Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File:                     Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier:          AmmmamQ07bcdFD7ZDA4wzhmDtHiokbedW0TZsCtg3YA=
Subject key identifier:   97:1F:BC:E8:41:46:D5:FC:91:7A:01:92:6E:A1:FD:0A:BC:2D:D2:F3
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer:       /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial:       01962E61E0A3C559B3E6362C85DF4B2BE78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number:          1229
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: /idYBpZVbaVTVc/FUP3ru6sG5QBfJRCYqiebUDG8YUY=)
                          2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:a3:c5:59:b3:e6:36:2c:85:df:4b:2b:e7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=971fbce84146d5fc917a01926ea1fd0abc2dd2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:86:60:ba:9d:3f:55:bb:09:82:57:61:bc:
                    b7:f4:95:ee:a9:64:be:1d:57:c5:b0:5e:65:39:5c:
                    9b:25:cf:26:64:33:1f:4d:ff:24:3e:f7:97:95:22:
                    8c:76:d5:bf:07:71:e4:88:43:8c:63:38:f1:d7:1b:
                    09:c9:2a:87:ed:8b:3f:89:41:5d:ed:4a:21:82:e6:
                    fc:17:35:6e:65:c4:c1:13:e2:3d:f8:90:00:78:19:
                    3a:d3:1d:dd:ba:78:13:d4:46:5f:a7:dd:29:5d:43:
                    75:55:12:fa:b2:cd:b8:31:8c:3c:35:6e:07:39:1f:
                    c5:5f:11:d0:10:dd:16:66:58:ec:d2:e9:08:49:38:
                    25:18:79:1b:0a:67:05:24:85:c9:0d:d4:5a:9c:e8:
                    e3:ac:fb:7f:89:0a:0a:9d:ed:45:fe:ad:b3:71:c4:
                    6b:13:df:0f:61:de:d6:8b:25:ef:8c:cd:1b:ea:a2:
                    f9:2f:2a:bc:cc:43:5a:20:eb:e1:fd:3b:8e:92:28:
                    46:bc:f8:a4:dc:97:6e:95:47:74:85:c1:6c:f6:8f:
                    59:d1:62:4a:dd:03:c1:49:61:8f:f6:ae:e4:4e:02:
                    dd:41:12:77:cf:e2:57:7b:ed:0e:3e:28:29:1c:7c:
                    f0:18:d9:be:97:69:4a:02:01:44:f9:e9:43:fb:8e:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:BC:E8:41:46:D5:FC:91:7A:01:92:6E:A1:FD:0A:BC:2D:D2:F3
            X509v3 Authority Key Identifier:
                keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:52:04:d0:ae:52:5a:c3:80:3a:bc:aa:fd:f1:f8:41:cb:34:
         4f:4e:70:d8:59:df:ae:87:7c:5b:49:d7:8f:ce:7f:3d:b5:3e:
         4c:7e:db:e2:f0:e2:1a:1e:05:ba:ce:84:46:1a:7b:6d:d2:4f:
         6d:14:30:87:f8:ce:c7:35:93:9d:89:ae:20:ba:dc:52:ee:d6:
         89:84:0a:b9:09:a8:7e:cb:18:e1:3e:dc:ec:33:62:1e:84:b0:
         bf:81:d3:c6:b1:9a:76:78:6d:11:4f:6f:7f:a3:ac:1c:7e:82:
         ba:a4:24:c3:a0:dd:b9:73:43:88:48:48:2f:f0:83:d0:fc:df:
         6c:4a:6e:a2:ae:07:0f:9c:f7:26:41:7f:92:7d:89:b4:bb:d9:
         da:a2:ff:14:81:29:db:9f:2a:60:75:17:41:b8:d8:16:06:b0:
         c2:9e:8e:db:40:ff:82:1f:9e:f5:1a:07:77:f8:c6:6e:62:dd:
         b4:a8:f6:06:a2:18:55:66:35:a1:94:17:07:c5:71:ff:05:d5:
         5f:40:a3:8a:36:30:21:32:a7:00:1f:6f:17:32:ac:79:64:ff:
         0f:26:93:99:07:dd:40:54:91:df:66:f4:13:26:f1:21:26:ea:
         7c:03:ef:94:63:6e:e6:77:f8:ba:b4:2c:78:01:33:12:7a:8b:
         8b:08:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----