Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File:                     tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier:          +K7GjeATkULozddekGNfn8aA3CNhY0gTpMpMoGHYmu4=
Subject key identifier:   7A:BC:D1:F4:50:08:A3:72:F8:16:45:BF:BB:74:F2:BB:C4:4F:67:0E
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer:       /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial:       01962F06C2B3737EDC830CA34C1B0939ECAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number:          0DB9
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
                          2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
                          3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: i7sAgJogh7OAz2r9BzOv767OpBqSWJS54LXQJgjSgFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c2:b3:73:7e:dc:83:0c:a3:4c:1b:09:39:ec:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=7abcd1f45008a372f81645bfbb74f2bbc44f670e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:df:5d:fc:9c:d8:9c:80:d3:3e:ad:77:9b:
                    9b:eb:bd:62:a5:7b:ba:e1:d1:ce:2a:b0:63:db:ab:
                    5d:4e:81:e2:ba:ff:2b:04:d6:85:60:e3:6f:e8:89:
                    29:30:05:ca:69:9d:3a:7e:39:9b:e0:f1:3d:75:f7:
                    05:46:6a:d7:c2:16:bd:d5:e6:e2:06:25:ba:fd:1b:
                    9d:47:e5:27:6e:26:98:6c:22:06:fd:e4:8c:99:98:
                    dc:e4:24:58:ad:aa:07:28:93:12:7e:b8:b9:23:58:
                    ed:72:ce:58:2b:68:b7:57:27:ed:51:ca:dd:2b:4e:
                    87:7e:89:91:11:96:ec:d5:b4:42:39:9f:5c:fd:fc:
                    15:5d:97:64:f5:3f:ad:0c:ca:23:81:6f:ce:18:77:
                    da:07:46:24:b1:7b:15:68:bb:1b:b7:ed:83:de:00:
                    f2:3d:05:1e:00:59:09:3b:8b:f4:b1:26:76:6a:ac:
                    14:01:65:c8:96:c2:f4:3f:8b:47:2c:f5:85:ab:56:
                    a8:29:1a:38:e1:0f:ae:81:a0:2b:4c:af:24:f3:af:
                    09:3a:0e:99:7e:87:80:fb:74:25:40:a0:9e:4c:e9:
                    84:eb:73:76:5d:48:ce:f7:95:a1:4f:eb:62:e3:da:
                    49:48:17:4c:2e:ed:7d:53:79:8f:c3:5e:4d:74:9a:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BC:D1:F4:50:08:A3:72:F8:16:45:BF:BB:74:F2:BB:C4:4F:67:0E
            X509v3 Authority Key Identifier:
                keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:d2:a6:42:8e:c1:f7:f9:f9:b2:e1:34:61:50:8b:88:be:
         55:44:b9:62:fc:7a:3b:06:a7:7e:7d:f2:26:1f:f6:0f:02:31:
         8b:bf:ef:bb:19:2c:89:2e:64:cf:b9:7f:6e:f5:ce:b0:d4:43:
         08:f8:8b:45:d0:a1:e2:81:ed:ae:c7:7a:84:e7:fb:7f:b6:d5:
         25:f5:f9:fd:34:e0:83:b0:d1:6d:ba:68:20:b3:ca:51:2e:ad:
         83:d6:19:7f:0b:2f:ae:85:51:fa:b0:6b:bc:76:36:1f:e1:c9:
         40:c6:07:c9:68:5a:d5:99:ae:d3:13:79:17:59:d5:0a:44:3d:
         3d:d6:e3:67:4f:7e:fb:71:fa:31:39:80:0c:eb:a3:94:33:7d:
         5a:62:92:29:87:1d:4a:a0:fd:27:fd:81:eb:76:dd:38:11:31:
         3f:c3:44:e9:d7:78:9e:f5:2b:b4:a6:6f:e5:4d:32:60:98:c0:
         c5:d4:03:5c:95:de:c4:32:05:40:53:74:e7:2e:9d:f6:f6:6f:
         fe:58:69:fc:e0:e2:ee:28:53:35:0c:93:a7:94:20:d6:3d:f7:
         f1:da:ee:15:27:7e:ab:37:d5:a5:1d:5f:b4:fa:ba:11:e2:53:
         76:f7:d7:17:28:fd:1c:9d:84:84:f4:af:55:17:ad:7b:8e:f5:
         f0:50:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----