Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File:                     sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier:          Lwbyl1Mg0BvZ5YC0rZ5qDbsxLBq1mKS1Wi1ihVWHYWo=
Subject key identifier:   32:35:1A:83:FD:FF:BC:3F:18:68:E0:06:46:17:C0:BC:C7:A8:34:84
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer:       /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial:       01962DF444CB0F2B11C800AA897802DCA178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number:          08A9
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
                          2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: R/KpDlcL0gr0k8QMI5/mPP7xWfZNBVMjMgk62O9W2dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:cb:0f:2b:11:c8:00:aa:89:78:02:dc:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=32351a83fdffbc3f1868e0064617c0bcc7a83484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:f2:ac:9f:46:94:d4:a3:ae:01:d2:6a:b5:
                    34:78:67:9a:41:08:ee:bb:66:4c:e0:38:b7:d0:41:
                    3f:a6:a2:47:ba:b2:72:1f:50:91:ac:0c:38:29:7d:
                    ef:64:94:4f:61:9a:73:ff:b3:65:19:03:26:9b:b2:
                    ec:4c:63:32:b7:2c:c1:cb:48:9e:20:cb:f0:50:10:
                    b8:2c:43:53:d8:1e:d2:e2:05:53:7e:d2:df:51:dc:
                    3d:20:3c:e1:5d:ef:54:65:81:ae:70:ab:84:82:53:
                    3a:c0:cd:2b:99:9d:a4:46:67:94:06:3d:cc:5c:b6:
                    76:53:14:9e:e1:81:6b:5a:d1:4f:99:b7:e0:dc:01:
                    e2:8a:4d:bf:a0:32:49:ab:c6:fb:fc:33:34:7a:22:
                    d9:32:b8:41:24:17:21:b1:07:fc:39:c4:32:db:26:
                    40:1e:2c:27:aa:80:56:12:e4:63:3e:88:a8:38:7d:
                    4a:a8:28:14:b7:1c:cb:19:7e:5c:cb:19:a2:eb:2f:
                    ad:5d:1e:90:97:e1:82:a5:ed:8a:70:e4:44:a3:c8:
                    92:89:c6:40:ef:11:f5:06:51:f8:93:cb:28:fb:67:
                    0b:0f:43:ae:8e:1d:d0:94:8c:3a:cf:6c:0d:01:14:
                    1a:22:03:e1:61:4e:33:58:65:d6:cf:64:47:b0:8e:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:1A:83:FD:FF:BC:3F:18:68:E0:06:46:17:C0:BC:C7:A8:34:84
            X509v3 Authority Key Identifier:
                keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:03:88:53:14:8b:08:8e:0a:a3:e1:80:4a:ea:69:24:c6:09:
         4c:f3:68:a1:3c:3d:51:31:20:e5:a9:64:23:1d:ad:04:04:d3:
         46:94:27:ef:c6:62:30:68:bc:90:b4:66:7c:a4:29:16:d1:61:
         43:49:d3:dd:bb:52:e5:f8:1c:1a:57:76:87:4a:ff:65:59:85:
         84:28:02:4a:c3:c1:2e:bd:47:3d:bb:88:6d:1a:24:b8:ac:c7:
         db:41:f9:86:97:86:4b:1a:d2:e8:18:7c:28:55:53:16:32:92:
         c2:1c:dd:c6:6e:5e:54:a5:2c:ed:83:da:8a:46:8c:0e:ca:58:
         48:83:fd:85:73:f4:e9:24:c2:ce:13:7c:60:de:0d:55:20:94:
         bf:a0:09:47:b0:ca:90:f6:47:00:29:7e:17:4f:d5:fa:42:71:
         4e:1b:2c:53:39:09:e5:4a:fe:3c:b5:66:54:c1:2d:f0:44:50:
         4e:4b:a7:4b:78:98:70:ea:32:28:fb:f1:87:ff:51:9a:09:41:
         1e:18:f5:d2:66:5c:7f:aa:4f:ac:e8:9b:46:b8:7b:ab:72:fe:
         50:36:d9:c2:cb:f2:d5:49:17:68:41:f3:03:ba:df:8b:ab:69:
         dc:c8:c2:24:03:c4:58:7b:f7:ce:df:26:99:d0:f0:d4:27:4e:
         60:e3:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----