Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File:                     B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier:          9C0hfhYROW026jFGP1PQOldr1gWVGcF6OZFLdMtxmtk=
Subject key identifier:   AB:5C:26:9D:7A:C7:F3:02:B1:1C:7E:16:06:A3:CD:EC:B3:3B:C5:30
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer:       /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial:       01962F74649E49D912A83B27531528BE805F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number:          0F7F
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: lwcyW4q/HVPZXGCGfPCs9u5oAeNsXstTuobh2ycH4kw=)
                          2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:64:9e:49:d9:12:a8:3b:27:53:15:28:be:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=ab5c269d7ac7f302b11c7e1606a3cdecb33bc530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:95:ac:e3:2f:c5:d5:99:94:82:dc:c7:84:
                    ff:e3:83:d2:5e:24:f8:73:a2:13:23:47:f9:d0:99:
                    28:84:ba:76:3c:a5:cf:6a:00:bd:d6:83:d6:e7:56:
                    79:f2:7f:4d:85:4e:66:ae:12:22:18:87:7f:6b:53:
                    eb:0f:98:40:43:e2:80:8a:bb:53:c6:95:7f:c9:d7:
                    74:c7:de:69:1f:f8:32:56:8e:62:4d:27:f3:ce:ee:
                    41:5d:44:da:b4:14:16:96:25:6a:f6:24:33:f2:bc:
                    4c:a2:cc:26:f1:bd:88:5b:c0:56:2e:4e:6c:62:f6:
                    63:d8:52:21:49:d1:aa:ee:a4:4a:96:10:2b:4d:e3:
                    2c:3b:42:f3:fb:5f:66:91:46:73:ba:9d:ad:19:27:
                    51:53:e5:31:e3:e2:ed:a5:43:4b:28:07:b9:99:f3:
                    79:74:1b:5e:59:0f:07:be:9c:10:5d:3a:83:88:53:
                    17:11:92:26:d2:2c:87:c0:73:96:00:3e:45:9e:bf:
                    5e:32:1a:80:1c:bb:09:b3:1b:8b:45:9c:56:2f:68:
                    fa:ba:af:9c:15:4a:e6:be:ff:2b:25:5d:65:55:f3:
                    d7:a5:e7:81:a6:51:0b:7f:8c:85:08:05:ad:2b:ac:
                    e9:9f:97:fb:a4:69:68:64:6c:e3:29:32:c5:1b:86:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:26:9D:7A:C7:F3:02:B1:1C:7E:16:06:A3:CD:EC:B3:3B:C5:30
            X509v3 Authority Key Identifier:
                keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:90:37:df:7b:db:e4:f2:2c:da:a2:72:6c:16:93:d1:a0:
         e2:45:a6:15:e2:0b:ea:39:7d:34:80:76:1c:b8:83:a6:cb:63:
         aa:27:e1:98:50:6b:da:8f:d2:a0:b6:ab:be:c4:8b:1f:3f:ea:
         b6:04:04:7c:7d:65:78:16:d0:b8:00:ac:0c:73:94:71:2e:07:
         3e:8e:c2:bf:4d:fb:52:ed:a1:db:b6:ab:1d:34:48:71:b8:73:
         47:79:f1:99:11:0f:f4:4e:4b:95:71:91:12:62:e3:cf:87:c8:
         aa:63:8f:60:f2:f6:ab:a3:28:ca:bb:f7:b3:3b:a4:66:4a:88:
         ef:68:50:88:27:fc:cf:da:6c:ef:e2:07:47:15:79:1a:09:7c:
         82:5e:64:d6:fc:da:2b:9e:a9:16:78:d1:1f:3e:50:5e:23:7c:
         85:ed:a1:ef:27:a6:57:82:69:54:89:12:d1:f0:6a:43:d8:f4:
         2a:8c:b9:35:b1:69:a7:e4:cb:8d:6b:49:2b:3a:60:4a:f3:7f:
         87:07:bb:85:2f:85:96:63:a0:5d:4b:fc:29:81:2f:50:fe:b5:
         f9:0c:14:df:bc:27:0b:ca:1e:18:bb:9f:0d:32:ae:3a:f2:32:
         4d:57:07:1e:60:4f:40:d7:27:7c:39:ab:50:64:70:20:74:c8:
         af:70:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----