Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File:                     saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier:          wib0FQtvpQFeRuGcKnGN9JMqyOli9j0KjAEWmTJuxWU=
Subject key identifier:   7D:5C:91:B3:8F:13:02:DA:58:BE:E3:23:EE:BF:D3:4E:62:4F:78:F1
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer:       /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial:       01962DF3F4FAA671C10BAE25456C611E5CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number:          0D58
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
                          2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: q5bADCKsxqDMkMOXW2L9iXMAw6D1NPYnt3CsGryAYNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:fa:a6:71:c1:0b:ae:25:45:6c:61:1e:5c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=7d5c91b38f1302da58bee323eebfd34e624f78f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:55:dd:98:c3:f5:20:8e:58:6d:23:76:50:
                    90:83:f2:7a:d3:2b:32:bb:4d:fe:61:a3:e1:f2:68:
                    2f:dd:fa:4c:52:1b:1b:08:15:eb:bf:f9:53:0f:34:
                    54:b5:63:3a:3a:7f:45:af:01:5b:85:f9:0b:c1:2b:
                    54:24:e0:f5:f3:93:76:a5:9b:4a:a2:08:a6:4c:cb:
                    19:d9:04:a2:a1:f2:40:e8:04:7b:d6:36:f5:11:06:
                    32:6d:c6:5b:dd:c1:5c:fe:f0:fe:59:a5:a1:77:19:
                    51:01:04:6b:6f:b7:2e:51:46:13:4f:b4:2e:fb:bf:
                    17:53:8f:90:ce:41:55:6c:54:6f:44:82:ac:b2:1c:
                    69:c7:6f:9e:e7:c6:3a:76:28:56:16:ed:49:7b:f6:
                    a1:22:55:8c:fe:90:2e:b9:18:4e:a4:2a:3a:0c:cb:
                    f0:5b:31:5d:dd:44:f1:6a:e6:56:37:1f:f4:7b:33:
                    ce:fc:28:d8:e3:ef:75:be:64:d6:e0:1e:d0:ce:8a:
                    f7:62:2a:b1:8a:29:17:13:2f:2d:de:96:9d:a0:6b:
                    ff:dd:5a:69:ce:e3:2c:0f:5d:77:57:ee:92:9c:04:
                    cc:bc:48:73:ab:56:1b:6e:ea:e0:ab:d2:40:89:bb:
                    7a:40:e0:19:91:0e:6f:68:26:4b:b7:00:ec:2e:1d:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:91:B3:8F:13:02:DA:58:BE:E3:23:EE:BF:D3:4E:62:4F:78:F1
            X509v3 Authority Key Identifier:
                keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:88:a8:47:28:b2:6e:c7:b8:03:ca:36:50:cb:62:be:b9:
         14:2c:25:1e:14:c3:6c:4c:57:c6:cf:ca:8d:89:c8:68:0d:63:
         9e:b7:2b:41:2b:4a:4e:99:1d:32:41:4d:b5:9b:5d:1e:11:0b:
         2d:a0:d9:e9:2b:af:d9:1b:6a:9d:5e:d4:0c:98:59:9f:42:e4:
         4b:1f:ab:59:2b:d8:f7:7f:a7:e6:92:e2:a0:7a:23:ac:4c:0c:
         ab:fd:70:a9:d4:58:d5:dc:23:0f:91:a7:d2:f2:09:b3:95:58:
         05:e8:cf:de:35:fa:67:c2:f1:26:5f:4c:df:fa:2a:93:2b:31:
         7e:b7:1d:f0:68:34:1b:95:87:6e:5a:22:10:c7:ec:4f:c6:24:
         3d:bf:53:04:70:90:8e:e8:ce:de:bf:00:6e:c9:98:67:47:3e:
         b1:13:37:0b:5b:cf:f5:7d:03:e2:37:bd:2b:fa:20:3b:96:68:
         b2:13:3b:c6:6b:a3:45:11:8c:b6:42:11:97:f9:85:12:6f:9a:
         67:d1:0d:bc:1d:c2:69:8a:9c:07:fa:8a:af:8d:e1:ff:1c:2d:
         fb:65:aa:3e:02:5c:c4:12:1e:9b:19:b4:9b:1c:01:5c:23:12:
         1f:c1:91:78:8f:c3:43:1d:2d:c0:47:82:c8:9e:17:2a:3a:4c:
         bd:f7:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----