Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File:                     t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier:          hGQgfbb8rz4LEb28+gFF5QT7GpYD8CofPar8DKwp1Go=
Subject key identifier:   7B:36:0F:C4:DD:C0:7E:D2:D6:97:44:38:74:E5:FF:E1:BB:AC:EB:8B
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer:       /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial:       01962F3DAC026897080E00844243234CC3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number:          0580
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
                          2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: aCgytGFem6YAIU76UAuhycsLQ11X3ma7Qr+EA/eTioM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ac:02:68:97:08:0e:00:84:42:43:23:4c:c3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=7b360fc4ddc07ed2d697443874e5ffe1bbaceb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:4e:7d:a6:ca:79:28:d8:84:03:8f:4f:bb:
                    49:cd:fe:34:cf:4f:f0:5d:20:02:0a:58:82:49:22:
                    1e:f0:16:55:fc:26:8e:ee:9f:c2:48:16:57:54:35:
                    a5:a7:78:31:c0:fb:a6:f8:be:84:58:9a:6a:d1:6c:
                    70:ad:e3:32:9e:dc:fd:a7:4e:a2:e4:d6:60:25:1f:
                    06:ee:b4:e6:77:23:5a:81:f3:38:1c:97:c3:8a:98:
                    15:fc:af:eb:4f:60:31:84:66:ec:4d:7e:e3:0d:97:
                    d1:25:96:ca:f8:e5:f9:36:c5:9a:2f:08:2a:1a:9b:
                    e8:bf:a2:17:98:7a:9b:47:0c:66:87:c3:90:c6:bf:
                    cd:c9:bd:18:9f:82:3f:37:a3:fa:93:ae:31:a5:08:
                    5f:63:a5:0e:a6:19:33:17:4d:b6:bf:c8:da:21:c1:
                    f1:7b:c5:ce:13:75:94:39:10:df:11:5f:47:1a:78:
                    c0:bd:9c:7b:81:e6:a4:2a:93:b5:47:27:7f:44:16:
                    ed:28:b3:e6:d5:a3:bf:fb:3f:ae:71:89:0c:d3:37:
                    c2:46:4b:73:0f:a2:a7:d8:74:6b:5b:e3:b6:8c:ee:
                    f3:14:84:2e:67:7f:2b:46:48:52:9d:a1:ed:27:29:
                    8a:18:8e:f2:2c:5d:e2:b2:77:2b:20:16:f5:a9:d5:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:0F:C4:DD:C0:7E:D2:D6:97:44:38:74:E5:FF:E1:BB:AC:EB:8B
            X509v3 Authority Key Identifier:
                keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:15:11:7e:f2:e6:04:48:16:60:8d:b5:7f:12:d1:ee:a8:
         66:07:a6:90:44:a7:b8:86:e1:cf:0c:8a:45:ba:ba:bf:c9:23:
         cf:e3:b7:a4:61:dc:e7:34:56:76:a4:c4:58:86:8e:50:07:38:
         02:d4:7f:87:c2:48:fd:24:72:6d:0f:38:0e:a3:91:e3:2c:45:
         d5:e0:10:f9:70:af:46:59:a1:1f:fa:42:97:a8:01:cb:01:6f:
         74:be:e8:9c:4e:51:16:f9:9c:16:80:f6:f0:41:67:6b:e2:e8:
         6c:8f:dd:aa:37:bf:e1:a8:7f:f8:8f:13:bc:70:84:11:1f:d5:
         81:0c:99:9b:24:71:97:2e:44:fe:31:b9:91:1e:82:99:66:4f:
         a4:e4:6c:69:67:5d:a9:cf:95:79:c0:36:21:be:03:6f:20:07:
         eb:55:c0:75:d3:97:d7:10:94:33:4a:ae:dd:fb:96:62:0a:8b:
         b0:54:21:8a:76:ea:27:98:de:f3:c1:e5:25:b8:02:d6:10:e1:
         80:06:8d:ba:52:db:87:1d:ed:79:54:5c:f3:07:36:e1:e1:1c:
         be:af:18:e2:a7:cb:91:73:54:33:55:30:f6:74:b6:b0:84:15:
         b9:2f:83:41:df:7a:e3:e3:23:3a:10:8a:c5:12:2b:df:2e:c0:
         d8:fd:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----