Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File:                     sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier:          69z91QTtenSU5xzNIWCuIu99xMEg+mHScUz9yaPKTGY=
Subject key identifier:   17:59:71:4B:9D:8D:8A:39:FD:71:97:21:B2:D9:60:A7:DB:AE:1A:A3
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer:       /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial:       01962F74F5DB7592F677C5F7321B6264D83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number:          0BB3
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
                          2: C7MhaPZbslU0VnJ9f8aWGwMPQ1s.roa (hash: N2sOMWlDByUi7A5K2JVccMDH9oIH2ZkyI/wL4WYAlVY=)
                          3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: 6sjAQuXEngorQ3dpeoPcr6ZrPo2weiUyRbY0gj/QKeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f5:db:75:92:f6:77:c5:f7:32:1b:62:64:d8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=1759714b9d8d8a39fd719721b2d960a7dbae1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:ef:b5:ca:4d:5a:af:88:b8:bd:f3:4d:a2:
                    e7:a3:8e:1e:4f:5b:20:88:94:57:2b:cd:d1:b0:67:
                    74:59:06:89:07:b5:77:52:17:dc:ce:1e:41:a7:72:
                    23:1a:d2:fc:c6:a2:57:7c:cd:8c:95:52:9c:ac:99:
                    a2:9c:18:be:f6:0f:18:2f:30:60:ab:49:6d:19:3d:
                    4f:11:57:c7:fc:a7:f8:43:6a:38:11:d1:fe:49:4d:
                    d5:99:ab:19:84:f4:84:3a:30:bf:36:4d:8a:de:d5:
                    21:81:6b:ae:91:15:57:43:fd:4c:a4:22:52:c0:1e:
                    17:90:6d:ee:19:8f:7b:4a:db:f7:dd:aa:ea:68:08:
                    b6:6d:f2:34:65:d8:f9:b7:04:37:f5:52:82:ba:0b:
                    76:6e:6d:30:f0:17:71:7e:bc:cf:12:05:5c:9b:73:
                    b4:41:eb:36:36:71:c0:94:d2:2e:ed:f4:d8:70:d3:
                    13:e9:34:23:d9:2c:a7:cd:d1:d1:60:97:0d:d3:4d:
                    76:d6:50:81:0c:03:2e:0d:1b:30:fa:8c:00:e3:d3:
                    58:f1:54:9b:6c:9d:45:23:36:8f:9d:70:78:08:6f:
                    7e:39:a0:11:0f:8d:ff:a9:82:9e:f1:da:2c:4a:88:
                    4c:0b:93:91:24:a7:49:d3:0d:94:d5:30:97:45:3c:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:71:4B:9D:8D:8A:39:FD:71:97:21:B2:D9:60:A7:DB:AE:1A:A3
            X509v3 Authority Key Identifier:
                keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:80:c0:a3:09:e1:c4:fa:2c:d8:40:67:31:e4:6e:bf:e7:df:
         8e:32:42:97:32:24:9e:63:1a:30:09:60:c8:48:2b:d5:3b:0b:
         3a:24:f5:c4:76:2c:0b:4a:03:76:f3:26:37:bf:fc:84:85:39:
         81:de:4c:b6:65:07:25:b0:a4:16:45:a9:c3:a8:3d:b5:70:cc:
         94:32:41:14:4d:92:15:8f:46:e1:e7:5a:0e:7d:88:34:0c:23:
         e3:17:9f:93:88:17:10:12:e1:69:92:82:92:7f:f6:2a:80:09:
         d5:94:26:c3:41:eb:6c:05:84:bb:e8:95:0d:3d:c1:8a:20:28:
         f1:5b:e1:2d:4a:0a:b1:21:9e:51:2d:0e:0e:f8:9f:7f:eb:9a:
         d7:3b:9f:c8:cc:e5:2c:37:37:1e:e4:fd:7f:d7:7b:b5:94:66:
         f6:3b:73:5f:1d:9e:29:ba:2d:32:ca:e4:c9:0c:55:7e:90:a8:
         ae:e7:2d:80:a5:4e:4f:70:7f:66:4b:91:0d:3f:ce:21:c9:6a:
         a6:e9:b4:93:c8:26:81:b1:75:ca:f2:1b:b0:d3:14:86:2b:7e:
         01:65:7b:be:9f:5f:fd:79:c1:d9:85:6e:d9:de:b7:04:10:c0:
         d9:b6:68:83:f7:a2:de:15:3e:0d:2b:58:f9:2a:2f:cc:33:0b:
         12:05:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----