Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File:                     BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier:          Vt1GXHv9ln9et+Cg4OP3xB75FP+0y0L9p4iC0JBqIao=
Subject key identifier:   1D:D0:AF:BF:B4:B8:0D:6D:28:6F:DA:63:62:39:81:24:0B:BA:1F:89
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer:       /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial:       01962F745701F21F770C5F659FD2BED466AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number:          0694
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: aQoWXAoc7gxMOe/qn/jtvMUvC6QX1zCBccU31ugGa58=)
                          2: rDLUksu5RJZHpovJcJfARGodJyk.roa (hash: 6LsaGYClie7jwTmpMZAxkMISVs9EUqwDFuEv8m5cWNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:57:01:f2:1f:77:0c:5f:65:9f:d2:be:d4:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=1dd0afbfb4b80d6d286fda63623981240bba1f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:e4:c2:9b:e3:dd:b5:eb:93:73:63:cf:4c:
                    61:a7:a8:ed:7f:1a:a1:36:77:fa:ac:2a:04:73:ab:
                    34:de:b2:94:2a:ad:e2:5a:f9:72:23:f3:da:5e:55:
                    a7:d2:98:ee:94:10:38:ba:91:55:ce:d1:65:3f:c0:
                    cc:9f:4d:59:c9:a4:a6:90:70:3f:58:50:99:c3:c6:
                    50:19:3e:50:19:f7:4d:17:2c:75:4a:3b:a0:9b:0a:
                    59:5a:96:eb:2b:ae:45:ff:7e:21:c8:a8:75:6a:c0:
                    b7:31:07:f3:00:3b:31:70:a7:c4:d9:1e:06:59:9d:
                    46:d8:3a:c6:fb:f3:58:8a:09:c7:0f:56:2e:5f:4f:
                    0a:72:a8:d6:5c:b8:2e:3e:81:e3:db:20:d9:3c:15:
                    f1:38:58:f8:2c:42:de:b1:2d:a7:15:cc:e9:a5:51:
                    0c:fc:7d:fe:52:14:15:43:16:53:c1:01:70:ee:9b:
                    94:61:51:f7:d0:72:5c:d3:32:a0:40:90:98:51:d4:
                    cd:cd:31:0f:60:e1:19:42:bc:ce:40:83:8a:48:04:
                    49:b7:e9:53:2c:b9:8b:84:88:75:5f:31:a0:48:41:
                    8b:fe:c3:23:26:07:13:07:a8:c2:f9:cd:58:77:f2:
                    10:c0:12:90:86:a2:a9:bf:14:6b:2c:c5:94:2f:67:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:AF:BF:B4:B8:0D:6D:28:6F:DA:63:62:39:81:24:0B:BA:1F:89
            X509v3 Authority Key Identifier:
                keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:e7:a6:a1:9f:66:d1:b4:f1:ce:c6:43:87:e3:08:95:6e:
         1e:d9:5f:0c:72:ee:de:f8:9f:40:ed:4b:3f:8a:cb:8c:02:ab:
         da:c6:d5:b4:7c:23:b4:71:82:f0:20:df:03:75:b3:67:54:f8:
         e2:c3:e0:aa:9d:99:fa:79:21:1b:b3:8a:40:04:30:37:46:12:
         83:e3:52:82:92:64:25:9f:67:39:5f:a8:38:e3:9c:82:21:d4:
         5d:25:f7:ca:69:b8:ca:01:58:73:4c:92:9b:2b:89:f3:43:b5:
         aa:f1:29:40:62:f9:6d:7c:8e:48:35:b5:23:a6:6b:f6:76:a7:
         08:bf:f6:3e:b8:80:a4:f5:dc:63:d8:56:ee:88:a3:7b:1e:be:
         b1:68:d5:48:c2:ac:62:8d:e2:b0:05:36:6a:b1:14:c7:05:14:
         88:64:32:8c:18:e5:be:05:cd:54:7d:a3:b4:e4:48:b3:98:c7:
         dc:53:a1:00:95:8e:89:5d:1c:5a:b6:d9:f3:96:ed:ec:88:1b:
         4d:ed:ec:05:15:59:b3:f7:b3:eb:c8:45:ca:fb:29:c7:68:08:
         9b:6f:7c:52:de:6d:64:30:f4:f5:24:d5:b3:3d:78:7d:2b:86:
         e4:2a:16:73:7d:4d:71:d4:f6:fc:15:38:d9:0c:c8:52:62:06:
         58:0a:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----