Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
File:                     v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft (raw, json)
Hash identifier:          0r4nXtLXga9fq6FC5jLgorwP76BmXoHSjsRtMGxZ5j0=
Subject key identifier:   9A:07:56:E8:06:96:9A:0C:55:FD:F5:59:2B:3F:19:6C:F0:BF:90:08
Authority key identifier: BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD
Certificate issuer:       /CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
Certificate serial:       01962F748F037466F374A93607C4E5FA1010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
Manifest number:          01B3
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl (hash: Gw7srXtmE0cljV2joqKfev/cGPSEUfISdTYnMNwzwnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:03:74:66:f3:74:a9:36:07:c4:e5:fa:10:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=9a0756e806969a0c55fdf5592b3f196cf0bf9008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:e3:43:2e:71:0f:85:f8:74:80:1d:5c:13:
                    20:ec:91:ae:03:9d:64:9d:14:f9:50:1a:ba:8e:2f:
                    c6:0a:f0:97:26:aa:94:fe:31:17:ff:89:2d:c5:e5:
                    00:05:b4:c1:6b:f5:3a:25:a1:be:0b:6c:6f:a1:32:
                    45:27:7d:c2:9d:2f:17:c0:07:0b:5c:f8:eb:57:0e:
                    0d:b4:50:54:33:39:be:cc:1c:3e:cd:79:17:b6:45:
                    29:51:4a:92:ff:d9:23:a7:ab:6c:16:39:1e:bc:fa:
                    9a:ce:88:b6:91:6d:c7:80:8e:b5:c7:4e:c0:a4:d4:
                    4c:ab:99:f1:67:cc:17:ab:b5:68:14:75:56:3a:26:
                    95:7a:fb:47:f0:45:89:e9:d7:51:5f:c8:b3:a3:00:
                    5a:20:ed:bd:75:3c:73:d3:4b:fd:f6:60:52:25:9d:
                    f5:9c:11:54:35:25:4f:b1:1b:78:af:dc:0a:54:ae:
                    1b:a7:56:1b:3d:f4:e1:46:8b:2f:70:8d:b6:32:5c:
                    87:ed:03:3f:e8:8b:81:af:fc:0e:5d:07:3e:30:7d:
                    59:6d:fa:2c:fd:6e:6b:49:d0:93:6e:dc:07:b8:db:
                    fb:71:dd:d4:e7:66:fc:af:f9:21:1f:aa:dc:16:13:
                    2e:85:af:d3:bf:17:eb:fd:e1:be:43:62:85:6d:5a:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:56:E8:06:96:9A:0C:55:FD:F5:59:2B:3F:19:6C:F0:BF:90:08
            X509v3 Authority Key Identifier:
                keyid:BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:13:7a:b8:1d:00:74:64:2d:f0:fe:c2:4c:d1:89:3d:f2:5a:
         76:d7:9b:73:fe:6a:fd:31:bf:04:f1:73:5f:29:fe:d7:e1:66:
         da:ea:62:8f:68:a8:c8:38:9a:7d:c7:40:02:55:91:e8:35:e9:
         8c:a1:03:ef:ec:63:95:52:13:56:b1:36:75:33:c3:78:77:25:
         b7:82:ec:a1:28:65:93:c7:02:db:de:50:d7:8c:96:c3:16:64:
         31:29:9a:e3:69:ec:13:82:4c:9a:5c:49:59:36:6d:40:bc:11:
         f9:e8:69:37:63:47:77:79:77:d2:b5:c7:11:dd:5b:67:d4:bd:
         b7:40:f7:b3:67:44:dc:88:cf:6c:b0:80:42:da:24:02:04:2e:
         39:88:c9:68:e4:90:59:9d:e1:36:84:3a:b2:6d:7a:3b:b5:61:
         8f:ee:a0:32:32:22:b9:79:d2:41:8b:a1:e6:c6:8d:90:8a:bc:
         3d:5c:73:72:33:2a:30:66:26:69:b9:dc:c7:21:72:5e:74:19:
         66:95:d0:d0:60:1c:2e:33:95:7e:7d:da:f7:fe:9b:71:d4:35:
         cd:43:e3:d0:db:17:6a:4a:bc:a7:4d:9b:b4:ec:5b:e8:42:67:
         cc:1e:ea:9e:e8:e6:c0:d8:fc:c2:02:76:22:b9:fd:8b:33:6c:
         4d:81:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----