Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File:                     lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier:          dABsoQIZjq/JV+NeqbVHm6432iL6unIFMMbS02ztjRw=
Subject key identifier:   BC:F4:74:12:35:22:4C:E1:B9:28:F7:C2:7B:1E:43:CD:37:22:AC:2B
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       01962F3DB33A32839ABD1AF3A37771FA6EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number:          1597
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
                          2: DrZpY6t_Z34aPnka8mlfxbcLul4.roa (hash: ArUDkHPBl4MihbzSvZGcRbPkxSIlgTU5MGX9tL6hwUo=)
                          3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
                          4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
                          5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: wsWrizyxuldt0QfqfNSbdkiGlwx0pF8l3KA/Eo4olTk=)
                          6: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
                          7: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:3a:32:83:9a:bd:1a:f3:a3:77:71:fa:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=bcf4741235224ce1b928f7c27b1e43cd3722ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:21:89:5b:34:11:c1:70:40:f2:89:0a:81:
                    64:a3:c3:a2:8a:36:8d:e7:d9:15:2d:c0:21:33:97:
                    5c:d6:04:61:82:02:2f:5f:f8:0c:76:a5:49:e5:04:
                    0c:7c:b0:ae:9d:84:a1:18:93:27:a9:64:ca:d1:ab:
                    1b:bb:b0:5b:11:3a:97:df:29:d4:0a:ae:3f:9e:09:
                    e9:d6:ef:9b:b1:02:30:ee:0d:af:95:a1:b8:3d:1f:
                    23:53:b3:f2:82:ef:af:51:1e:4f:ad:af:31:e9:22:
                    cb:e6:05:39:39:84:be:ab:65:8e:33:f5:71:4f:da:
                    da:78:1d:0a:f1:f1:1d:bb:92:14:fb:c4:28:95:c4:
                    8a:91:f1:18:c2:f4:95:5b:2d:f1:b4:9a:f1:ca:90:
                    3f:74:2a:f0:16:b8:bb:26:ae:5a:d8:40:68:6a:7f:
                    00:80:bc:cc:1f:99:fc:0c:ec:49:fb:83:75:8d:cc:
                    8e:d1:a0:2c:be:be:31:45:34:08:32:2a:f7:2f:73:
                    2b:6f:be:a6:43:3b:e1:0f:ac:fb:3b:06:36:41:36:
                    fe:44:f6:89:6d:34:2f:b7:31:85:3b:36:57:29:0a:
                    b0:40:3c:1d:6a:5b:3c:ab:d8:f7:f4:b6:b1:ae:72:
                    49:2e:46:09:a4:bf:02:81:de:d3:c7:d2:62:42:41:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:74:12:35:22:4C:E1:B9:28:F7:C2:7B:1E:43:CD:37:22:AC:2B
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:b7:4e:1a:e3:5e:11:43:dc:6c:58:73:79:f5:cd:92:92:
         ea:f9:5f:87:c5:c6:27:a9:6e:35:1e:3e:28:09:72:d4:c0:9a:
         9d:08:09:a5:39:6c:e3:b7:33:c0:68:44:3a:04:dc:6d:a1:d0:
         d9:1d:b1:6d:a2:0b:a1:d5:98:2d:e6:99:7f:cf:e9:b2:9c:17:
         20:e1:27:2e:f2:52:3e:7e:38:3b:72:90:a1:61:06:7d:f1:a2:
         73:c9:6b:58:6d:a5:d0:99:98:3f:52:60:04:c8:02:91:96:d3:
         2e:24:f9:2e:85:c3:f4:07:05:51:90:d9:46:9c:dc:9a:87:0e:
         84:fb:ef:18:d8:ba:c0:32:2d:6d:88:4b:4d:48:82:f2:48:c4:
         b6:b3:c8:fd:26:3c:16:14:d4:cc:ba:d0:d0:c4:ef:62:bd:81:
         79:0d:f7:1f:08:0e:de:e6:26:a1:24:e7:a1:8c:82:43:82:17:
         41:87:7e:29:d9:c2:c4:00:d9:f2:4e:df:a5:e3:10:97:f4:55:
         d5:37:3a:cc:de:69:61:fc:06:fc:67:6d:74:d7:f9:6d:54:7e:
         c4:40:a6:20:43:d8:78:7b:8c:43:35:61:42:fe:64:57:31:07:
         26:c2:39:16:b4:e2:05:a0:74:32:24:38:ad:78:89:1e:77:47:
         f4:1d:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----