Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          W/ap9VmYquSHS7EpSa8PnQBAJ6oihiz1wdKOsEKB3xA=
Subject key identifier:   AA:80:F5:41:82:5F:E9:F2:7D:14:0A:3D:E0:DF:CC:DA:23:9D:CD:8A
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       01962E2B05959C7EEB974F52513A8304794D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: yqA03YbTRTx0sGb5CKN3bON4fE8EcCPhguR/stov+uc=)
                          2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:05:95:9c:7e:eb:97:4f:52:51:3a:83:04:79:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=aa80f541825fe9f27d140a3de0dfccda239dcd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:80:80:cb:ff:df:49:bb:26:66:0e:29:48:
                    9f:73:c6:a3:9b:96:57:38:d9:f5:04:61:2e:02:d4:
                    80:e6:99:95:0d:3b:2a:fd:40:62:0f:3c:6f:fa:14:
                    3a:df:02:5d:4c:99:78:d9:45:48:4b:9d:e0:1c:fa:
                    15:34:c3:37:53:c5:b4:88:a1:37:c5:1b:8c:30:4b:
                    51:9e:31:7f:81:5c:8c:a7:de:20:8f:f6:73:a4:0b:
                    63:3e:d0:b5:4d:7c:41:42:f1:33:fc:a3:69:fc:20:
                    a4:d8:7f:95:06:61:11:fe:45:46:5f:8d:63:95:3d:
                    c1:75:ed:35:ec:e4:e4:51:ae:41:72:6d:d9:5d:87:
                    ab:38:21:c0:76:d6:c9:ed:da:fc:e5:eb:2d:ea:4e:
                    8a:52:09:8e:fd:a3:9c:ad:d6:10:7e:14:43:7b:02:
                    c4:ce:c6:f8:67:62:43:06:06:98:f2:73:4e:71:1d:
                    ae:85:1e:cb:e9:d1:37:86:55:c3:a9:61:b0:e7:89:
                    d6:9b:3f:e1:db:77:85:25:d3:88:3a:8b:03:0f:dd:
                    55:ed:f8:6d:90:cd:e3:cf:b6:eb:6e:ff:58:6f:6e:
                    79:85:29:dc:e6:f8:83:dc:32:32:24:31:82:22:76:
                    1e:a1:52:44:0a:97:10:59:fe:54:90:f5:50:de:19:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:F5:41:82:5F:E9:F2:7D:14:0A:3D:E0:DF:CC:DA:23:9D:CD:8A
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:6f:f8:29:03:1f:35:3e:2e:8a:42:e5:73:2c:1d:08:cc:
         69:b3:ff:cc:58:45:f5:44:ea:f8:fd:c7:4d:eb:6f:aa:db:96:
         a8:2c:5d:c5:73:a3:b6:83:98:df:8e:0f:03:8f:c0:d6:69:17:
         ae:01:68:e0:23:89:8f:8c:40:92:22:4a:06:e7:b8:95:28:8c:
         25:b1:53:6c:14:f8:0d:df:ba:ad:25:c3:d1:de:1d:aa:32:b7:
         4b:3c:93:5a:e8:86:94:9c:19:c7:be:16:0f:56:d6:4d:68:97:
         ae:70:b4:33:a1:1e:1e:6c:1c:2f:63:6a:c3:c5:dd:23:9c:a9:
         5c:1b:cc:a8:6a:83:60:5d:4b:a6:50:46:5b:b0:ba:02:92:b2:
         8e:c4:1e:da:06:dc:a9:c1:11:42:c2:4d:df:38:9b:5e:d7:1d:
         86:fd:64:96:7b:ce:4d:9e:5f:b7:e8:54:bd:95:1a:8e:ba:71:
         9a:6c:40:fa:06:04:84:cb:82:f7:32:7c:56:93:f5:30:a4:e3:
         74:5b:49:92:7a:e3:0b:67:cd:d1:77:cf:31:6f:e8:96:09:c3:
         de:c1:35:d4:07:5c:11:f7:6a:75:ee:73:a3:17:13:96:45:d2:
         2a:45:d0:c2:9a:54:6f:b9:37:f4:f8:b8:ff:e5:e4:33:18:1b:
         1b:48:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----