Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File:                     2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier:          94WCrQ6ujEDvb1xAKo3aKzcUBRXTqZAg8aXEioz0OU4=
Subject key identifier:   57:5B:F7:26:F2:C5:63:5D:AB:7A:BE:56:29:1D:00:0A:D7:5C:8F:60
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer:       /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial:       01962F74642A3A40ADC26027BA3CCB8F5597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number:          02F4
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: IwrqAORsDndrWGXUo3Uog3ejt9qqpzsyvW3oOMczz1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:64:2a:3a:40:ad:c2:60:27:ba:3c:cb:8f:55:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=575bf726f2c5635dab7abe56291d000ad75c8f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:ea:f8:3d:a0:0c:a4:3e:99:3d:60:7d:bd:
                    98:d1:56:c1:24:a8:b6:b3:ad:ad:69:d0:40:37:a3:
                    cc:a6:45:cb:21:b4:8f:6e:5c:3a:1b:0b:2d:74:58:
                    17:45:80:bb:7d:f4:df:0b:41:f7:31:1d:8c:b7:05:
                    7f:84:1c:23:28:a4:0e:b5:d5:31:2a:22:0e:8a:2c:
                    ee:88:d6:8f:3b:77:f3:fb:88:81:48:d4:3e:ca:60:
                    4a:72:e4:ae:e1:02:ee:d4:69:86:56:ba:85:8d:1d:
                    ad:80:89:61:40:6d:32:39:f0:fa:aa:d7:22:d7:0a:
                    09:62:72:44:19:10:b9:55:97:60:cc:94:36:30:9f:
                    c6:07:6a:2c:05:98:0b:5b:a0:64:23:44:8b:56:b9:
                    10:b5:18:30:10:3f:76:34:a8:91:58:04:92:6a:bf:
                    38:40:62:52:71:90:74:80:3e:76:a4:2e:f5:dd:6d:
                    cf:28:a9:b6:1d:40:1c:94:b5:36:d8:f6:75:83:e5:
                    e1:77:05:a5:c8:b4:46:99:c5:5b:8d:85:6a:48:44:
                    c0:7b:4c:5b:d8:a0:2e:af:dc:9f:c1:0e:a3:bd:2d:
                    90:09:00:bf:41:12:21:ec:e7:c7:9a:6f:ba:8c:ed:
                    db:23:37:00:3b:23:6b:5e:a7:f3:17:07:73:34:b0:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:F7:26:F2:C5:63:5D:AB:7A:BE:56:29:1D:00:0A:D7:5C:8F:60
            X509v3 Authority Key Identifier:
                keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:9c:b8:c1:b5:3f:5b:03:6a:00:37:68:ff:6f:58:13:fc:
         09:ae:bd:2f:fa:67:67:65:03:3a:85:49:e9:b4:53:3e:21:c2:
         5f:01:af:b1:57:ef:fb:99:1d:56:e0:26:1c:59:56:9e:ed:a4:
         c1:85:43:7e:1b:0f:e7:9d:b9:09:ed:f2:28:0d:95:8c:33:e3:
         e7:00:a3:94:9a:67:1e:cd:2e:8e:71:36:7f:b4:6a:5e:32:bd:
         0c:cb:55:42:30:0d:6d:4a:12:b4:c2:1e:88:d2:d2:a5:97:f2:
         4d:ef:6d:f1:20:07:1e:f2:71:a6:b2:5f:ab:9e:4c:ba:b6:c1:
         3d:c9:0b:36:82:67:be:3a:a9:ea:a9:5d:a9:1c:54:46:2b:9b:
         39:fb:76:04:1f:dd:90:5a:56:37:62:3a:0a:1c:aa:4b:52:49:
         02:3f:fb:26:69:47:48:74:9c:91:e9:85:31:06:5e:8e:79:ea:
         55:36:79:b3:80:3e:cb:60:74:0f:d7:5c:c1:56:e5:17:d9:0e:
         39:63:6d:8a:b4:6b:36:74:b5:4f:7c:5a:73:9a:1e:7c:f0:82:
         04:dd:d4:cc:78:04:1a:da:82:84:ce:d6:0d:ba:c4:19:02:d0:
         66:e4:d4:08:50:35:b9:df:02:cd:d7:1b:15:65:2b:44:ca:e0:
         64:a2:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----