Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File:                     BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier:          MqsbY9Dc1iX29cdYdxjKgxLfCzdbgNV8r2F3pelPF3M=
Subject key identifier:   81:3D:09:3E:1B:B6:27:CB:E9:E3:4C:20:4C:3F:44:69:A5:3E:BD:B6
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer:       /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial:       01962E61A6D33A18A02FC3089DFCC3280F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number:          0955
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: hw8f11gByc1dFUKbAzdpBseBbl22Hyv4IsBvBuRQPCU=)
                          2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:d3:3a:18:a0:2f:c3:08:9d:fc:c3:28:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=813d093e1bb627cbe9e34c204c3f4469a53ebdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:cd:12:ef:21:54:95:ed:8d:72:c1:b7:c9:
                    42:17:2f:fd:14:17:1a:1a:6a:ae:ea:52:40:b6:b7:
                    b3:65:6d:1f:28:fd:b0:66:0e:e8:ae:8f:66:d3:e6:
                    96:08:a5:28:af:03:3b:2e:2a:12:9d:3d:ac:49:9e:
                    8e:d4:3f:14:83:8e:5f:ae:f1:a8:b4:c9:e8:1f:57:
                    7c:ec:82:76:f2:66:19:ed:a8:cc:22:d1:72:f5:2a:
                    f8:5b:41:e5:6c:0d:f7:df:2d:c6:5d:f1:1d:2d:5b:
                    77:b7:a7:70:cb:57:59:59:f8:88:6f:67:b1:fc:f3:
                    99:95:6d:e7:ee:25:b8:47:dd:15:47:4e:35:4c:a6:
                    2b:f1:a1:bd:33:af:6e:ae:13:c0:b5:44:fe:38:6d:
                    8c:0e:4e:aa:6d:b3:dd:f0:c1:7d:5a:f1:a8:71:02:
                    da:4b:76:cf:56:3b:50:7b:ee:ac:05:02:90:c5:7d:
                    f1:b9:42:11:7c:c9:b8:95:a8:9b:98:38:a3:9f:56:
                    34:99:99:5c:a0:f0:7b:f9:5a:7f:d0:14:dc:97:c5:
                    bb:90:90:82:78:02:fd:15:28:e3:b0:3e:4b:d2:49:
                    b4:5b:50:d1:0d:da:42:d5:69:96:4a:0c:49:4e:6a:
                    72:ec:e7:28:7c:1f:b7:98:1d:ee:1a:5b:5c:09:67:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:09:3E:1B:B6:27:CB:E9:E3:4C:20:4C:3F:44:69:A5:3E:BD:B6
            X509v3 Authority Key Identifier:
                keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:5c:03:14:3f:94:dc:df:0d:1b:4c:a3:a0:c5:1c:c2:ad:
         81:d2:8b:fd:3d:98:87:57:4a:f6:a8:87:ec:f0:0f:24:52:ed:
         12:ed:25:2c:22:75:6b:39:b8:b3:01:1c:b0:11:9a:f0:b2:6f:
         84:ff:60:65:47:33:fa:dd:35:76:09:07:7e:c9:86:94:d6:5b:
         e7:38:b6:b0:1f:6f:13:7c:1c:17:45:c9:a7:6b:63:84:94:b8:
         a8:1e:62:a0:48:05:83:65:32:16:b3:ef:a2:4e:38:7d:cb:dc:
         c2:70:20:0b:b9:71:5f:35:b1:a5:74:3b:ea:df:8a:97:21:da:
         e2:28:a4:51:e5:70:81:4b:8f:73:7f:24:c5:71:df:2d:0f:96:
         3f:0e:33:d2:d7:de:8a:90:ed:05:6f:a5:b0:6c:18:c8:bf:e4:
         69:c6:34:60:17:d4:43:8f:f4:fa:f0:7f:79:cb:d4:77:10:16:
         3e:9b:de:97:4c:d2:b5:43:93:37:d4:4d:01:2c:8f:64:f3:09:
         63:49:5c:31:ec:fe:3f:4e:cf:ac:97:dd:93:50:9c:78:c6:59:
         d1:60:07:f1:a2:7f:78:87:08:74:d0:2a:c3:d4:ff:90:05:aa:
         92:91:17:d1:65:6e:f0:f1:a8:05:52:4e:91:7e:5e:8e:62:49:
         9b:a2:df:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----