:51:97:c8:0d:21:24:5b:76:9e:a3:da:8a:83:59:
         f0:9e:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----