Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File:                     BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier:          o7Pc1eCBssQePAlqxL5J7dE22fe+lN4Z8B6jWG1VCp4=
Subject key identifier:   72:92:32:CD:6F:73:0D:38:A4:A0:5F:94:7C:BB:38:17:5B:25:46:45
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer:       /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial:       01962E6212D4DAE0B836E1C3C5F25312B0E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number:          05FB
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
                          2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: ofyFUSRdvLTxccXrHVbTQBewz5TwDpaO6KYBY1LEJUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:12:d4:da:e0:b8:36:e1:c3:c5:f2:53:12:b0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=729232cd6f730d38a4a05f947cbb38175b254645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:17:6c:bf:38:be:b6:5d:ea:63:72:6f:81:
                    4a:14:e3:7e:62:af:e7:1b:68:2e:ea:7a:9e:d4:3a:
                    15:ab:ab:de:24:34:4e:21:7e:62:28:d5:b4:b6:c6:
                    54:55:5b:53:b5:be:2a:f4:ff:e5:a9:a7:87:be:1f:
                    f5:c3:3a:f0:c3:93:6d:2d:56:00:e5:5a:e2:09:98:
                    2a:e1:68:56:12:b0:b8:bb:67:aa:e3:45:62:02:36:
                    c4:70:32:bd:6a:6f:10:9a:b9:53:52:4f:16:2b:d7:
                    a4:db:3f:61:d9:3b:7c:1f:44:d1:fc:ee:d6:14:2d:
                    df:5f:07:f3:a1:ea:fd:db:8c:46:a7:e2:4f:4e:85:
                    96:45:1d:4a:b1:fc:c7:a5:5d:19:65:02:a8:15:86:
                    9a:e3:63:d5:70:0e:fb:7c:78:e0:a1:31:df:4d:5f:
                    cc:62:77:77:5e:cc:9c:6c:64:72:b4:34:ab:b0:ed:
                    02:6d:c5:ae:13:b7:7c:2d:1a:8d:0f:98:01:dc:d8:
                    da:85:4d:98:b0:34:b0:87:63:45:2f:b6:8f:50:09:
                    19:71:54:14:b0:00:cf:d3:8f:f3:e9:1c:ca:76:27:
                    6e:47:d1:c5:46:93:05:07:6a:77:42:0a:e9:36:36:
                    d1:e1:c9:13:97:32:26:a8:0d:38:c1:77:ad:48:94:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:92:32:CD:6F:73:0D:38:A4:A0:5F:94:7C:BB:38:17:5B:25:46:45
            X509v3 Authority Key Identifier:
                keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:41:b9:4e:e6:5e:50:a4:94:d6:25:19:23:aa:4f:5c:38:
         33:36:62:c4:b3:84:d4:fa:ff:8b:95:27:f1:2f:10:92:70:f8:
         57:da:02:d2:e2:9f:0a:8e:b8:a0:70:33:bf:d7:18:65:01:99:
         cb:1c:80:e8:08:d0:d3:b5:ca:65:c6:1a:a2:b5:64:73:72:94:
         8a:c0:7b:7e:b4:56:e0:b3:51:cb:8e:b5:33:89:f1:8d:61:8a:
         c9:83:0b:05:0e:6a:48:0c:c3:a1:12:19:11:80:56:10:bf:81:
         65:dd:bf:e0:61:74:81:84:60:2c:47:50:46:ed:54:91:f4:c7:
         93:84:fb:ad:42:57:31:a5:56:2d:2b:22:a2:55:8d:f5:86:22:
         cb:f5:9b:3d:8e:b4:87:c0:30:0a:ff:3f:39:93:07:8b:e9:ef:
         d5:43:40:88:e3:ff:d2:94:c9:7b:22:ba:60:20:cb:4a:f5:0f:
         cc:27:b5:c8:fd:a7:94:04:d7:a0:8e:73:cf:6a:55:66:48:ce:
         24:5b:20:e1:8d:51:b7:4c:4e:38:b4:ba:ca:37:b7:30:c5:41:
         cd:e0:44:76:de:81:29:07:0e:23:0f:e2:7d:d1:6d:26:e0:ce:
         35:b4:4d:6c:3d:f6:a5:b3:24:a1:83:15:0f:d0:b8:2a:fa:e8:
         4a:d9:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----