Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File:                     BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier:          3u3CSMd4rAZUXwak73+ZC9P5P3KyUWPSN/tMQqk1HB4=
Subject key identifier:   9A:0B:AB:7B:C6:5C:9D:77:B7:C1:03:2C:39:1B:BD:CC:9E:9F:CD:1F
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer:       /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial:       01962F74B2D89E045A3E44A042F06F1A7569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
                          2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: w0//eBIyfV0LHdX2S9VPqcIcO0zrLezoRkQEc69m5SE=)
                          3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
                          4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:d8:9e:04:5a:3e:44:a0:42:f0:6f:1a:75:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=9a0bab7bc65c9d77b7c1032c391bbdcc9e9fcd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:94:b5:bc:58:25:5e:a4:70:01:11:5d:37:
                    ea:fb:06:c6:4a:38:97:40:fc:15:3c:3c:b6:04:94:
                    a0:4c:a6:5e:13:d9:8b:2e:e3:b3:f9:d2:a3:fa:d3:
                    90:6c:0f:30:ca:29:d5:08:30:f3:fa:a0:4c:76:7b:
                    9c:f7:8e:e2:60:74:75:2c:75:dc:4e:44:d1:9d:a6:
                    df:6f:ec:e2:ac:d2:96:dd:ae:3e:5f:9f:ea:a4:ab:
                    f6:d3:8b:2d:d7:67:e4:1e:bb:48:77:be:bf:6d:56:
                    67:59:4f:e2:bc:df:0a:97:06:8c:a1:11:5b:72:6f:
                    fb:26:f1:01:6c:38:f8:71:49:a9:13:44:ae:d4:4a:
                    11:30:dd:79:ec:16:d3:19:85:01:d6:c2:d8:68:63:
                    e7:fe:ae:47:46:ef:3b:e1:bd:f1:6e:75:7e:e0:43:
                    19:45:0e:af:7b:43:80:a6:aa:cf:2e:c5:a0:03:91:
                    73:05:33:58:65:87:29:47:7e:dd:a5:37:2a:d3:86:
                    3f:99:df:68:c8:3e:30:10:3c:ac:a6:ec:7b:25:1d:
                    d4:92:a5:27:d6:7a:ad:49:f3:72:eb:5f:85:85:f2:
                    d7:ba:4e:66:bd:8a:4d:48:6c:69:a7:28:69:fd:81:
                    cf:e9:62:c8:19:aa:3f:ac:32:32:f5:38:ea:91:f1:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0B:AB:7B:C6:5C:9D:77:B7:C1:03:2C:39:1B:BD:CC:9E:9F:CD:1F
            X509v3 Authority Key Identifier:
                keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:8f:a5:2c:06:23:58:4e:a7:97:d3:86:48:f2:e1:04:64:
         21:65:c7:ad:4f:04:ff:e9:ae:cf:bc:b8:81:78:55:7c:c9:d5:
         b5:ae:6f:5f:6b:c5:e3:b3:e5:77:10:d8:cb:53:76:fc:41:9b:
         ac:4c:c4:71:d0:ef:8e:7f:26:69:bc:01:87:d3:91:1c:ca:4e:
         3b:8e:37:47:fb:b9:a6:7a:8d:15:a1:ce:6a:51:bc:a3:ed:d6:
         5c:05:c5:dd:05:18:f7:d5:77:29:c2:38:db:17:f7:96:97:c7:
         12:7d:22:f0:41:1b:f8:27:f9:c4:16:6a:fc:d9:9e:95:17:50:
         42:fa:ac:6a:71:c7:87:7a:ab:43:38:6a:31:1a:1c:33:16:9b:
         40:6d:e1:70:74:46:24:ab:76:a2:fd:91:c8:b9:f5:93:0a:72:
         cc:d3:f8:fb:19:29:a2:d8:76:fd:fd:6f:c3:b8:2b:ef:c2:1d:
         80:72:d9:ed:03:6c:72:b8:50:e7:1c:9e:52:6b:96:91:f5:4e:
         33:85:65:46:4a:bc:cf:9b:6f:70:88:6c:49:64:b7:3b:57:5b:
         18:b5:d6:f1:4e:53:f0:b4:1f:78:0f:59:08:d0:82:c8:54:98:
         a9:9c:61:7e:dd:01:ad:20:61:b7:4a:b0:c2:e5:52:9f:99:7e:
         e6:df:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----