Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File:                     spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier:          JYgBecA0mIRD+OuNdVPTt0J54ksdFi8SC0xaTlrCkBI=
Subject key identifier:   82:7B:D1:D8:F5:1A:AB:C1:F0:D4:B6:38:E0:EB:95:39:93:70:3D:16
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer:       /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial:       01962E989BD0F96F9BA752B0EC15404677E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: g59q9Brz4Y0eG+Zjl2SULBgBB40Ie9nQqXP2aPWwN7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:d0:f9:6f:9b:a7:52:b0:ec:15:40:46:77:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=827bd1d8f51aabc1f0d4b638e0eb953993703d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:5e:41:39:08:f7:b5:3b:06:fb:fe:c0:dc:
                    61:68:c3:9c:c2:36:8d:db:11:50:22:7c:20:33:d4:
                    55:b4:aa:f5:b0:41:56:78:6f:2a:11:e4:d2:83:3c:
                    66:b1:ba:c0:32:37:9a:af:4f:79:79:ff:4b:7e:18:
                    04:c4:be:04:d2:f1:7d:05:23:76:e4:6f:32:e2:e1:
                    06:40:d3:54:93:3e:1c:5d:7a:9b:4e:f3:c1:59:38:
                    18:fb:4c:35:1a:64:6e:a4:5a:b3:3f:fe:ec:8f:66:
                    eb:44:06:50:a0:86:0b:88:a4:02:fa:4f:60:54:83:
                    1c:46:49:b1:fc:e7:d9:46:74:cb:79:f3:b8:2a:24:
                    bc:f3:0e:64:16:98:93:50:f7:5b:d9:b0:97:40:da:
                    b3:84:bc:f7:98:6f:9b:42:06:0f:b3:83:67:27:f0:
                    7b:78:13:e8:83:2a:d1:5e:70:0c:83:04:5c:7e:45:
                    ac:ac:bb:18:85:16:d7:1f:60:73:48:2d:ce:dd:60:
                    2c:91:12:9f:cf:82:10:91:9a:10:fa:ce:c9:0d:e4:
                    af:68:0d:f8:2e:30:d6:d1:dd:43:ed:a0:37:d3:f4:
                    48:a3:a7:fd:09:60:ac:6c:e7:5d:ce:55:20:31:bd:
                    fa:dd:9d:b7:b2:71:8e:cd:4f:6f:b5:cf:22:21:a9:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7B:D1:D8:F5:1A:AB:C1:F0:D4:B6:38:E0:EB:95:39:93:70:3D:16
            X509v3 Authority Key Identifier:
                keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:16:c5:09:b1:b6:07:f1:01:e8:cd:fd:d7:a5:88:36:92:7e:
         14:6b:cb:5a:27:5e:21:75:84:2c:8f:15:3d:40:75:0f:7a:a2:
         47:86:37:22:61:66:93:d3:6a:00:68:a5:51:a9:9c:3d:18:d4:
         25:ee:ca:f4:c3:f1:79:a3:ff:bb:ae:f1:29:0f:1e:43:82:b6:
         60:e5:71:bd:f9:9f:f1:8a:e8:6f:7b:0b:c1:91:47:84:5c:29:
         d0:65:66:8b:19:20:01:bb:95:9c:20:c1:08:0e:88:b0:46:bb:
         d8:4a:c7:2b:7e:fc:c8:6d:29:67:47:00:ad:89:90:be:c0:ad:
         f9:3d:93:3a:aa:4b:5f:9d:e4:c6:c9:04:b8:48:6e:40:41:03:
         7f:a2:ca:f9:7c:79:05:85:dc:2a:0d:54:21:8d:d6:92:f0:70:
         51:b9:bb:57:f2:f9:61:96:f6:65:18:4c:0e:c4:a3:fc:9c:32:
         72:90:b8:c3:da:c1:04:f0:68:dd:10:56:32:7a:5d:be:6b:55:
         fc:66:5d:72:ab:0c:46:a7:6b:9d:02:29:f6:a9:00:3c:9b:7d:
         9d:7f:2d:6f:1c:fb:ae:7c:d7:e2:a0:3c:72:a4:d6:73:a9:2d:
         92:6b:41:d5:c0:19:03:0f:88:6a:6e:bb:56:c0:43:81:95:ed:
         f8:91:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----