Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          i0lAKWqH71hFaH4n2bxyk1h2SCyP4uayBsZ+d7gouzU=
Subject key identifier:   00:87:85:A3:7D:89:E5:8B:3E:47:58:7B:E8:54:BA:C5:23:87:8A:EC
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       01962F06932B92F4C9533B069B339B2D69EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          129C
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: QCVaNcOW+vII60fm+mivZMf+u141aceaZeJfOFCs6uo=)
                          2: z09mXVSXSd7UAacEzfV20oFsmYY.roa (hash: 1yRcdJ+SBO6uBICs/lRiYWbJ7McXCDERo9p2CuxM7s0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:2b:92:f4:c9:53:3b:06:9b:33:9b:2d:69:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=008785a37d89e58b3e47587be854bac523878aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:c7:58:c1:14:e8:63:c4:40:59:ef:66:9a:
                    d5:a5:66:6d:f2:35:2b:e2:a5:96:fa:e8:e2:5b:4e:
                    81:5c:ba:3b:20:8d:b2:35:ea:82:12:c5:36:80:77:
                    2f:51:c9:56:61:2d:d2:f8:74:4e:5b:01:6b:af:6a:
                    b4:59:47:40:dc:9d:b3:f6:dc:20:bd:69:47:3c:41:
                    74:51:ce:fb:e4:3c:39:c1:bf:53:27:52:4f:e0:f7:
                    e9:63:a2:4b:ad:5b:c2:9f:df:99:49:da:99:5a:51:
                    9c:6f:6f:4d:f2:10:55:25:76:6b:08:94:29:b8:a1:
                    04:ed:8c:26:3c:4f:52:93:b8:22:5f:be:b8:d8:c7:
                    d8:a6:33:ee:6d:45:70:42:79:94:6b:97:d4:3b:01:
                    a5:00:73:19:08:b4:b0:0a:17:5e:15:24:4a:9e:cb:
                    15:69:21:8d:6c:39:50:16:cc:a5:bc:38:fb:02:11:
                    91:dc:79:2d:e9:a7:11:05:fc:55:f7:db:ab:42:f8:
                    3e:a0:64:15:11:db:ce:83:02:c0:dc:4e:c8:a3:af:
                    02:2e:d0:e8:86:01:60:c8:34:53:d9:f2:30:c7:31:
                    7b:c0:64:d0:22:a9:13:10:93:b6:ea:77:7e:a5:56:
                    41:70:15:72:e1:bf:79:66:30:74:1f:3d:2d:34:1d:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:85:A3:7D:89:E5:8B:3E:47:58:7B:E8:54:BA:C5:23:87:8A:EC
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:bf:31:c1:7d:21:b3:57:20:2f:cf:47:07:05:87:09:3a:
         52:a3:ca:00:f3:c5:ba:7d:e0:c4:20:e2:9e:e6:fb:17:c2:14:
         79:3c:2d:b1:98:2e:b6:e6:5c:5e:f2:8d:46:1e:d9:a0:d1:43:
         31:4a:bd:84:cb:9c:8d:2b:24:91:03:a9:38:98:36:24:41:69:
         58:c2:87:2e:b5:9a:99:73:69:af:cf:4c:a7:48:90:19:e3:5a:
         cc:ca:5e:7e:1e:33:b0:b9:95:2e:de:fc:cd:2e:fb:e2:c7:70:
         c3:57:51:4a:6c:9f:a2:b4:1d:be:ad:8b:ae:8b:0c:65:13:1c:
         7f:42:c2:cc:f0:0c:de:a1:f8:25:00:06:2b:a8:e0:1c:a8:23:
         37:d3:da:9e:8a:0a:c1:90:6a:02:ed:1c:6c:e2:80:be:a6:b4:
         91:3f:0a:f3:ec:fa:80:01:da:eb:73:8f:20:c1:57:d0:3a:8d:
         5e:43:32:0e:db:fe:7c:b8:f3:d9:d1:51:27:af:51:c2:73:70:
         bc:24:9f:49:2c:79:4d:86:97:b6:71:f3:70:dd:86:c0:54:87:
         65:ad:07:2a:bc:10:e9:7a:5b:3f:62:f7:a3:36:1e:5b:77:29:
         c6:b7:8e:4d:1f:0b:02:d7:27:b0:c6:5b:c7:58:7a:9b:77:c0:
         1b:40:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----