Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File:                     2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier:          Kv5JAICCxawCgnF258aPKKaTVUqUHRLY1H0u54P3nvI=
Subject key identifier:   6B:2E:92:B0:C9:8D:59:1E:DA:F7:18:83:66:DE:3C:37:FE:D3:7B:8F
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer:       /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial:       01962F74B96A76093656744662F5A6FFF90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number:          13B0
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: ONfiY7xCQ6oKPzFQQg1aVyB/JUOfGsVnTvWyomDn6Ls=)
                          2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
                          3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:6a:76:09:36:56:74:46:62:f5:a6:ff:f9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=6b2e92b0c98d591edaf7188366de3c37fed37b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:fe:37:c2:61:79:6b:1d:ef:21:d6:a9:43:
                    a2:e8:9d:e5:51:00:07:cf:bb:fe:06:7f:f9:ec:42:
                    c8:7f:c8:df:45:05:d5:ac:35:45:62:90:0c:a6:0d:
                    b4:b1:03:24:a2:36:c3:8b:02:65:e4:93:54:ca:d7:
                    e4:b6:0d:aa:49:26:9e:a3:09:10:ac:0e:23:9b:fe:
                    55:0c:8c:8e:fd:66:c7:8f:37:02:09:12:fa:1a:28:
                    2b:82:16:bd:9e:a4:93:d3:ac:24:48:97:de:23:89:
                    dd:fb:10:12:c1:c3:8e:b2:59:61:03:5e:17:16:b6:
                    81:d8:8f:45:06:6b:79:68:dc:ce:ed:0c:db:37:3b:
                    3b:80:1a:78:84:a4:da:90:75:6e:60:94:d5:d1:8c:
                    72:1b:4d:65:8b:37:31:14:9b:10:aa:7d:b1:2c:a9:
                    00:1a:dc:75:ea:7d:4d:10:b9:76:93:13:61:96:ac:
                    d6:61:91:35:e4:e9:af:8a:2a:a6:d1:34:2c:8a:c7:
                    96:e9:68:4d:05:e7:78:36:5d:4e:ed:8d:0e:06:4e:
                    ce:e4:ff:68:2d:0a:db:f1:11:9a:a0:4a:af:39:e4:
                    b9:08:f4:b0:2f:a4:b5:22:bc:6e:16:67:ef:3a:83:
                    58:98:ee:f1:29:18:c7:76:4c:26:84:bf:22:c0:a7:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:92:B0:C9:8D:59:1E:DA:F7:18:83:66:DE:3C:37:FE:D3:7B:8F
            X509v3 Authority Key Identifier:
                keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:a8:f2:68:b4:67:b2:db:d9:dc:58:39:35:aa:d1:1e:87:
         0f:4f:0d:16:a8:9a:03:56:58:fd:d7:fe:dd:96:bc:c5:79:f0:
         da:9a:74:b3:63:20:f6:13:c8:09:a6:ad:e7:0c:87:88:00:10:
         1c:0a:04:73:0d:2c:64:43:89:3f:11:cc:6f:56:39:7d:3b:64:
         42:12:d7:ab:bb:74:fc:6d:92:c9:0d:0c:8e:91:c7:28:e1:15:
         62:9b:b3:63:e8:72:de:cf:06:37:31:9a:0a:09:b4:34:67:63:
         39:ad:af:f9:fc:47:a3:56:ff:c8:a0:32:48:3a:e8:f9:4e:67:
         74:da:73:45:b1:db:8d:7a:29:5d:83:a8:1a:4d:49:40:d1:14:
         eb:e2:7e:f0:b6:f8:e6:db:e8:f3:be:57:cf:14:82:96:58:85:
         90:57:fd:bd:c1:d3:9b:fb:d2:16:4e:cd:1e:55:91:8b:52:36:
         fc:72:9a:89:b4:b1:fe:1e:3e:30:52:61:83:f8:e0:4a:35:5e:
         11:d3:fb:fa:21:dc:e6:b2:24:fe:b7:9d:77:6b:60:88:10:51:
         b8:c5:6d:7b:f5:85:57:87:47:dd:6c:ec:7b:89:f0:d2:37:66:
         5d:2c:5e:f3:9c:a6:0f:67:3f:f2:5a:9f:1d:7c:96:d1:a0:02:
         18:0e:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----