Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          YoD9tMlv37iKV10SKDHkgUzzo5r9MEnFBnowYOtZoeQ=
Subject key identifier:   4C:58:C0:BD:AE:68:B5:14:82:96:1C:5B:5E:98:8F:52:3C:83:DE:5D
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       01962ECFA7C625E97AC35B672561EEFFA3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          08D7
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: isi+qaKnaYo7AWIhfb97DNcoWefh/aLD5ZwuiZVRKtw=)
                          2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:c6:25:e9:7a:c3:5b:67:25:61:ee:ff:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=4c58c0bdae68b51482961c5b5e988f523c83de5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:a3:c1:3c:bf:f9:21:23:ba:cd:78:54:9c:
                    5d:47:3a:69:54:a9:0a:05:25:ac:db:27:93:6f:76:
                    c8:2f:6c:29:b9:b5:9a:3e:73:ac:eb:d7:75:c3:64:
                    0e:5a:42:62:1d:e4:0d:e4:09:a3:f4:c9:4c:81:bf:
                    ec:be:cc:2d:cb:f6:c6:cd:53:39:29:e2:61:39:9a:
                    0e:7a:4c:1a:1a:49:18:ea:0e:1d:13:de:f2:78:ef:
                    80:b2:7f:27:03:8a:fd:85:d5:e9:b7:42:f1:28:13:
                    82:fa:bf:b6:99:a5:9d:80:cc:ac:39:b7:97:74:cf:
                    5c:f7:aa:5f:1d:38:41:a6:8d:1a:37:94:e5:2c:ba:
                    82:d0:87:3e:4d:81:a2:14:37:7a:7b:9a:ee:cf:82:
                    f8:f6:ee:09:11:28:8f:01:60:ef:0d:2e:b4:74:05:
                    6f:7e:f0:c0:f0:fa:48:8c:42:70:31:99:ee:d2:bf:
                    cb:b1:18:fe:46:0b:af:66:2b:d8:11:af:c2:36:a9:
                    8f:6b:ca:9c:27:32:0c:40:a3:89:ba:75:32:f1:a5:
                    43:25:98:c6:0b:ec:cd:2f:5e:41:4c:b3:77:5a:a5:
                    10:16:e8:b1:0f:38:d3:f1:34:98:6f:a3:12:8b:13:
                    48:64:bc:d6:db:9b:99:5e:8d:6b:63:94:17:9c:b6:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:C0:BD:AE:68:B5:14:82:96:1C:5B:5E:98:8F:52:3C:83:DE:5D
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b7:16:d8:46:df:dc:84:47:2d:a7:24:bf:82:10:c3:b1:5e:
         42:c9:7f:e1:8e:a4:f0:4d:04:57:d5:a1:6a:99:33:8c:f2:f4:
         4d:04:40:5c:62:df:7b:ea:ad:6b:e7:b3:0e:1f:0f:0b:bc:87:
         61:45:71:2a:50:ac:0d:5b:68:5d:f8:1b:8f:90:41:a1:f6:80:
         77:28:3e:d0:4b:bb:31:8c:56:83:af:30:1d:28:41:fb:32:96:
         76:80:8b:2a:0b:9e:6c:59:bd:89:ed:0d:5d:25:5a:58:e3:c9:
         0e:41:c2:40:50:65:5e:df:7c:0e:50:e3:60:5a:96:52:1b:ba:
         ef:5d:30:58:c4:8b:5e:02:0c:27:56:ea:f8:ab:c2:6a:91:b6:
         39:37:af:55:c0:37:6f:fc:b5:a4:61:70:1c:07:4a:9d:ca:5e:
         4c:ff:09:00:9d:f5:2d:22:ac:25:e7:bd:fb:4c:7b:cd:d9:43:
         f7:27:f6:73:c7:35:a0:1f:15:9e:83:3b:78:e1:30:b2:05:43:
         0f:43:49:06:11:16:d8:1a:17:2f:c1:07:eb:66:58:72:1f:3e:
         7a:1e:5d:47:e6:38:68:e2:08:27:b5:26:29:79:72:f8:46:6d:
         4f:c6:26:b9:df:43:c8:27:05:99:1b:cd:5d:b0:67:85:55:bc:
         df:7a:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----