Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File:                     kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier:          frUG6U6l+UGYdPJufgs3c26n3oT9nVyc0BcxxRcsfC8=
Subject key identifier:   B3:4F:86:5A:0A:0E:E5:A5:8B:9E:C6:5D:57:8F:B9:10:E5:31:40:21
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer:       /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial:       01962F7436C673B3F922F9DCFB48D3F30AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
                          2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: i5EshauAERSu7ghjcneDCTOWVowJL+elHaYj8QUJjdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:c6:73:b3:f9:22:f9:dc:fb:48:d3:f3:0a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=b34f865a0a0ee5a58b9ec65d578fb910e5314021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:b4:c3:1d:71:f1:b0:26:1d:55:18:e9:d5:
                    19:6f:cd:f6:d3:e7:27:6e:67:85:86:43:60:d6:35:
                    f0:40:b2:0e:0f:53:d2:96:84:78:de:49:8b:7c:3b:
                    b7:2f:f4:6e:5e:d9:56:ea:8a:eb:50:12:0b:43:db:
                    c5:0e:85:c0:1c:32:a7:28:83:72:fd:1a:9e:2b:ec:
                    89:78:01:ad:be:1e:6e:25:8a:15:c1:a3:59:6a:2c:
                    b1:cb:9c:0a:66:7a:8f:b5:89:40:4e:23:4c:ae:1c:
                    77:cb:3d:d4:4d:fb:cc:98:a3:bf:3d:e2:0a:31:70:
                    be:b8:62:77:49:a2:72:04:a5:8a:24:e3:ff:c9:3a:
                    e2:04:ec:17:5f:1e:3a:83:4c:fc:8b:ee:6c:cc:37:
                    2b:5e:47:8e:e2:fe:1a:b1:5f:e3:58:41:1f:7d:4a:
                    04:30:aa:18:8b:5e:46:4f:61:5f:58:59:09:44:b0:
                    c7:ec:a0:40:3e:9c:e6:78:4c:62:e0:d3:a7:cd:ca:
                    f2:80:7a:18:e9:06:44:f6:52:32:cb:24:cc:ae:b6:
                    78:b1:2e:5d:14:4c:b1:c7:0b:ae:da:e0:81:62:44:
                    d3:80:17:16:78:69:87:29:ce:5b:77:0d:96:5c:95:
                    e6:51:e7:ed:c7:68:8b:ac:d0:60:d5:87:a2:fd:b1:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:86:5A:0A:0E:E5:A5:8B:9E:C6:5D:57:8F:B9:10:E5:31:40:21
            X509v3 Authority Key Identifier:
                keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:9d:42:29:22:62:3d:2c:2f:0a:ad:20:04:9b:26:d9:24:
         aa:a6:50:41:c2:96:36:3e:a8:98:6e:ec:a0:7d:fb:cd:12:13:
         86:35:0f:7b:86:da:58:1d:07:39:d4:dd:7a:e1:a4:82:f8:6c:
         2e:bd:54:d7:de:f9:2e:14:17:17:c8:29:3e:cc:a8:13:1f:c5:
         1d:3c:15:3d:7c:1f:58:39:a1:f5:ba:fc:e3:47:ad:c0:c7:13:
         88:53:8a:8e:7a:ae:32:ef:7d:7b:35:ff:59:c3:24:ae:40:c5:
         88:39:ae:4d:f2:7a:5b:9f:ef:28:73:3e:34:65:c4:d7:1c:0c:
         a4:69:ac:8d:1d:00:cc:eb:91:8c:aa:b3:a6:b5:1c:4c:13:74:
         6d:dc:bb:91:b9:1a:81:70:56:ee:9d:7c:cb:d2:1a:be:94:e3:
         d3:e0:2f:e7:dd:68:5f:1d:34:23:9b:f5:b6:6d:58:e3:b6:d1:
         fd:79:39:03:fa:9a:99:eb:f2:1f:33:e9:3e:e2:03:c2:dc:85:
         4a:3f:9b:fb:c5:d5:77:5a:36:c6:55:66:19:ea:d3:60:42:75:
         6b:a8:1f:b2:13:d7:b3:c9:8e:c3:0f:c3:1e:5c:73:41:68:a2:
         97:c6:e5:0b:bd:84:f9:8c:51:2a:51:b8:b0:50:56:ea:79:3a:
         16:80:15:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDbGc7P5Ivnc+0jT8wr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMTdiMGJkOTA4MjdkZTA4ZDI0ZmVmNjFiY2M0NDg2MjAy
NGJmN2UwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
EyhiMzRmODY1YTBhMGVlNWE1OGI5ZWM2NWQ1NzhmYjkxMGU1MzE0MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1du0wx1x8bAmHVUY6dUZb8320+cn
bmeFhkNg1jXwQLIOD1PSloR43kmLfDu3L/RuXtlW6orrUBILQ9vFDoXAHDKnKINy
/RqeK+yJeAGtvh5uJYoVwaNZaiyxy5wKZnqPtYlATiNMrhx3yz3UTfvMmKO/PeIK
MXC+uGJ3SaJyBKWKJOP/yTriBOwXXx46g0z8i+5szDcrXkeO4v4asV/jWEEffUoE
MKoYi15GT2FfWFkJRLDH7KBAPpzmeExi4NOnzcrygHoY6QZE9lIyyyTMrrZ4sS5d
FEyxxwuu2uCBYkTTgBcWeGmHKc5bdw2WXJXmUeftx2iLrNBg1Yei/bH5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNPhloKDuWli57GXVePuRDlMUAhMB8GA1UdIwQY
MBaAFJAXsL2Qgn3gjST+9hvMRIYgJL9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQt
YThiZTk5MzJhYTg5LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYjU2MGEtNDI4NC00ZmMwLWIwNWQtYThiZTk5MzJhYTg5
LzEva0Jld3ZaQ0NmZUNOSlA3Mkc4eEVoaUFrdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8mdQiki
Yj0sLwqtIASbJtkkqqZQQcKWNj6omG7soH37zRIThjUPe4baWB0HOdTdeuGkgvhs
Lr1U1975LhQXF8gpPsyoEx/FHTwVPXwfWDmh9br840etwMcTiFOKjnquMu99ezX/
WcMkrkDFiDmuTfJ6W5/vKHM+NGXE1xwMpGmsjR0AzOuRjKqzprUcTBN0bdy7kbka
gXBW7p18y9IavpTj0+Av591oXx00I5v1tm1Y47bR/Xk5A/qamevyHzPpPuIDwtyF
Sj+b+8XVd1o2xlVmGerTYEJ1a6gfshPXs8mOww/DHlxzQWiil8blC72E+YxRKlG4
sFBW6nk6FoAVXQ==
-----END CERTIFICATE-----