Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File:                     B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier:          Xv+5pXKiqJdLA3GiG3xoxN2nwfavsv+iRwx/88w1sEU=
Subject key identifier:   79:2F:FC:B3:D6:2E:17:69:DA:5C:B7:43:8E:68:78:72:40:AC:5A:C3
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       01962FAB21350B092BD642A96E6090F3E0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number:          0B50
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: qgcdaTE6bvNVHvtEjmzrL/ogn2yWYA4eY96E6aK/Ew8=)
                          2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:21:35:0b:09:2b:d6:42:a9:6e:60:90:f3:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=792ffcb3d62e1769da5cb7438e68787240ac5ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:4c:71:66:07:ab:b6:00:ad:45:4b:58:1e:
                    7d:52:25:a1:06:82:42:6f:18:94:cb:cf:04:57:00:
                    e7:cf:d8:5a:c6:53:a3:94:e8:a8:ff:ad:02:ea:0c:
                    2c:3d:c5:93:57:a2:92:72:33:a2:eb:98:9c:29:f3:
                    58:c0:79:7e:6e:cf:31:a8:4e:f7:79:83:f6:fb:5d:
                    79:3f:93:95:d1:e8:1b:ce:b8:28:13:b7:03:04:26:
                    98:ef:bc:8a:2f:88:7d:96:11:57:2f:d0:36:6e:bd:
                    44:ba:60:eb:34:c4:80:11:1f:a1:57:1d:cc:42:76:
                    85:d0:43:4c:45:85:9d:a9:81:ce:a8:56:5b:8f:6b:
                    77:00:00:fa:4b:0a:e1:94:a8:fd:2e:5e:4f:07:b2:
                    1a:1f:bc:88:bc:fe:42:8e:ff:58:df:c1:6a:2a:45:
                    4f:7e:70:22:10:98:b8:1c:d6:c1:e6:35:49:16:17:
                    a6:7c:53:d8:86:58:fa:9d:1d:62:a0:97:cc:a7:1e:
                    4d:46:e9:a1:c5:1c:e2:60:9c:15:ef:18:bb:d5:96:
                    97:06:5c:dd:94:4a:06:f9:fa:19:8f:92:6a:94:b7:
                    aa:4c:bb:cf:6f:ae:ec:87:a0:b6:38:0b:5c:e4:4e:
                    92:a0:c8:7b:55:8a:de:70:1d:a7:26:83:23:2c:63:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:FC:B3:D6:2E:17:69:DA:5C:B7:43:8E:68:78:72:40:AC:5A:C3
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:76:e7:34:b1:f8:5a:e1:e1:ea:6b:11:7f:ec:0c:b1:a8:
         6b:5c:39:92:25:f6:96:e9:2b:c6:69:b7:0b:f0:03:db:1d:21:
         02:b7:dc:94:c5:cd:5b:23:d8:0c:72:c8:39:85:20:39:70:c0:
         67:7a:b2:93:f4:cd:af:d3:6c:a5:92:58:03:97:6a:17:24:db:
         93:fc:c0:1c:6d:f8:d4:6e:6a:06:eb:34:80:7c:0a:be:54:d9:
         a3:f2:c9:d3:dd:0a:50:f8:0b:90:33:9f:72:c9:dd:3f:d1:43:
         ec:7d:4a:f9:3b:65:8a:85:5e:b5:89:9d:ce:60:48:c0:6f:73:
         78:c5:21:f3:7c:3b:e2:49:d0:19:a3:0b:e3:0a:25:8f:56:f0:
         2c:40:43:2c:40:2a:78:9e:88:6b:73:01:09:4a:d9:dd:73:9c:
         cf:6c:ac:87:f3:ea:3f:92:b2:5a:6c:a5:ef:98:52:c8:5c:7f:
         db:04:04:db:ec:fa:1c:6e:af:c4:9c:8b:7b:46:ea:a1:0c:d4:
         f8:4a:d8:ae:9b:bb:4e:54:6b:ae:18:c4:ec:5c:18:88:34:6f:
         24:b6:1a:85:ad:48:bb:46:09:41:2b:7a:be:de:f6:3c:b0:83:
         2f:73:1e:39:73:fa:10:f9:3b:a0:db:3d:ed:50:c9:7b:a0:b0:
         a3:54:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----