Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File:                     BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier:          fBHtJ/V59QScSYT+eohNPrfKyT+V5oBqdF2QYy6w0Uw=
Subject key identifier:   49:6D:6E:70:B2:FB:A8:03:5A:AB:B6:90:32:8A:51:2A:21:CB:F4:BD
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer:       /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial:       01962F74B71CAE2EE535C786148FFA281631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number:          0686
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: 46ord79h/pEGSMD/VfgsV+XSz5uy/YUgFjkLlW24AFU=)
                          2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:1c:ae:2e:e5:35:c7:86:14:8f:fa:28:16:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=496d6e70b2fba8035aabb690328a512a21cbf4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:5d:43:02:54:3b:f5:38:2a:f6:e8:ed:b1:
                    65:a9:86:43:6d:cf:ae:d0:1b:20:ba:80:83:39:a9:
                    44:03:d5:cc:5a:8a:e1:0a:aa:00:80:9c:38:7b:d8:
                    3c:16:9e:cc:06:55:2b:cf:c1:46:22:33:4c:fa:90:
                    9b:47:0b:84:0c:70:a1:63:4c:52:03:8a:f1:22:e6:
                    ba:a7:61:f6:f8:24:93:7e:0b:dd:7d:96:c2:2c:da:
                    e5:75:4a:3b:6f:19:1c:89:b4:ec:6f:bd:fa:36:8a:
                    c5:5f:4f:86:23:a6:28:e3:e2:02:e1:77:b4:94:bc:
                    05:24:f6:5f:c4:5c:7c:b0:ca:d9:94:4e:a9:52:0f:
                    57:6c:5c:e9:c9:10:23:88:03:7f:1c:87:ed:ab:e1:
                    b3:5b:26:b8:7b:8b:86:8b:ce:71:3e:f2:bc:25:7a:
                    2f:59:d4:5c:45:db:74:5a:e9:7f:65:9e:c9:58:e3:
                    a1:3c:c1:6a:dc:f0:d5:ba:c6:81:94:59:b9:14:33:
                    95:4d:7a:8d:0c:72:fb:6a:b9:14:16:38:78:d1:9e:
                    09:a2:a8:3a:91:89:ff:7a:61:45:ea:8d:27:0b:4f:
                    27:52:9c:b7:4d:76:6b:f8:2e:ad:6d:11:20:80:e2:
                    2b:01:1f:1e:aa:ee:13:7e:88:01:78:bb:47:18:bc:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:6E:70:B2:FB:A8:03:5A:AB:B6:90:32:8A:51:2A:21:CB:F4:BD
            X509v3 Authority Key Identifier:
                keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:34:86:d6:76:74:b8:e6:01:eb:bb:c9:eb:06:e4:d9:75:ef:
         bc:c2:51:b9:56:c7:88:8b:67:11:5a:55:a8:65:e4:d5:4c:5c:
         47:c9:16:9c:77:50:85:59:0b:4f:2e:76:fd:49:ff:b8:97:11:
         0f:e3:2e:c8:7e:06:68:a1:e6:16:09:d5:59:b1:e8:88:20:41:
         95:4d:59:c3:07:5d:bd:bf:e9:12:5a:9b:89:c1:93:c9:04:95:
         94:9c:fc:e2:30:ba:fa:b3:c2:9a:60:51:1b:59:ea:93:0c:6c:
         8b:a9:a6:4f:b0:3b:f3:90:13:e7:e5:09:d6:a6:4d:69:1d:d1:
         63:22:4b:8c:85:62:7f:fd:42:2c:cc:4b:63:47:25:9c:73:86:
         28:d6:ea:d5:d9:82:99:63:11:ee:48:58:d8:fb:8b:99:aa:68:
         40:ba:f2:78:4e:37:19:ae:8d:e4:9a:46:68:0a:86:11:8c:3e:
         19:36:4f:88:ee:5f:84:5e:5a:9f:e6:ef:9c:50:88:c8:c1:c5:
         13:2b:93:e2:5c:db:cc:cd:83:ff:33:0c:e6:c1:ac:9b:0a:c2:
         48:c1:51:a6:0e:95:43:1f:87:0a:1f:7c:31:54:0d:97:97:5b:
         02:30:8d:dc:09:3a:1d:20:db:d1:e4:bb:84:6e:8e:87:0c:c2:
         dc:84:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----