Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          Zrv42Og+24ylEDDJSpOdiWNWVWYiWjLniuzblUIJJao=
Subject key identifier:   90:46:FC:70:BB:38:12:EE:FA:6A:99:C1:0B:F1:1B:E4:A7:21:53:E8
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       01962FAB9698B7E4486DE6EFD170CA2F4F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          08D0
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
                          2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
                          3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: ZFgXi64f31fkUocr47y3wFHtUhfDrtJ+MZzIVARf90k=)
                          4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:98:b7:e4:48:6d:e6:ef:d1:70:ca:2f:4f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=9046fc70bb3812eefa6a99c10bf11be4a72153e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:b9:83:6c:d9:c7:58:27:9f:c6:f7:54:d1:
                    50:e9:5e:ef:34:00:23:5f:e6:27:6f:58:cc:43:48:
                    51:49:d5:b8:8f:b5:04:1c:b8:34:43:5e:cf:62:7d:
                    1a:76:1f:f9:3c:65:96:ce:e1:9c:13:50:95:51:bf:
                    11:2b:a1:df:9c:0d:b3:ca:64:ea:d2:2c:9a:26:9b:
                    49:da:d8:67:c4:b3:fc:45:da:2e:c9:7d:f0:eb:cc:
                    29:9e:46:70:83:83:81:dd:42:58:e2:c4:26:65:8d:
                    3f:f5:a0:84:e0:ed:9b:60:1f:8f:3e:38:47:ee:aa:
                    7a:7a:4b:2d:d1:53:e3:41:59:ca:f1:a0:c0:61:ad:
                    25:aa:d9:8f:12:33:70:c3:b2:aa:5d:bd:c3:72:0c:
                    c8:7c:e6:b5:6c:d6:ab:a5:68:30:c9:20:37:84:05:
                    66:bb:ac:3a:b2:ff:31:0c:b4:2e:20:4d:bb:56:d9:
                    12:33:49:20:d8:f1:4d:98:1c:70:92:9f:a0:fc:3f:
                    fc:bf:b5:61:18:c1:ad:d4:75:0d:46:13:7d:61:5f:
                    6d:23:39:6f:1e:29:49:b9:a1:c9:db:c3:0a:b0:82:
                    77:7a:85:19:4e:25:85:0f:e5:9f:77:6f:7d:d2:40:
                    a9:6b:6d:ad:56:32:41:1d:f1:b4:09:18:e8:51:e5:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:FC:70:BB:38:12:EE:FA:6A:99:C1:0B:F1:1B:E4:A7:21:53:E8
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:d4:2b:b1:4f:f8:8a:8d:dc:c1:d0:7d:32:c7:35:ad:84:
         00:8b:cc:89:36:a1:9a:df:a4:72:05:7f:86:9a:ae:d4:b9:2d:
         69:3e:e5:57:80:41:67:17:89:b1:a9:b4:ed:66:17:ae:21:b7:
         89:af:6c:b4:8b:9a:27:6e:4f:6a:e9:e1:17:75:ef:ee:f3:b1:
         ad:bc:4c:2a:51:4d:14:36:7e:db:1e:81:93:ea:1b:01:f7:e0:
         47:d3:98:c1:cd:5a:6d:f8:b3:33:b7:4a:45:dc:25:27:7e:7a:
         be:42:a6:bb:ca:67:c7:0a:be:be:22:4b:11:0a:60:2c:ea:30:
         eb:fe:91:92:32:2f:87:a8:bb:f5:91:b7:14:3c:12:91:de:5c:
         5a:a6:9a:9f:5d:90:5e:2b:8d:16:99:d7:24:e0:d6:be:98:3a:
         c3:6d:c4:d2:a7:ac:6b:93:e4:3e:4f:5f:5d:09:90:80:14:d4:
         0d:0f:5d:66:82:52:89:11:16:cf:39:ab:52:d2:e5:25:5b:b2:
         3b:3d:32:e7:e0:f8:4b:06:ab:2b:99:8f:23:d5:12:17:b0:38:
         87:b6:4c:cc:9d:56:0e:12:cb:5f:a4:52:6b:f4:36:a3:f1:1a:
         e1:88:da:61:75:6e:2c:77:6a:4c:cf:bc:65:ce:01:a8:2b:fa:
         63:cd:85:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----