Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File:                     BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier:          2O+2gTc+2sO6daYPekhFojfrBcr914rL62KmdUVMQ7E=
Subject key identifier:   AC:11:97:F2:05:9E:3C:68:96:65:54:10:A1:0A:06:E5:4C:5E:BE:23
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer:       /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial:       01962F06ED09FC877DB4027DD0B678B3957E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: WZY1ffWdh7/UouRgsL9WopEl7s/fHBEfuq3ZFsK82po=)
                          2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:09:fc:87:7d:b4:02:7d:d0:b6:78:b3:95:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=ac1197f2059e3c6896655410a10a06e54c5ebe23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:1c:3d:a3:f4:ca:f9:bd:7b:83:52:96:ee:
                    57:d3:89:32:42:c7:f2:ec:df:53:ed:02:12:c3:18:
                    09:30:4e:ae:cb:19:a2:df:08:a0:3c:49:67:c1:e7:
                    4c:16:0a:c8:af:c2:fd:35:ba:1a:50:86:b4:db:36:
                    3d:52:9f:1a:10:7a:0f:2e:61:31:5e:b8:e4:2d:96:
                    e6:48:52:e1:89:13:d3:a7:df:37:89:b8:b1:b6:f6:
                    02:2a:fb:9b:42:95:d7:03:37:c9:03:ae:cb:13:13:
                    2d:bb:27:f5:73:87:06:f4:88:9b:f2:79:8a:94:10:
                    f3:31:c6:1f:45:a8:28:4c:e5:a9:7b:4f:45:24:c7:
                    a9:1a:46:ce:26:25:d5:09:39:4b:36:db:cc:ec:52:
                    42:86:3a:26:88:79:c4:76:b3:d9:7f:84:30:3e:ef:
                    54:be:a7:b9:cf:8e:3a:5c:c2:38:98:04:ff:be:6d:
                    81:21:44:1b:86:6c:d0:cb:f9:a2:0e:2f:50:28:9a:
                    19:40:68:e2:3e:39:52:6b:00:85:d5:88:35:7f:a1:
                    7d:45:bc:57:70:50:39:0b:00:c5:89:69:b2:a6:46:
                    86:51:42:9d:91:96:61:d3:27:cc:90:2a:57:94:c6:
                    01:b5:ed:61:54:c7:9e:7e:41:3d:ae:b6:4e:48:b8:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:97:F2:05:9E:3C:68:96:65:54:10:A1:0A:06:E5:4C:5E:BE:23
            X509v3 Authority Key Identifier:
                keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:24:d4:3a:fc:4c:9a:e1:ad:22:b1:8a:62:9f:4a:48:33:
         c2:9b:7d:8b:ee:2c:76:ae:8c:fb:4e:ba:47:9e:73:64:89:4c:
         78:ec:17:03:90:87:35:6e:8e:5d:18:1b:da:c0:e1:fd:e7:8b:
         aa:1f:c5:8d:1f:01:49:d9:67:15:05:33:b4:17:ac:c3:26:da:
         83:5e:5f:92:72:d2:dc:e2:53:88:9a:d7:30:e5:e5:f7:4b:9c:
         05:f4:a7:25:a4:dc:d1:79:1c:4f:6e:8d:c5:ab:81:de:6a:68:
         8d:f2:a3:b3:0d:6b:2e:0c:d3:2a:18:e7:82:12:7a:fb:b9:f1:
         fd:d9:13:2d:ea:f4:68:9a:af:96:db:2a:35:52:85:f7:ad:9e:
         5c:87:38:0a:be:a9:ef:fc:5d:43:d1:a5:28:76:7e:e0:e8:ca:
         5c:e6:20:af:49:6b:07:4d:56:6e:c2:cb:e0:7d:ee:6c:17:3c:
         9c:1a:41:23:65:03:52:4b:8e:d8:5f:a1:36:ec:bb:0b:92:67:
         d2:5c:32:d2:d8:30:cc:9f:50:fc:25:87:8f:59:a1:2d:de:2c:
         ec:9d:93:6c:35:63:49:53:c6:06:3c:e6:b6:84:9d:55:43:0a:
         0e:24:47:e4:70:ce:85:ed:31:92:12:e8:32:8f:1d:a4:6d:8b:
         96:11:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----