Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File:                     b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier:          1bl4u0HfdweMZWfvjf5p1FdlpLeZi0KabiYozmCZc98=
Subject key identifier:   D0:BC:69:5F:71:0B:DE:DF:14:71:89:D6:51:6C:D7:4F:AE:E2:B7:52
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer:       /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial:       01962E2B29B001550CA34652C06E2C282FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number:          07CB
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: 02XnfekKuKWwK6mECqkzUs+LcDN0TJk57VpYzqB9YNM=)
                          2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:b0:01:55:0c:a3:46:52:c0:6e:2c:28:2f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=d0bc695f710bdedf147189d6516cd74faee2b752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:dd:59:cf:3d:30:31:79:80:17:40:06:6a:
                    f6:42:e4:19:66:9b:dd:80:c5:e6:9a:2c:25:6a:67:
                    35:60:fa:0d:2c:67:14:0c:f1:1c:42:62:cf:49:a4:
                    bb:1f:50:1f:cd:9a:f5:6e:3a:96:dc:a4:c5:ce:55:
                    67:31:b5:20:aa:43:96:c0:e6:f0:ac:8f:1e:d7:9a:
                    1b:ab:ef:f5:ba:75:f0:f4:70:3b:8b:5c:e4:e4:ef:
                    f6:15:70:06:6f:50:ab:0a:e8:d4:7a:59:b5:c3:05:
                    94:06:33:5d:23:ee:a1:dd:73:b2:e8:2e:53:93:77:
                    d0:e2:85:60:bd:80:9c:f1:64:d3:cd:ee:1d:f5:42:
                    97:87:c1:2b:77:b6:ba:f6:60:8a:88:8e:4a:7d:65:
                    b7:d3:f0:89:a8:e7:73:13:cc:64:93:60:81:a9:b1:
                    fc:87:55:23:bb:5e:39:e6:81:8f:6e:55:c5:eb:6e:
                    4f:05:fa:f1:03:aa:d1:78:80:64:60:a1:09:f0:a2:
                    da:fd:16:de:0c:75:f2:4b:84:4f:52:04:a6:56:6a:
                    3d:92:e3:76:79:4d:b3:ed:e5:07:37:05:c5:3d:4a:
                    2b:79:72:a1:27:9e:c5:a9:2c:8c:56:c1:b3:23:9b:
                    ff:9d:66:34:17:73:4e:d0:b2:3d:dc:af:d0:85:1c:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BC:69:5F:71:0B:DE:DF:14:71:89:D6:51:6C:D7:4F:AE:E2:B7:52
            X509v3 Authority Key Identifier:
                keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:4c:0e:c8:f9:c1:38:e1:6d:2b:b8:1b:8f:ae:12:ea:1e:
         e0:bb:c7:a8:11:dd:2e:35:3f:52:cb:a1:88:75:8b:55:95:58:
         d0:ca:48:dc:ba:2e:3d:73:8e:b9:2c:01:5f:bb:07:2b:ae:ec:
         8b:94:54:4d:b0:de:aa:ff:3a:cd:b2:25:7a:d0:25:b0:df:4c:
         84:d4:d0:51:7e:56:7f:ea:67:a5:a2:01:73:16:1b:20:21:76:
         5b:b5:be:12:0b:b5:2b:12:22:e5:7a:c5:67:30:0b:fa:a3:a7:
         a1:70:e7:47:37:8e:6a:2c:b1:ab:2a:0d:73:fc:fd:1a:26:01:
         4a:db:43:7d:f0:cd:82:91:e6:9f:04:31:11:75:b7:5d:65:5a:
         f4:36:bd:62:dd:e1:29:c3:5d:e1:1b:fb:2d:2a:bf:4d:b9:15:
         49:f2:ea:02:ab:2a:c2:29:dc:f2:93:aa:1e:6b:86:cc:b3:5d:
         91:fa:ff:39:53:1b:e9:7e:17:45:ed:2d:4a:0b:c0:99:f4:a7:
         37:7d:7e:1c:c9:9b:77:e8:c8:15:0b:a3:1b:25:69:74:98:2b:
         d4:2b:08:80:1d:83:5f:25:e9:82:d2:46:6c:1a:3c:db:75:cf:
         e2:11:24:5d:dd:16:f8:18:6d:44:73:67:94:27:f8:e5:2f:eb:
         ff:60:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----