Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File:                     vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier:          LaRhWKzBS9xYqI/wGTVHvp+/alCaNoSHjjRLUn8Bw8I=
Subject key identifier:   07:8F:7E:10:64:51:96:08:84:00:B5:04:09:0A:68:8C:44:A2:F6:FB
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer:       /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial:       01962DF436CA4CD1CD32D6EB778F69F69761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number:          12A5
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: A1faMfeGvXWclnpkPwMxlhiCC0K1iHD7u6iScu91QMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:36:ca:4c:d1:cd:32:d6:eb:77:8f:69:f6:97:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=078f7e10645196088400b504090a688c44a2f6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:1a:9b:d0:11:82:14:0e:42:85:81:3d:ea:
                    75:46:2a:12:43:9b:c5:1d:76:bd:b5:df:06:01:9a:
                    ee:5c:a1:e1:d3:3b:8b:3f:96:4c:33:90:14:38:77:
                    e3:0d:fc:02:c9:4e:59:bb:c5:ac:ed:63:69:6f:e3:
                    bb:37:73:2a:9f:18:f6:c7:f8:90:c2:29:37:30:6d:
                    ea:d4:80:dd:fe:18:92:09:89:78:7e:04:b4:d9:9c:
                    07:80:bc:53:24:b4:49:54:b3:a4:f4:c0:7a:1d:4c:
                    15:7d:66:35:4e:13:a1:53:f4:cc:15:1e:d3:f9:19:
                    35:b5:57:d8:13:3c:9b:5d:ed:ef:e2:dd:00:4b:e1:
                    b5:b4:e3:5e:5c:51:3a:f0:58:e0:17:d9:62:66:c7:
                    22:2a:25:24:e5:94:e6:75:94:cb:94:f1:b6:4c:12:
                    63:a6:3e:44:d0:9f:ef:1e:36:ce:d0:d1:d9:b8:11:
                    28:07:a8:35:1e:4f:fa:5b:9f:d9:6c:1b:82:93:fc:
                    41:a0:ae:a9:f3:b5:23:cf:08:28:68:62:b3:e9:71:
                    e8:a0:f6:ea:ff:98:26:c2:4e:88:ac:09:6f:6f:c8:
                    a7:45:df:a3:37:52:59:e6:d9:49:ae:5c:94:1a:55:
                    d7:98:74:98:ea:19:fc:81:7a:f9:9a:da:0e:73:30:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8F:7E:10:64:51:96:08:84:00:B5:04:09:0A:68:8C:44:A2:F6:FB
            X509v3 Authority Key Identifier:
                keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:5b:4f:06:81:7b:da:4d:3e:83:3c:0b:1d:fc:e9:95:95:38:
         a4:12:7a:8b:67:55:66:c2:fc:08:1f:58:77:a3:49:53:9f:44:
         2d:6f:93:81:a7:6b:19:f6:e0:d0:7e:06:e5:8c:9c:2a:7d:a8:
         b4:91:79:72:b9:0a:b0:77:75:cc:0e:0c:df:94:82:03:64:80:
         ea:c9:61:cb:3e:28:df:a6:ce:46:4c:a3:69:4e:57:c5:fd:64:
         2b:22:92:54:26:a4:2d:31:4e:6b:aa:ed:3e:d8:b4:87:f6:ab:
         28:b9:db:28:25:c3:82:f7:af:80:92:4f:53:a7:79:46:05:92:
         5f:81:14:59:10:c5:1f:1c:38:9f:90:bb:ec:9d:eb:75:56:1d:
         a5:2e:53:45:58:07:44:ad:c0:0f:d2:4d:d8:1a:32:9a:af:89:
         31:2a:e5:83:28:f1:c9:f8:01:b3:ba:f7:28:54:3c:de:80:7b:
         4d:31:25:28:09:f1:fd:0d:ba:50:2c:57:25:bb:35:f3:61:35:
         2e:05:0b:66:8a:61:d1:8b:c1:8a:64:bc:fe:d5:91:1a:f4:c5:
         df:51:a0:79:ba:05:d6:36:ee:7f:44:47:34:79:c9:0a:4b:48:
         34:bf:3b:a8:54:d7:7e:54:91:78:c5:1f:93:35:1e:96:83:fb:
         46:6c:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----