Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          DMi26baS/LtJFt/z5PU+lo4bV4Z+eT3gO+BX/sYlj6E=
Subject key identifier:   34:58:EC:BF:EA:B9:7E:B4:6F:6B:C9:20:9D:5D:D0:41:D6:75:40:FE
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       01962F3DBC7F3FF5A4E053F2437968C788EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0AAD
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: JFTOOdrDyUoaretZdWHRZavr3uZoTgqQ3O8Te+1yIZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:7f:3f:f5:a4:e0:53:f2:43:79:68:c7:88:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=3458ecbfeab97eb46f6bc9209d5dd041d67540fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:03:d9:1e:17:44:28:8c:73:80:32:99:4c:
                    55:3c:50:f8:96:c1:af:02:2d:47:32:e4:da:56:60:
                    25:f3:7c:70:21:24:6f:f9:6b:f9:45:a9:db:2d:a3:
                    8d:42:ea:8e:c7:2c:f6:95:90:76:5e:da:e7:95:c7:
                    11:f3:aa:88:2e:a8:7a:91:a8:5a:8b:2a:af:c3:54:
                    30:23:6c:e5:c4:80:e2:5a:36:0b:04:7b:2d:2f:ce:
                    f3:6c:b9:4f:0d:81:ab:b6:ad:e7:e4:f5:bd:94:90:
                    63:e5:9e:73:0b:e8:bd:fc:0e:f5:72:23:82:4f:99:
                    6e:ef:34:81:f6:75:32:a9:57:c3:34:03:4a:98:ef:
                    6a:34:ff:a9:d1:dd:cc:2e:90:b0:d4:eb:5e:08:04:
                    1c:0a:13:2c:bf:55:85:b8:7f:bc:0d:9d:df:fa:3f:
                    18:bc:63:65:3c:b6:99:8b:ed:14:ba:66:50:d2:70:
                    8e:4a:01:1c:12:74:fc:53:a6:f8:d3:54:ae:85:fe:
                    2a:20:ec:d6:d8:50:e0:cb:bc:04:1e:c6:35:6d:6a:
                    80:35:64:33:73:b6:69:0d:c1:90:ad:e1:44:cd:6d:
                    0e:32:07:88:e0:02:58:a5:92:2c:d3:9a:70:f2:55:
                    fb:4e:d6:4c:77:1c:64:03:d2:1f:ac:16:2a:f4:2d:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:EC:BF:EA:B9:7E:B4:6F:6B:C9:20:9D:5D:D0:41:D6:75:40:FE
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:47:64:92:2b:1f:79:17:6a:ec:21:5e:64:4c:72:23:0b:
         a5:4c:ad:ea:ed:0e:d0:1a:c1:ac:99:81:20:7a:fd:c8:69:27:
         1e:83:b8:fe:8e:2e:89:bb:67:7f:c9:fe:95:56:85:b6:5b:45:
         9d:3c:72:fb:0f:32:06:10:68:e3:9a:c3:bf:c3:5f:76:1a:b0:
         a6:c5:9d:8d:a7:b3:d1:aa:7c:64:0e:0c:82:29:e4:83:57:66:
         54:8a:29:22:70:cb:aa:79:b2:82:86:d8:43:75:d1:e3:00:d1:
         ef:c5:d1:65:6d:ad:1f:34:23:87:22:01:d4:01:72:43:ec:3e:
         6c:35:8a:d4:42:4d:d8:9b:f2:39:b9:59:29:0b:d0:13:05:5f:
         ef:a0:0e:b4:cd:30:2f:17:35:69:7d:8e:dc:7d:6b:e5:b6:0a:
         97:42:cf:2a:f4:b6:bf:68:d0:a2:70:24:13:77:b6:2d:1f:17:
         95:24:b4:28:f6:a1:61:4c:3a:6e:5e:81:c5:60:34:77:3f:25:
         56:95:35:2b:42:23:78:6d:51:ca:02:c6:9a:aa:2d:a4:a5:98:
         0d:c8:77:47:52:4b:26:11:1d:6a:53:48:26:57:d9:ae:1f:40:
         ff:91:d4:02:e8:18:8c:a5:c0:8f:50:86:99:4f:02:bc:05:c1:
         e7:71:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----