Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File:                     Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier:          BLOZ77P6vqS60UrAV3tjmBH0m08psbDszYudhi9JamM=
Subject key identifier:   F9:22:20:3F:B6:F8:F5:4A:29:59:93:22:94:F3:AB:6D:FA:2C:6C:05
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer:       /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial:       01962DF42FC888358465E83BF5810FA916F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: Psy7wNyMkF2pGmN0tQQ1NJHblAwlmcy96Kiw58iXapY=)
                          2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2f:c8:88:35:84:65:e8:3b:f5:81:0f:a9:16:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=f922203fb6f8f54a2959932294f3ab6dfa2c6c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:e0:b0:e0:e5:83:fb:db:98:4b:52:9f:fe:
                    0f:85:b1:e9:77:46:1e:87:6f:7b:10:d3:5f:23:44:
                    39:da:49:c2:91:70:54:b6:57:2b:20:76:e8:14:36:
                    8e:86:bd:98:14:26:8f:5d:29:35:b6:b5:a5:e6:eb:
                    27:ac:01:de:71:55:ca:13:ac:c6:a4:28:d9:08:31:
                    32:ce:09:cc:14:16:26:7b:08:63:5d:b7:a6:f2:f2:
                    bc:ba:24:3f:4a:e5:29:ff:97:15:20:fb:14:6b:78:
                    d1:4b:d4:9a:df:c4:d4:12:7e:c9:90:95:6b:52:05:
                    9b:25:09:80:dd:b4:11:70:8f:db:71:ff:84:9f:07:
                    fb:17:d5:3b:af:80:b1:81:6f:a0:d0:22:20:a2:1d:
                    ec:bb:c8:29:a1:e7:4f:69:a0:b3:17:c9:f6:4b:55:
                    0c:94:04:e9:75:9e:0e:40:3d:f6:48:e7:81:5b:52:
                    36:cd:1b:81:7c:eb:26:ba:e2:e9:79:af:d8:5b:b9:
                    7f:6d:30:bc:27:ff:4d:fd:5c:7d:cc:ea:5f:fe:98:
                    3d:34:ec:42:0e:b5:f1:d3:32:01:7d:18:a9:d2:7d:
                    b9:5f:cc:cc:9d:c7:aa:c2:19:b3:4d:61:ad:28:18:
                    2a:a8:c6:4b:67:6a:f2:05:82:2d:6d:65:44:5a:77:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:22:20:3F:B6:F8:F5:4A:29:59:93:22:94:F3:AB:6D:FA:2C:6C:05
            X509v3 Authority Key Identifier:
                keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:da:1a:fa:ee:a5:29:33:08:3d:f4:c1:97:e6:f5:31:9c:35:
         ba:da:79:4d:b7:2f:5c:43:65:f1:ad:d3:9e:a7:13:7f:e0:04:
         f3:b1:ad:75:a4:c0:9f:f5:6c:c0:f8:29:06:65:19:28:44:8b:
         0b:4d:c3:0d:ba:11:76:4b:d1:63:b8:16:c4:56:bd:2e:79:df:
         6c:e8:eb:3b:d8:68:9c:3c:e3:c7:de:11:ba:57:63:93:52:b9:
         4c:12:62:12:80:b6:27:a2:b1:70:69:1e:ed:03:43:d3:6a:5a:
         4d:35:7c:22:5f:02:b3:63:2d:92:b2:53:d8:01:e3:fc:b9:db:
         c3:ee:2e:4e:38:7e:59:83:84:38:13:4c:81:11:ed:b3:82:76:
         99:b8:79:47:e7:b6:17:e3:b0:50:3a:db:47:6d:e2:15:c9:d5:
         43:94:d2:0f:d5:15:1b:f9:59:1b:8d:f0:49:69:e1:ff:47:01:
         8f:3f:3a:cc:d2:9e:97:8f:99:c2:34:c5:a2:1a:24:3b:f4:28:
         9f:74:5d:e1:e9:ae:0d:3e:9c:ce:c5:b7:27:ce:88:28:15:b6:
         de:2f:67:54:01:6c:36:b1:22:33:3d:2d:be:c2:58:45:e5:d5:
         32:e9:c1:76:ad:ac:09:aa:a2:47:bc:6a:30:5b:4a:4d:6c:58:
         6b:e0:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----