Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File:                     BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier:          /szhHnXGcrgSxpKgUGbfBJuUb6IcYxuNmqHTLXUcMD0=
Subject key identifier:   E6:2A:48:05:F4:C2:3C:5B:6A:5B:EB:62:A1:2C:BD:EA:1D:DF:8E:F8
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer:       /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial:       01962F070C2D5DCDA9884E33A94878866A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number:          07C9
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: RVQbGLR9V1gSgMHXlpP/3Tmtk107tchdi37ct//ceeo=)
                          2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0c:2d:5d:cd:a9:88:4e:33:a9:48:78:86:6a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=e62a4805f4c23c5b6a5beb62a12cbdea1ddf8ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:c1:ce:4d:94:41:36:1e:c9:25:34:e4:f7:
                    d1:f7:ea:35:99:e8:f7:e6:ec:16:c9:e8:ff:6f:8f:
                    72:59:de:75:4e:d3:28:ba:a7:f2:42:e5:11:0e:4a:
                    1a:f8:cd:71:b6:ac:b1:e9:18:7e:a1:48:cb:e5:f8:
                    dc:25:fe:29:ea:2e:b2:ed:e7:9b:85:02:e4:fa:92:
                    90:a6:06:60:8c:c6:23:32:c6:04:4a:29:d8:e0:93:
                    a4:e9:a5:1d:6b:02:be:40:d6:99:2b:24:90:af:2b:
                    b0:0d:f7:ca:04:7c:4c:06:e4:ae:9d:69:eb:e0:86:
                    02:62:1a:f4:53:8f:a6:c6:28:34:9a:51:cf:dd:a6:
                    6b:55:6f:1e:98:67:9e:fd:76:cb:e3:02:a4:05:f2:
                    aa:a9:c2:79:1d:a1:49:fa:e8:71:35:93:4d:14:46:
                    bf:76:ef:f0:89:a4:15:3c:d5:dc:41:bb:53:6e:29:
                    28:28:fd:70:dc:79:01:c6:58:e2:00:63:5c:1e:c0:
                    8f:ae:cc:e4:ae:a4:0d:97:96:52:1a:14:d5:d4:87:
                    28:68:fe:06:a6:9f:e6:27:e5:6d:22:77:60:1f:cd:
                    dc:69:fd:12:a4:1a:15:21:ac:71:72:49:93:a1:b5:
                    82:b8:2b:6c:87:4b:b8:33:b3:3a:aa:e4:e5:0f:7c:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2A:48:05:F4:C2:3C:5B:6A:5B:EB:62:A1:2C:BD:EA:1D:DF:8E:F8
            X509v3 Authority Key Identifier:
                keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:fc:d7:f5:bb:c5:2c:f7:ce:14:f2:e8:db:31:d1:95:ad:
         13:3e:ed:71:c1:c3:7e:94:85:ec:b3:4f:68:ab:c5:20:52:88:
         06:8f:2f:f6:40:3b:c6:fd:33:5d:6e:bb:ef:e8:66:47:12:74:
         86:42:41:2e:c9:35:b4:76:9f:39:ff:23:69:ae:3d:57:13:b4:
         8d:1f:4f:98:2b:a6:f7:8a:b5:e7:79:92:0e:b7:fd:05:f9:16:
         33:e0:38:ef:8d:5d:23:04:46:74:4e:9d:7c:3a:83:c2:a4:b5:
         56:13:ba:e3:b6:8c:9c:42:89:11:7b:36:7c:2a:a6:e6:77:d5:
         8a:f9:4b:8e:b8:e6:5f:36:3a:f4:c9:cc:01:06:f6:95:12:e2:
         3b:05:72:c7:9d:31:7c:77:ea:a3:d2:74:d6:13:9c:24:65:1a:
         6c:87:a5:7d:2b:3d:d8:19:bb:b3:e5:c8:52:ba:b0:2d:4c:9f:
         97:bf:42:b6:88:47:17:d0:01:26:87:c4:e9:c6:97:02:97:a1:
         d7:97:e5:12:9c:03:79:23:c6:ee:11:4f:e2:38:80:3b:9b:4d:
         83:14:15:fc:78:7d:9d:e9:c8:9a:af:cd:06:fc:4b:7f:5d:c4:
         f0:e1:77:a7:59:38:92:0e:89:43:1a:e6:dd:ca:91:16:0c:26:
         dc:5f:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----