Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File:                     fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier:          gAMS7sGMduYEZ1cu/uBkt8LmlAOpTWWVb8Rs2TIttlw=
Subject key identifier:   B6:82:B4:17:11:B0:4E:9D:F8:8B:9F:F0:C6:72:2F:70:C1:0A:27:08
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer:       /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial:       01962E9875635E613AEAC34619A537A8E958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number:          06B7
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: jbYYkDhourrTa3jTEL/Oj6/PbvfCyD988uS+U9RZFSg=)
                          2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:75:63:5e:61:3a:ea:c3:46:19:a5:37:a8:e9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=b682b41711b04e9df88b9ff0c6722f70c10a2708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:4a:19:af:34:5e:1d:07:cf:50:73:1d:ac:
                    b2:e3:b1:4d:99:de:6e:6c:db:77:5e:9b:1c:93:69:
                    c7:67:85:f5:4b:0b:99:b6:93:86:57:74:45:54:96:
                    9e:5f:0d:ca:63:12:f5:5c:91:15:63:61:9f:dc:dd:
                    e9:07:aa:7a:fc:67:24:b7:cc:f2:b2:ab:b7:6f:60:
                    66:23:8f:dd:be:a1:3e:df:f6:21:33:0a:30:64:8f:
                    3a:cd:1f:da:e1:75:c4:0c:51:99:85:9f:9f:4b:8c:
                    75:de:b0:9e:20:6f:a0:d1:e1:40:e4:b5:ae:4d:bb:
                    05:5a:84:fe:4a:9d:f1:c9:d6:ec:14:85:3c:3b:70:
                    c7:bf:2d:4a:2a:86:6d:77:1c:e3:67:6a:5b:fe:68:
                    ef:df:26:45:3c:c9:5d:2d:de:b4:b7:ea:6d:2e:8a:
                    83:d8:b1:96:ea:3a:5d:ab:d5:0c:c3:8d:3d:02:fa:
                    7e:7b:31:61:1e:1a:4c:ca:26:fd:1d:b5:49:f1:d6:
                    f3:9b:23:a8:22:31:8c:52:d0:29:0e:43:d0:91:af:
                    6b:96:ac:fd:83:8b:48:a0:ea:fa:e1:ca:b5:c0:0b:
                    8f:f6:32:77:44:e6:7c:f4:b0:60:c4:99:6c:f9:e3:
                    2a:2e:ed:a6:02:4c:8d:23:8d:24:34:d6:ce:a5:23:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:B4:17:11:B0:4E:9D:F8:8B:9F:F0:C6:72:2F:70:C1:0A:27:08
            X509v3 Authority Key Identifier:
                keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:5e:cb:87:c0:10:98:d6:e4:24:fa:ee:64:22:ca:f1:d2:
         c6:54:2a:25:81:ac:89:0b:01:c0:8d:4d:c7:db:fb:64:b6:76:
         06:26:bb:99:47:84:d8:64:a4:0c:91:2d:00:a8:b9:cd:b3:3f:
         ad:5e:f1:50:b9:c0:06:62:5f:be:39:18:3e:60:c3:80:e9:8c:
         c1:81:ee:8e:72:fe:23:9e:74:da:75:6a:de:0f:de:33:a9:0b:
         fd:23:e4:e1:07:0a:2a:66:16:d4:47:43:1c:90:48:26:b2:ee:
         44:35:6d:1d:46:87:77:ec:db:fc:de:aa:c9:cf:a5:1c:b9:b9:
         56:cf:e3:ab:b8:1f:1a:10:3d:89:8c:a3:61:23:ac:67:87:52:
         96:25:d9:54:ed:0c:fe:6b:7f:72:88:18:d9:e7:5b:e9:e8:f0:
         88:93:ba:ae:10:40:43:13:4f:f4:c3:39:7f:06:87:47:8c:55:
         95:2d:a6:ec:ba:a6:b5:8e:b5:95:60:83:28:6c:86:b6:81:34:
         87:b8:4c:9a:bb:bb:39:b7:02:8a:e0:ba:c5:c5:ee:12:4c:c9:
         24:0c:b8:ac:73:97:49:76:55:83:e9:3b:1f:24:db:05:cc:c6:
         79:7b:dd:bc:43:5a:60:e9:ff:c3:9c:76:a8:a6:78:fa:15:0e:
         56:79:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----