Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File:                     95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier:          D2wp772F8k+eZ1x4r30oFkpoJa8qTbUok2C7hTGvI2o=
Subject key identifier:   11:1A:85:B8:A9:12:94:05:91:FB:1D:7F:7A:D6:D3:B2:A4:BA:F1:0B
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer:       /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial:       01962ECFE4015EAFE5E31AE77B365B639BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number:          0B6D
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: UbPKSKLYu+3+Y9SHOCUBiItXAF3NuKN+WepUro4cF0Y=)
                          2: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (hash: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:01:5e:af:e5:e3:1a:e7:7b:36:5b:63:9b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=111a85b8a912940591fb1d7f7ad6d3b2a4baf10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:73:df:cb:08:32:3a:75:e6:fe:81:61:2c:
                    b5:7f:e2:4c:0e:8a:5c:3a:45:f4:da:bb:d3:74:b4:
                    66:4f:67:c9:c6:cb:a9:63:92:50:25:ae:d4:05:ce:
                    ca:32:5a:c2:32:62:ea:60:1a:c0:0f:98:cb:72:e0:
                    ff:51:fb:08:13:8b:3e:ec:50:84:5b:2d:81:95:aa:
                    8b:23:d9:1d:67:3d:df:3b:0e:c0:33:e8:37:34:c2:
                    5d:25:13:6e:c6:78:49:7f:95:6a:c3:53:df:b6:6c:
                    86:a6:ea:f7:07:b3:2e:fa:42:0d:40:e1:ea:80:f1:
                    69:68:ee:db:74:ac:e2:be:56:75:e0:99:fc:cc:01:
                    80:8f:f1:d7:be:e8:70:ab:56:f6:10:c7:71:4d:69:
                    d8:03:4d:61:98:58:84:f0:40:13:9a:c5:ed:55:cd:
                    f7:82:0f:3b:88:3b:4f:01:36:3c:e5:15:13:27:32:
                    41:04:65:1d:24:84:f3:39:d8:8e:a7:a9:d4:97:dd:
                    a2:c3:19:ab:0a:1a:9e:76:6d:32:c6:ae:00:26:5f:
                    08:90:5f:0c:92:70:4b:43:97:9e:12:b3:4e:89:9b:
                    c7:4d:f2:1e:c6:ce:4a:1b:72:fb:2d:9f:ca:b0:fb:
                    2e:4c:ad:ef:ca:f5:42:18:b7:40:a2:a3:25:58:08:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:85:B8:A9:12:94:05:91:FB:1D:7F:7A:D6:D3:B2:A4:BA:F1:0B
            X509v3 Authority Key Identifier:
                keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:f4:1d:96:14:8b:10:73:c1:f2:56:0d:31:65:84:89:f1:
         0c:c6:64:4a:5c:fc:05:1f:ad:04:df:01:7e:7d:ef:15:b5:8f:
         c6:22:0f:dd:a6:90:49:d5:1b:da:c0:d7:88:24:b4:68:3f:39:
         1f:d7:5b:de:81:67:7b:a1:e2:e4:4f:2a:2e:9b:b4:15:c7:0a:
         50:61:f6:24:af:d2:1c:f5:43:cc:15:f0:04:33:0b:18:c1:a7:
         e2:f9:e1:2f:89:08:62:91:f2:80:48:07:10:4d:8f:86:c2:8a:
         fb:5c:f3:5a:9f:f6:06:d4:a9:25:78:1c:c1:0e:2e:fd:c0:e9:
         d5:33:f6:3f:e3:06:52:05:23:d2:61:6f:8d:56:0b:36:c3:00:
         22:fa:52:21:1d:16:b7:37:0b:00:a1:79:c2:f6:d6:a3:59:d5:
         9f:70:e0:07:fa:c1:86:7f:1c:f8:4a:ed:b7:82:28:71:ab:fa:
         82:06:15:90:cc:13:f8:3b:8e:eb:76:9e:05:35:db:3a:9d:fa:
         f1:a0:d3:eb:19:4a:64:50:b4:74:38:c6:57:66:49:79:14:89:
         50:4b:db:c9:bb:3b:90:f4:86:dd:65:00:78:3d:b6:1f:92:a8:
         0f:89:a7:aa:7b:eb:b6:ea:43:51:12:e8:23:ef:98:2f:f9:39:
         3f:98:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----