Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File:                     mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier:          sMzoBWJA7UdcfNexpLz/j6wcVHYz52bnAsWlO5NOWf4=
Subject key identifier:   10:03:B9:F7:76:F4:B9:57:98:88:21:43:D6:56:8A:11:2B:D3:40:C4
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer:       /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial:       01962E61A610878E60C78782D801DBDF32CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number:          0ABF
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: kOSGx/JrZTYTgxQy39GSTp5rx+zd3wyxlvIPcQLKTpY=)
                          2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:10:87:8e:60:c7:87:82:d8:01:db:df:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=1003b9f776f4b95798882143d6568a112bd340c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:fc:58:97:43:9f:8d:35:2e:af:de:30:9e:
                    a1:9e:18:9d:ad:85:4c:24:60:42:4c:9d:fb:65:3e:
                    85:25:a5:be:21:a8:27:60:7c:cb:e5:16:36:81:36:
                    f8:10:5f:f6:3e:92:3d:18:71:6c:63:5f:61:7b:be:
                    7b:56:18:74:97:d8:64:f1:1d:84:30:c1:6b:3f:da:
                    c9:35:a7:23:7a:22:9c:01:20:7c:58:77:0d:1e:b7:
                    70:8d:2a:62:81:71:4b:87:41:b6:12:72:04:00:b0:
                    2d:52:e1:c3:58:fc:35:52:46:13:f1:69:37:9e:f2:
                    32:16:0d:8b:65:6e:c6:b1:76:07:0e:34:49:e9:ab:
                    d3:04:88:05:f8:59:65:1c:a7:b8:98:69:61:da:ae:
                    27:be:22:55:58:13:60:24:63:70:cb:b9:d1:1f:31:
                    58:6e:06:4b:ae:28:d6:30:88:96:f6:d7:7d:c8:7c:
                    ad:de:d9:09:c4:6d:a2:70:b9:12:3d:8a:e7:a3:8c:
                    fd:11:0d:15:49:7b:94:84:3d:82:9c:7a:b7:4c:8d:
                    4a:f3:ec:99:a8:7e:e2:37:8c:c1:75:68:52:c3:b8:
                    8a:f8:c1:bf:7e:cc:7b:a1:a9:74:99:2d:7b:d8:23:
                    9a:4c:f8:40:55:e9:71:8f:95:67:3c:fb:33:76:40:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:B9:F7:76:F4:B9:57:98:88:21:43:D6:56:8A:11:2B:D3:40:C4
            X509v3 Authority Key Identifier:
                keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:33:ca:e7:87:40:b0:9d:04:70:72:db:96:db:79:98:a4:c7:
         a2:f6:18:a2:b2:78:1a:0e:42:cc:2d:b4:e9:3e:e9:96:cf:5c:
         56:4e:25:55:ce:e2:36:30:de:07:af:e4:84:ac:fe:ee:ad:8a:
         c2:a0:e1:8f:2d:62:87:db:bc:37:8a:c6:b8:a3:8c:49:a9:63:
         b5:8c:83:ba:d1:c4:b8:6f:e6:37:bc:37:bb:54:95:b8:f4:94:
         6e:af:f2:24:f9:f6:f1:cc:9a:47:43:35:e8:d1:1c:48:56:8b:
         8a:7a:55:b3:01:22:ee:bf:13:53:87:0c:d4:cc:41:bc:fb:c9:
         1f:52:d8:09:57:ba:6c:a9:8d:7b:58:57:e1:10:72:88:f8:90:
         73:8b:78:a2:07:b3:ad:5b:e6:9f:62:73:9b:5d:a9:74:eb:89:
         18:8a:be:6e:fd:75:e9:1e:0e:01:48:ed:be:0d:68:83:eb:73:
         33:30:11:c9:2c:53:fc:99:c8:3a:62:a0:a9:8f:5a:f0:91:dc:
         16:84:15:ea:63:0d:df:43:e4:db:17:2b:9a:15:ec:6e:1f:b7:
         cc:85:a8:f7:5b:5f:5d:25:c8:90:59:c2:36:95:12:7c:fb:aa:
         24:64:19:c0:31:bf:ae:2b:a3:20:91:7c:8e:32:cc:15:13:f7:
         08:6c:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----