Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File:                     BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier:          Y0Bi3/KQVNzTL0dNrw50sn/ZYCbB9kMgXHLCY+HC/oQ=
Subject key identifier:   E6:90:49:FE:CE:BF:D7:3B:8A:8E:E0:3B:75:12:BF:D4:8C:AB:7F:C6
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer:       /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial:       01962F06F0A367026C7A36A8E19F13BD355D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: TuobnOSnsCbNu54jb6D3egewZlV29oYV/cssnZsMKOs=)
                          2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
                          3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f0:a3:67:02:6c:7a:36:a8:e1:9f:13:bd:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=e69049fecebfd73b8a8ee03b7512bfd48cab7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:62:42:8e:9a:63:48:ff:c2:c9:b0:0c:ca:
                    11:55:9a:63:3c:73:3f:0c:e9:d4:45:72:47:51:d1:
                    83:b9:05:c4:e5:9d:88:fd:b3:65:e5:c6:dd:51:cc:
                    85:36:3c:3d:94:8e:a4:ea:4f:ba:ec:e7:6b:e2:d6:
                    88:a4:dd:3c:ba:d2:46:96:24:ea:5e:7d:98:37:e1:
                    60:e3:66:f3:b4:3a:ef:fd:3e:33:79:a3:24:76:da:
                    1a:c4:2e:3b:08:a5:19:b8:44:d5:91:ff:27:e0:84:
                    31:d7:1c:72:fc:ce:1f:79:cb:57:1b:36:a6:dd:89:
                    00:2d:36:c0:87:46:43:13:5d:75:21:4f:ed:1c:b9:
                    e4:85:b2:cf:4c:aa:25:ab:c8:8f:02:8a:23:48:b7:
                    5a:89:4e:ae:e2:a3:34:22:15:f7:d2:21:aa:99:2c:
                    24:32:91:2e:de:75:c4:cb:1c:db:d5:34:bc:d1:38:
                    0e:b0:26:20:c3:b8:97:51:53:79:ef:98:f6:81:87:
                    a7:53:57:2e:45:c3:49:6a:f9:8f:b5:ce:6f:4f:db:
                    f7:ae:25:84:99:82:c3:de:9a:52:56:24:95:81:c5:
                    05:ef:4f:8b:b2:a1:9e:d0:bb:80:ca:b5:c0:43:cf:
                    74:77:b0:b1:5c:a7:ea:da:56:b2:e5:9e:fc:44:c7:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:49:FE:CE:BF:D7:3B:8A:8E:E0:3B:75:12:BF:D4:8C:AB:7F:C6
            X509v3 Authority Key Identifier:
                keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:47:3f:45:d7:e6:74:0d:ba:ad:8e:f7:04:da:4e:25:a6:0c:
         b4:c1:c6:21:4f:3d:a0:90:27:af:13:2a:83:79:43:d2:e9:27:
         47:24:f0:d2:89:00:a0:af:da:d3:b2:76:bb:c4:c3:9d:52:88:
         f9:ed:57:7d:34:47:d5:c1:8c:70:03:4e:4a:f1:3c:53:e0:c9:
         9b:74:9b:da:f3:38:66:ea:5c:e8:69:f9:67:7c:8d:59:6e:c9:
         bd:8b:9b:04:64:39:fa:1b:e3:f7:1d:fb:37:19:df:c9:4d:68:
         49:c7:5a:1e:20:83:ae:dd:20:85:fe:ea:60:32:b8:e1:94:2b:
         cd:cd:27:a0:71:28:47:41:df:00:93:50:25:5a:1d:f6:71:31:
         e2:cf:cd:a7:4f:fa:3c:17:3b:1d:b3:bc:85:23:e4:47:b8:87:
         bd:18:91:f7:07:73:6d:f7:5e:0e:cf:86:be:ed:ac:fc:1a:1d:
         17:b5:74:85:cb:c6:0e:ba:13:74:8a:94:ff:22:c5:ce:74:67:
         28:56:7b:45:e7:0e:5c:79:aa:5c:b3:34:4f:eb:d6:11:ef:14:
         f2:48:d2:70:6b:d3:eb:ad:55:35:a1:eb:b7:a7:8e:f9:be:32:
         55:9d:a9:5c:49:c8:6b:72:2e:2a:b5:49:2d:1a:b1:07:21:65:
         c5:ce:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----