Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File:                     uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier:          PkquoFbXQlR4DPLQ2gzaJ0Fjr/sWMA+wTplqLUoSnDs=
Subject key identifier:   70:16:3F:43:BD:C0:09:A5:FF:DB:13:78:34:EE:1B:25:8C:DC:56:69
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer:       /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial:       01962F3DD157201D6BDFBE525DF5D929ABCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number:          06A6
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
                          2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: rSxO1iJTMCXuTNa8r7t32n39BM08BvptOcGGHMl/4PY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:57:20:1d:6b:df:be:52:5d:f5:d9:29:ab:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=70163f43bdc009a5ffdb137834ee1b258cdc5669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:cd:78:96:cc:3a:25:4a:cf:04:00:79:f6:
                    fa:a0:ef:e2:90:d3:77:5a:82:ea:c1:f5:1f:a0:8b:
                    1f:27:6f:7a:a3:74:fc:c2:f7:6f:ab:c9:2e:2b:ea:
                    d4:e9:17:67:7f:b6:ae:8e:a2:93:73:01:81:67:3c:
                    90:fd:53:7e:4b:4e:3e:a7:7d:77:80:46:cd:b6:32:
                    77:4a:71:f8:a8:37:5d:c9:6c:fb:e3:39:4c:73:23:
                    af:e0:d7:82:ca:c7:15:7a:3f:3d:2c:b1:6c:5f:ae:
                    56:1a:bb:c2:ea:cb:98:17:1e:37:43:75:45:93:cb:
                    e2:d1:88:10:bb:3d:45:1e:17:0d:ba:2e:35:09:c0:
                    0e:d6:1c:36:04:b2:94:94:ae:e9:17:a0:02:4a:f6:
                    94:8a:b6:27:8d:5c:eb:f7:26:e0:8d:83:40:1f:1e:
                    91:2c:37:45:1b:53:55:2b:bd:b9:2d:14:21:a4:1a:
                    f7:1d:1d:7d:25:6b:c2:fa:f7:4d:5e:63:13:29:2b:
                    d3:71:a9:11:b4:5d:ec:45:6c:b7:89:17:ca:03:a1:
                    3f:e6:ac:ec:cf:84:99:07:47:43:db:55:84:81:a9:
                    9d:e3:4f:ec:e5:a7:1e:4c:1a:2a:9e:ed:7a:37:cd:
                    9c:fe:2c:c8:0e:0a:29:80:b6:e9:25:7b:25:a2:5d:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:16:3F:43:BD:C0:09:A5:FF:DB:13:78:34:EE:1B:25:8C:DC:56:69
            X509v3 Authority Key Identifier:
                keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:6b:db:35:8f:d7:0f:e9:57:ba:4f:19:c9:57:c8:77:3a:
         72:a2:4e:12:cc:70:d3:d3:d5:51:3e:ae:be:35:6c:dc:93:3b:
         3e:28:81:e8:5d:8c:b0:82:83:14:4d:12:b5:89:dc:f8:44:0e:
         fb:78:a2:ee:a0:57:df:48:84:a9:ee:2f:4c:25:e9:56:59:7d:
         cc:7a:4e:2f:72:4a:4d:be:9a:42:ba:10:53:e5:1d:5b:ff:b1:
         7c:05:82:a3:6b:27:e9:39:3a:12:cc:96:6e:9d:0d:1d:fe:1c:
         1f:c4:fc:9a:62:40:ab:62:d4:08:3f:53:2e:bd:8e:19:d2:23:
         15:ac:70:b6:63:ee:62:14:9c:3b:8c:c7:70:a8:20:47:49:e1:
         a7:a4:69:28:e7:4a:74:2e:6c:55:0c:95:9e:50:80:86:cb:b0:
         3d:68:0b:15:d5:3c:6e:f3:dd:95:d6:20:e3:87:b0:22:8a:f5:
         09:3e:b7:4c:b3:36:4e:b9:3d:a6:19:a1:a7:0c:e9:64:10:c0:
         63:6e:9e:33:59:ff:59:f4:77:59:fb:ac:49:2c:ee:55:69:72:
         9a:02:a2:ee:cc:bd:bd:e9:36:6c:f7:4d:f0:a8:fe:31:d9:df:
         19:93:4a:b4:39:70:56:84:ea:27:e3:18:80:d6:f7:b2:a3:08:
         f4:8a:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----