Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          KAmCw80HiaGk6ILOVJhXOuDv4+VkDYWffJ5mdYLeHEE=
Subject key identifier:   F5:4E:24:2D:10:FC:A0:D3:28:ED:CB:EA:B9:FB:E4:C4:E2:42:B1:07
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       01962E2B3D957C87A57482EC1ED06C437A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          06F9
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: QsOVg/+7aiftqWvWBDq+UTs6L53EUTxxJAtlfNQxk3c=)
                          2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
                          3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
                          4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:95:7c:87:a5:74:82:ec:1e:d0:6c:43:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=f54e242d10fca0d328edcbeab9fbe4c4e242b107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:34:18:54:5e:bc:4e:3f:f1:ee:1d:e2:5d:
                    91:ef:90:cc:48:ab:7a:30:e4:2d:f8:65:66:a4:b5:
                    03:d8:46:d7:6a:23:ea:15:c5:73:ce:40:da:05:a4:
                    a9:a7:09:67:5c:67:24:25:1c:f1:e2:d4:3e:88:c5:
                    60:d0:35:52:c9:19:2a:24:c7:26:25:f5:34:a4:fd:
                    d0:d9:56:01:a4:8c:ee:1c:58:05:04:fb:ee:c0:de:
                    43:27:1d:db:ac:84:0f:fe:78:97:00:c1:40:36:78:
                    01:1e:0c:17:8b:68:5c:39:8f:a3:f0:3a:50:d5:9b:
                    0a:e3:c7:3a:ee:e7:c8:fa:7b:70:79:21:37:d9:fc:
                    e4:b7:24:30:a1:2e:56:56:12:08:e0:5c:db:54:fb:
                    99:a4:64:cd:06:53:90:c0:de:a0:a0:a3:9b:20:fb:
                    0f:41:fe:e5:47:eb:bd:4f:3c:5b:32:b6:c8:f4:95:
                    c2:4a:12:ba:aa:e1:0d:e3:9c:82:97:ca:6c:db:fb:
                    a5:40:c7:25:1c:6b:b4:90:d2:c7:36:f1:a6:80:18:
                    9f:90:d6:c0:d0:85:5a:2b:f8:17:89:f8:cb:5e:1e:
                    48:d0:85:86:06:cd:82:cb:c5:f7:3f:fc:11:eb:22:
                    91:cf:ee:3c:d4:b5:cc:49:e2:e0:b3:38:bb:b4:cb:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:24:2D:10:FC:A0:D3:28:ED:CB:EA:B9:FB:E4:C4:E2:42:B1:07
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:fe:21:f0:0c:76:f9:f7:5c:e4:d8:58:eb:67:9d:14:7f:
         99:30:7c:ca:e4:8d:71:91:1e:58:d8:93:0a:fb:17:a3:47:86:
         c6:c5:3f:10:6f:00:86:93:1d:4f:6c:72:1e:9f:59:3c:e6:41:
         db:ce:e4:43:0d:75:58:86:7f:db:29:70:96:e9:89:ff:77:0e:
         73:e0:09:fb:75:d6:45:fd:18:17:93:76:79:85:85:18:cd:84:
         c1:26:08:1b:05:69:7b:5d:dd:5f:68:f3:1c:18:6d:5f:f7:d7:
         49:3e:4e:78:40:d5:51:82:f4:67:f8:e0:4f:2c:66:a6:d1:cd:
         c2:43:e8:63:72:d4:51:1c:ae:9d:2c:32:9c:5d:07:91:5c:c4:
         f0:40:cd:2b:c2:f8:94:9d:9b:0a:5e:8f:ce:83:b6:1b:72:1f:
         4d:0e:7b:ae:31:41:4c:14:65:3d:0d:2a:a3:f7:2e:06:7f:46:
         75:90:d2:52:d2:e4:15:4f:18:f2:0b:ac:cc:a2:6a:35:40:54:
         44:7c:09:f2:48:38:6a:5a:35:8a:b4:ed:08:1b:04:72:3d:50:
         b5:39:8c:96:d5:7c:2d:01:03:99:91:b6:63:0e:dd:66:5b:8a:
         f8:d4:b6:fd:47:78:40:92:3d:39:6b:cb:3f:a9:4a:56:32:a3:
         e1:d8:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----