Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File:                     8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier:          oaTkM3x1+pP7yQp5LuJZB+uQo9eLPo0XSbjTBWHv60k=
Subject key identifier:   FB:B9:80:30:65:5D:BB:E0:F8:55:ED:34:A7:F9:3E:F9:66:FB:4B:8D
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer:       /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial:       01962F06DBB8A92D4ED3F0FBD6B367418A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number:          151A
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: lfTYwehcg4NRgEsWnTGaqKhSdYcoV0Ydx9YPQnoFHtQ=)
                          2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
                          3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:b8:a9:2d:4e:d3:f0:fb:d6:b3:67:41:8a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=fbb98030655dbbe0f855ed34a7f93ef966fb4b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:31:77:ea:e6:6c:75:05:31:75:12:fc:ec:
                    cf:59:63:d8:77:81:9b:fd:f2:44:09:00:90:a9:bd:
                    24:cb:2c:7e:18:d9:13:6e:dd:5b:92:1d:25:8b:03:
                    c7:a6:b0:60:cf:92:f7:44:da:87:5e:1a:69:4f:63:
                    f4:f3:d3:1c:af:1f:8c:b5:4e:ca:7f:be:96:f2:c7:
                    68:3c:91:6e:ed:93:86:a0:3e:ff:17:08:46:70:79:
                    b9:73:03:bf:47:e0:ab:53:0e:f5:ab:ca:47:33:e5:
                    17:db:54:7e:31:f3:1f:07:27:3c:85:fb:10:16:cf:
                    6d:00:ba:c9:f3:ca:c1:2e:b9:d4:f5:8c:b9:af:5b:
                    96:15:4f:8e:d0:59:21:e5:da:d2:f0:43:20:08:01:
                    51:d2:48:56:66:ad:77:da:ca:fd:85:3f:76:d1:ac:
                    fb:8b:06:ef:22:a0:73:29:dc:19:82:ce:8a:5a:79:
                    2b:af:19:aa:73:4b:2c:95:01:70:48:ee:0f:d3:93:
                    d9:dd:8c:0a:52:cb:bf:96:6d:8c:2f:3d:f9:6d:b3:
                    02:fb:3c:20:d1:68:84:2b:43:d7:bf:0d:e8:1f:db:
                    d1:fb:eb:7e:62:5a:15:d6:39:37:d0:70:d7:23:db:
                    17:2a:d1:59:b1:b6:1c:0b:a6:44:74:a1:9b:86:27:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:80:30:65:5D:BB:E0:F8:55:ED:34:A7:F9:3E:F9:66:FB:4B:8D
            X509v3 Authority Key Identifier:
                keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:e4:7a:1f:b3:51:d1:14:76:08:ff:21:91:c1:15:d9:e2:
         d7:52:58:7c:ea:97:63:d3:dd:96:5e:38:ab:8a:41:ac:cf:52:
         6e:7b:75:01:c9:e7:29:06:c7:21:b2:45:a0:13:28:61:4c:5d:
         d5:34:61:19:55:fc:8c:e3:c1:40:64:d8:41:f3:f0:12:e9:e7:
         49:0e:96:37:bd:bf:5b:0f:b1:d7:d2:fb:14:d2:f4:c9:54:ac:
         a9:f8:4c:b8:c8:6b:98:61:f6:13:27:4e:a0:4c:8f:5f:4f:41:
         4c:38:3b:0d:80:a2:0f:a4:8c:ba:2c:65:d9:f9:68:7f:b3:fe:
         f3:97:5b:4d:4c:8c:72:35:a9:67:56:f9:54:7b:05:35:12:a2:
         ef:d4:78:59:ba:03:e4:1c:2c:09:29:48:24:3c:f6:1e:83:10:
         3e:3f:5c:7a:5f:54:0c:69:05:9b:77:4b:c1:8d:8b:03:5f:7b:
         63:a0:09:9c:b0:45:63:0f:55:46:7f:1d:05:94:e4:62:51:f5:
         71:51:1b:33:ee:18:75:34:47:25:d9:1b:e6:93:9c:98:59:af:
         2d:11:5c:4e:bb:00:8f:a3:66:35:77:2e:d4:76:60:32:95:a7:
         c7:02:35:bd:9d:e7:3b:de:5e:92:e6:34:71:a7:c9:5d:11:3b:
         81:6f:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----