Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File:                     BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier:          Zu1/bjacz8itUi3p8MLviP0NA12QzJTBLi9WvvzL5aE=
Subject key identifier:   32:96:8B:B2:D8:47:28:25:F8:F4:71:AA:11:AD:AD:6F:74:4E:28:81
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer:       /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial:       01962F3D68FE9AF47897A73EB8DA5AA93EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number:          044E
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: bdM4uhSMzMuZ98scFVhaoWgcxkIvuIlpwvfRLfDA8GQ=)
                          2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:fe:9a:f4:78:97:a7:3e:b8:da:5a:a9:3e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=32968bb2d8472825f8f471aa11adad6f744e2881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:ad:4b:59:ce:df:8b:c0:5a:dd:54:cd:f7:
                    2a:6a:76:41:2b:09:77:0a:dc:7c:59:6b:05:9c:10:
                    b7:ef:f6:2f:a8:d2:4b:b9:b7:f2:75:3a:54:62:40:
                    3d:c4:66:1f:7b:78:e7:68:83:df:b2:ad:dd:9a:2a:
                    e4:ae:18:b2:bc:f0:de:80:25:45:3e:0f:d0:f9:db:
                    bf:d6:51:c0:87:cf:9e:a9:23:f8:fb:ca:d9:77:39:
                    01:ad:6c:3d:77:19:16:a0:96:c2:56:0a:0f:79:13:
                    27:c0:d8:66:c8:23:92:24:f7:c5:1d:86:61:3d:6c:
                    c1:b6:75:1a:57:f1:ef:05:71:b1:70:45:89:c8:81:
                    5d:3e:a5:ee:a2:b2:de:a3:d9:7d:d7:5e:de:d1:91:
                    b0:68:08:7c:aa:58:47:a9:b0:35:d5:44:54:f3:00:
                    f7:8f:76:b4:98:31:7e:93:2a:ed:22:67:64:97:13:
                    05:61:80:6f:97:da:92:e5:b2:27:8b:ad:1d:0a:03:
                    de:66:13:3d:38:23:03:c9:08:ca:25:da:7a:df:31:
                    7c:2e:f3:4a:fd:41:3c:a2:e7:7d:89:0d:1e:5d:31:
                    39:1b:33:5b:c2:a6:ef:ad:9d:e2:a7:51:3e:67:33:
                    94:c2:42:c2:70:4e:0e:a1:80:2a:65:b1:00:9d:26:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:8B:B2:D8:47:28:25:F8:F4:71:AA:11:AD:AD:6F:74:4E:28:81
            X509v3 Authority Key Identifier:
                keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:e0:d6:2f:a0:2b:d4:37:0a:f8:1c:b0:2c:5f:32:68:07:
         d6:1a:41:de:7f:84:96:97:59:10:34:46:74:1b:69:51:1e:90:
         60:df:35:3f:47:1f:18:6b:fd:d7:f0:8f:74:82:35:01:d5:77:
         d9:14:49:c1:6d:e7:6d:6e:21:b0:99:df:1b:8a:8b:8f:f7:8f:
         e7:a7:37:f7:a9:e3:b4:6e:6e:fe:ee:a3:07:16:c3:cf:c6:a4:
         30:f4:1a:47:48:af:6f:42:af:f6:b6:dd:d8:18:dc:29:00:f7:
         6d:04:60:a7:6a:3c:82:53:23:8f:14:87:ea:b9:b1:e0:89:0a:
         9a:1d:a1:4c:38:33:f9:d1:11:9b:40:2c:44:13:7a:28:ec:4e:
         58:4c:ee:a7:cc:29:f4:b6:22:87:83:5d:66:e1:a7:09:e5:c7:
         ec:8f:c3:1d:fc:0a:52:74:b9:fb:c3:6c:42:0d:57:1c:ba:db:
         1c:39:38:37:58:d5:28:32:c2:9d:99:3a:5c:39:2c:46:b6:b0:
         57:01:ff:da:33:7c:0a:da:74:77:e8:44:99:32:ed:30:49:a8:
         2a:85:d3:d7:6a:3c:31:27:7e:18:18:c9:1d:a1:3c:b5:ce:54:
         27:c2:f1:27:f2:4b:ea:40:1b:c6:67:55:be:e2:97:2a:bf:d8:
         7a:d4:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----