Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          H78GEFNBkwhD3WpwS3jE6KCv5x8LEdh3wX9d/RiWxI4=
Subject key identifier:   BB:56:C2:05:16:7D:63:89:C8:76:C9:A7:95:AA:3F:23:DD:F5:7F:B0
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       01962E61D60FE2FC874DD4B44ACF69484875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: 7x2olmgPhxuurSxjWFfVU87htRgPLwY/ttVNZNAYleA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:0f:e2:fc:87:4d:d4:b4:4a:cf:69:48:48:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=bb56c205167d6389c876c9a795aa3f23ddf57fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:58:f6:3b:4a:da:37:16:6a:ab:4a:79:8e:
                    a3:01:03:43:22:68:49:e9:ea:ac:8b:e0:05:84:73:
                    2a:9e:dc:94:bf:1e:d8:11:85:72:c8:da:ce:e2:eb:
                    60:2f:60:d0:62:c5:7a:c1:19:16:52:ec:8e:d1:68:
                    1c:0a:6b:cb:20:0e:2a:e0:09:62:ac:d8:9d:5d:8f:
                    48:39:e3:55:88:79:4b:d5:7e:dc:08:c7:ee:09:6c:
                    50:f1:5e:9b:7a:a3:e6:c5:ec:0c:e4:58:ea:d7:b9:
                    b4:16:aa:76:70:c2:51:8c:bc:d8:66:f1:3b:db:09:
                    57:f1:1e:32:fb:9a:96:20:bd:fc:cc:15:2d:47:79:
                    b6:ed:8b:ea:70:51:77:a4:c5:c0:3f:e6:54:da:bc:
                    0b:40:8b:6c:22:2b:4b:60:e2:a8:a8:54:d7:b8:11:
                    55:32:ec:ad:21:72:9d:6f:73:bc:88:d5:74:c1:7a:
                    f3:be:19:26:4b:43:78:22:4b:1b:6a:a1:4b:d4:cb:
                    77:1e:6b:22:21:db:1f:ec:c1:b3:dd:77:63:38:99:
                    a0:33:b1:4d:9d:1a:cb:df:72:9b:f4:20:8d:ae:bb:
                    bd:13:c9:38:dd:28:c5:8d:75:80:ee:2e:95:69:a0:
                    2b:c6:3c:70:f2:40:48:e1:42:65:77:71:c2:08:ff:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:C2:05:16:7D:63:89:C8:76:C9:A7:95:AA:3F:23:DD:F5:7F:B0
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:b6:c2:58:ed:e7:b8:db:85:7d:9a:03:04:99:f2:64:9a:
         6b:f2:c6:61:f1:48:60:8b:71:e3:73:a9:68:c7:63:c4:9e:3e:
         1e:13:77:38:71:cd:90:31:50:5d:f2:40:8d:bb:c0:77:16:20:
         54:07:5a:ca:1c:69:a6:ac:09:6d:f8:4c:10:26:a5:27:90:2e:
         51:c8:47:37:f0:07:e0:6a:ce:08:6e:12:9d:e0:1a:69:34:74:
         ae:bc:c7:90:14:0b:91:6c:13:61:a4:bd:6c:89:e7:22:59:24:
         51:6c:de:0c:ae:96:53:eb:03:cf:bd:dd:c4:a0:10:77:a4:2f:
         e5:1d:8b:da:15:1e:66:75:e7:65:49:e8:a4:96:85:a6:ad:d0:
         7a:51:f6:c0:96:38:d5:53:05:f9:e8:fb:f8:0b:1f:25:40:0e:
         65:57:dc:28:11:39:aa:4f:79:42:b4:c9:82:b5:bd:7a:15:6a:
         75:9f:2a:42:8c:a5:6c:f1:81:bc:89:8e:72:08:9f:3d:fc:48:
         1b:ee:e7:d3:d6:4a:c4:65:f5:87:0e:64:9d:f7:9f:ac:67:21:
         3f:8d:bb:d9:47:42:59:9b:27:31:c1:09:ce:72:34:92:1e:e7:
         ea:85:13:8e:6f:79:4f:56:73:b6:f1:03:52:13:05:c8:e1:d9:
         d7:05:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----