Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File:                     B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier:          3Pg2KFtuxqZIR2eQuFTWLXDAye9vnxekv96dOZ65Y80=
Subject key identifier:   62:BD:4A:AD:93:20:3A:97:A3:F9:C2:46:4F:6E:5B:DF:CA:AB:A9:14
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer:       /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial:       01962F749E5E5466592AF13A6BC80FFECA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number:          0C0C
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: cFi+CTLSnfmUbo4cQrRJ14n6ylr/IumPtpE+7z9C038=)
                          2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:5e:54:66:59:2a:f1:3a:6b:c8:0f:fe:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=62bd4aad93203a97a3f9c2464f6e5bdfcaaba914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:52:2e:ee:50:86:d2:e5:38:71:ba:f6:29:
                    69:f9:bd:d6:9e:25:5b:a7:e7:e4:35:95:be:67:8c:
                    f4:b7:2b:bc:b3:1d:e3:98:f2:fa:c5:da:33:fe:8a:
                    ed:a2:d7:cf:41:98:b4:64:61:9b:ab:4b:49:c2:33:
                    f5:9d:d5:84:01:bf:7c:93:fe:42:77:d4:17:c5:32:
                    6e:ba:b0:dd:48:db:1d:de:30:e7:70:69:85:78:7a:
                    11:be:cf:7a:4f:e0:4a:94:bd:b9:ac:97:b3:53:90:
                    42:1b:48:a1:86:ba:b7:03:9b:5f:bf:a8:2c:99:3b:
                    42:35:0c:42:8d:97:0a:23:63:88:36:89:0a:33:57:
                    ab:c6:17:37:fb:05:61:c9:c4:c2:a5:c1:5f:18:2e:
                    2c:f2:ac:1c:62:c7:8a:f4:fd:a1:5e:d5:e3:84:e8:
                    29:5b:2a:04:0b:fa:3a:c8:67:bf:db:51:aa:f3:77:
                    93:93:21:86:a7:fb:ec:81:07:40:87:68:1b:76:57:
                    06:53:41:8b:3d:13:5b:e4:2c:a9:8a:1d:af:b3:d5:
                    93:7e:20:df:54:02:35:d6:d3:d9:4e:94:3e:00:2e:
                    fa:de:7e:0d:e6:86:9d:9a:a2:ed:04:5e:0c:5b:fe:
                    a0:ee:ab:9b:90:7c:23:0e:cf:0e:d0:be:c5:5a:dc:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BD:4A:AD:93:20:3A:97:A3:F9:C2:46:4F:6E:5B:DF:CA:AB:A9:14
            X509v3 Authority Key Identifier:
                keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:ea:68:05:65:4c:ef:8f:87:20:a5:f1:0c:91:ac:fc:7e:
         a8:d9:6f:c6:af:3c:91:bd:e3:04:95:fb:a9:bc:5a:8e:93:2d:
         b0:8c:80:7b:51:1a:74:ea:05:81:e9:7f:86:7a:f2:80:99:16:
         d3:a3:04:c6:f5:f6:12:3f:66:70:8b:e2:32:e9:c5:4e:63:60:
         1b:6e:ac:15:f5:a5:3c:7e:99:f7:eb:70:46:e6:b4:89:10:fb:
         81:ff:08:03:4b:0d:a7:c9:07:d7:d1:bb:3c:e6:fc:75:65:10:
         f1:96:d1:f3:e8:51:13:46:4e:97:2e:b1:41:c3:ea:0e:8e:0d:
         97:05:4e:e7:53:d4:ac:61:b7:3f:85:b6:32:5b:70:1b:a7:02:
         62:15:4e:98:c8:49:36:61:9a:d3:83:ee:ca:df:bc:62:a2:c3:
         f0:68:52:bb:d6:bd:2c:4d:5d:dd:65:20:d7:ef:9d:5d:0a:ea:
         07:e7:a8:d2:9a:4d:f0:9f:71:d1:f1:11:f9:d5:e0:85:f5:ba:
         68:c0:ae:ff:90:15:c8:e4:d9:8d:34:52:87:18:d9:43:9c:76:
         4b:7a:17:98:bf:c3:ad:8a:e4:1d:46:20:3e:b1:d2:9c:19:11:
         6b:23:2f:b0:00:33:97:8a:33:90:da:3c:c1:73:d3:20:ef:26:
         71:7d:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----