Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          BbbBwkBo3uJfA2Zqscwowzt9lOqwMO/0NgA5iseUrVc=
Subject key identifier:   B0:5F:6F:B9:AF:B4:CA:85:04:15:C2:D3:E1:AA:9A:28:DC:AB:03:86
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       01962E2AEE1FD435AA3313A88492801648C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          0EC0
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: AjXvASyMyrnOGyX2gEiHcgj0vF0SYG7zdBxOH6PfPUU=)
                          2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=)
                          3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=)
                          4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=)
                          5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:1f:d4:35:aa:33:13:a8:84:92:80:16:48:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=b05f6fb9afb4ca850415c2d3e1aa9a28dcab0386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:12:75:8d:5f:95:2e:bf:a6:eb:03:0c:cf:
                    dc:21:3e:03:9f:d6:24:44:ec:27:1c:8a:f7:c6:e5:
                    d5:6c:44:9f:43:57:3d:f5:d3:d6:2b:94:52:4b:bb:
                    15:b1:cf:ae:91:26:d3:af:01:e4:79:d1:0c:4a:32:
                    52:4f:4b:16:51:ea:3c:30:54:77:c0:41:0e:7d:46:
                    14:34:67:fa:dd:e4:91:a8:55:a4:5c:57:56:82:24:
                    30:1f:7f:41:9f:35:b9:12:d7:fc:05:43:4a:5d:15:
                    2e:ad:c6:75:2b:c0:16:dd:ba:8b:a9:06:27:1a:68:
                    6d:59:06:1d:0c:f9:84:2f:e6:ec:d1:be:a7:8a:3d:
                    a2:49:55:1d:18:2f:6b:f7:c0:98:4f:8b:ee:b6:ff:
                    ef:61:4b:e0:89:48:b4:ab:6b:05:9d:53:e5:64:82:
                    c2:db:d1:01:8c:8f:3f:b6:14:d9:0e:eb:16:b7:a9:
                    f1:53:1f:53:55:0b:a4:9b:71:79:60:0b:e8:cd:ac:
                    6e:62:fa:51:66:a6:d6:80:a2:90:38:fa:9e:4f:09:
                    9f:48:c8:de:45:a6:db:04:f9:58:ae:9b:6b:fe:a3:
                    9f:e0:75:e9:0e:69:3d:91:69:f8:21:ff:d3:63:79:
                    2e:c4:12:24:a0:da:9c:1f:25:ec:8c:a6:1a:29:a9:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5F:6F:B9:AF:B4:CA:85:04:15:C2:D3:E1:AA:9A:28:DC:AB:03:86
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:b9:73:42:56:0a:d4:98:f6:9f:b7:27:34:08:e3:87:94:
         aa:38:1e:22:19:29:b0:82:b5:ef:47:61:af:13:aa:b6:0b:1e:
         b7:ea:50:15:d0:f1:68:04:2e:81:7f:97:85:f4:a8:93:4a:60:
         4b:19:0e:4c:dd:f6:21:9c:e6:d8:f6:2c:14:8b:09:4f:80:16:
         51:ef:75:60:ca:22:82:5a:d3:c8:9f:7c:35:ef:a7:55:f6:7f:
         9b:ec:97:3d:94:9d:b0:d3:75:99:6b:e2:13:5b:32:7d:9a:55:
         d4:c5:23:2e:ba:36:45:46:8d:1a:52:c5:4c:ef:82:f5:ea:9a:
         9f:db:d3:7b:07:01:b6:45:33:60:90:9a:58:6d:8f:27:04:77:
         73:8f:8a:13:3f:68:e7:f0:b3:32:c5:bb:74:d4:89:ea:5a:18:
         ba:6d:86:1a:f8:a7:b9:a8:0c:52:a9:28:82:76:a0:3c:85:2f:
         4b:e6:10:d5:31:bf:44:ce:05:ab:39:82:c5:ae:4e:cb:6a:5e:
         bf:b9:60:03:dc:fd:ed:71:f8:92:e6:47:89:19:e3:76:57:18:
         af:80:1c:f7:5f:9d:27:ae:59:aa:1a:c1:24:df:03:39:b8:15:
         08:9c:f5:d4:84:38:d1:01:60:af:a7:a6:23:49:51:80:d7:29:
         44:2d:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----