Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File:                     u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier:          +D7Gfi4zNKqNMnfslIc9+GLAuRrdf5oRfUgGggyxNHg=
Subject key identifier:   08:4A:89:0D:28:D5:3F:D9:79:F9:AB:D6:0B:E1:9A:1E:74:05:6D:51
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer:       /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial:       01962E2AED58FA4D9671B19969DA711B788D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number:          0150
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
                          2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
                          3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
                          4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: zeaxohU/TV5brFuJR9VViaRV56MsBKeravHbEbVgPSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:58:fa:4d:96:71:b1:99:69:da:71:1b:78:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=084a890d28d53fd979f9abd60be19a1e74056d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:fe:02:c0:67:ee:4d:e8:0f:17:d7:01:5a:
                    20:24:64:ee:cd:0e:ef:05:8f:1c:1b:a8:98:60:09:
                    b3:ca:59:fa:07:ab:43:9b:86:3e:3f:77:9e:44:c5:
                    59:8d:9b:64:10:67:51:b9:cc:8c:5a:6d:c3:f2:8a:
                    86:96:49:96:14:c3:bc:a3:cd:10:7f:07:2e:a4:73:
                    10:d6:bf:e2:45:56:db:c0:9d:6c:a1:2e:a0:05:da:
                    4d:7c:69:17:be:c2:fa:95:89:ce:17:67:17:13:c2:
                    a8:7b:a7:db:a7:1a:f3:36:5a:d3:ec:ce:dd:b2:bb:
                    a3:be:16:c1:c6:f7:5f:45:2c:fb:be:89:13:ed:e3:
                    77:6a:66:d7:ca:ad:bc:16:9e:83:d0:a9:16:54:eb:
                    d2:01:ad:26:3b:1d:59:51:b5:4d:97:54:6d:32:bf:
                    df:a5:d8:5a:01:65:6c:ea:9f:bf:4c:d3:18:1a:e9:
                    f9:d8:68:48:2d:f5:2c:77:6c:10:3d:d6:2d:74:3b:
                    e3:92:d4:6e:c7:19:5b:d9:b1:47:38:0c:86:3a:a1:
                    9a:c3:7d:0a:be:77:10:35:0d:44:d6:41:6c:e3:f5:
                    7d:4a:82:fe:1a:2f:22:9d:1c:3c:7d:2f:c0:51:a8:
                    7c:3e:39:32:bd:dc:c0:e6:86:16:6f:d5:8e:8d:59:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4A:89:0D:28:D5:3F:D9:79:F9:AB:D6:0B:E1:9A:1E:74:05:6D:51
            X509v3 Authority Key Identifier:
                keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:76:ec:68:96:7c:a6:f9:24:0b:82:74:d4:75:bb:90:dc:b5:
         e5:97:72:b3:6c:81:16:d8:60:e0:53:f6:64:d8:39:46:05:78:
         a9:c3:98:85:63:fa:cd:af:6d:b6:aa:9f:f8:77:a0:dc:97:8b:
         75:50:86:d3:f8:8f:d2:cc:9b:34:28:31:65:21:8c:af:c4:eb:
         05:f2:31:1a:84:d6:1d:6c:86:be:11:e3:c3:2e:b5:9a:4b:3a:
         ea:0c:b1:fc:f8:6c:7e:bf:18:b3:52:f9:3c:c8:d4:a8:3a:72:
         b9:c8:26:66:c9:5b:23:c6:e2:91:bd:0b:4f:42:6d:80:32:5f:
         c5:bd:ef:b9:72:91:9a:83:59:f6:71:2a:be:af:08:3f:33:6e:
         ec:92:ae:45:5b:ef:b0:e5:29:25:4d:ba:ba:51:a2:f0:0a:88:
         ab:ab:4c:ea:8a:d7:4b:b9:6e:1a:e0:93:8d:75:7f:ed:7c:61:
         ca:d7:78:65:95:31:97:20:cd:b7:09:81:0a:b3:98:d4:97:93:
         ec:f8:82:c2:2a:c7:f3:7a:a5:6f:c2:84:81:e7:2f:44:16:1a:
         cf:fc:fa:7d:a9:39:a3:d7:e9:ec:9b:cf:1b:60:8a:a2:fa:9b:
         db:a6:dd:c6:6d:b1:a7:89:09:8a:40:ab:83:67:9b:2d:c6:ac:
         1f:fa:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----