Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File:                     B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier:          LushlC1fzK2vsbN+jcYt5vSyffHR9xOdnTrFhrYmYrs=
Subject key identifier:   62:59:50:1B:F6:99:1D:15:C5:E1:53:D7:53:D7:D5:F1:47:F1:5E:51
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       01962E98CA44D7178F7DDE8E97A059B8F6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number:          0B91
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: cwYTey+f9L9uY37P8+D4PhfIiyXL0IzFZU/s9RC8KLc=)
                          2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
                          3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:44:d7:17:8f:7d:de:8e:97:a0:59:b8:f6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=6259501bf6991d15c5e153d753d7d5f147f15e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:4d:30:a6:19:a4:8b:6f:8e:45:bd:fc:14:
                    13:51:27:c2:ce:9f:4e:e9:bc:82:1e:b8:f4:57:38:
                    ee:31:1f:9a:01:c8:22:d3:87:aa:68:f5:b6:cb:db:
                    fe:08:c7:00:23:67:f8:b2:77:86:e4:1c:d3:ed:08:
                    60:6b:a0:dc:07:27:4f:d4:20:f3:a5:c9:cb:42:22:
                    03:5f:1d:62:35:b8:a5:5d:cb:8f:48:58:a0:f2:5d:
                    4f:42:f4:65:01:c5:bf:5a:5b:ff:16:3c:92:cb:e9:
                    a2:f4:08:b6:bb:76:f6:97:9f:6e:e5:83:43:b3:99:
                    78:a5:e4:9b:2a:0c:87:bd:90:a4:7b:3d:b3:db:38:
                    cd:4c:f2:7a:86:ae:a3:c9:c8:89:a7:22:a4:f6:85:
                    91:fd:70:6e:c5:f3:f3:46:f9:5d:c8:7a:32:8f:ac:
                    9d:58:de:ce:60:58:88:4c:3d:38:43:5d:42:a7:8b:
                    7b:1b:5a:91:7d:c5:17:96:58:a1:a2:88:07:de:16:
                    56:c4:1f:34:32:f8:e9:b4:e5:55:5b:7c:17:58:a0:
                    66:12:53:95:e0:1d:45:1a:db:b3:24:97:d9:72:f2:
                    49:60:46:ff:57:c4:30:e0:61:de:a4:14:51:9c:b2:
                    a0:30:d0:8d:28:90:62:79:d7:8d:76:84:ac:57:39:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:50:1B:F6:99:1D:15:C5:E1:53:D7:53:D7:D5:F1:47:F1:5E:51
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:1b:e8:71:f3:1c:70:ca:33:64:ff:43:db:d3:92:84:1e:
         c1:a6:f8:68:eb:ec:7a:d8:ba:ce:b6:60:68:5e:a3:6b:81:f3:
         25:64:dd:16:89:e7:17:25:78:1b:e2:48:09:83:30:33:a2:d4:
         be:7c:9c:4d:6c:d3:fb:f2:9f:82:d0:fa:e9:48:46:91:a2:a4:
         0e:1a:39:7f:dc:66:fd:cc:fc:66:1d:f1:44:3f:fc:48:77:84:
         76:06:c9:c3:78:15:53:93:17:4f:87:1b:61:4b:e7:13:b4:fb:
         57:25:99:cd:35:2f:98:fd:3e:4a:25:d5:18:b6:b8:c5:fe:ce:
         ed:4d:60:5b:37:39:b7:d5:d7:3f:56:e5:cc:27:32:6e:01:b0:
         02:1c:d4:90:a5:37:df:f5:e2:71:02:ae:0a:3c:32:a1:85:a0:
         55:5e:8e:11:57:0e:57:e6:7d:67:4e:af:16:10:37:9c:7f:5a:
         f5:a5:e1:dd:6f:99:99:21:62:1c:63:95:43:34:a6:de:2f:1a:
         19:a5:e8:26:4b:1f:40:bd:9b:f7:b9:9a:94:44:71:e8:c7:ca:
         2d:62:9b:60:32:d6:8c:c2:8b:be:75:a9:cd:26:99:76:12:39:
         f1:39:35:e5:a1:76:e4:d1:76:3e:84:7f:9c:11:7a:aa:e2:64:
         f6:80:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----