Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
File:                     B3NNjbW2txqCyQHr304M7EKZ6VY.mft (raw, json)
Hash identifier:          uQ4TCK9RhT9M9OuaVgH2tcWfb82taDZ/h2ZczcAg2Jw=
Subject key identifier:   6A:A3:01:20:70:05:6D:3C:7D:BB:6B:CC:DC:6E:09:27:93:5C:5E:D3
Authority key identifier: 07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56
Certificate issuer:       /CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
Certificate serial:       0195485AA7F045F6B534E3691E3C9FA0269A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft
Manifest number:          040B
Signing time:             Thu 27 Feb 2025 17:00:55 +0000
Manifest this update:     Thu 27 Feb 2025 17:00:55 +0000
Manifest next update:     Fri 28 Feb 2025 17:00:55 +0000
Files and hashes:         1: 2bzgTXhAXZddm3HAMYIwrpLdzyA.roa (hash: /m8+yCxsm6KQpZpbnsWoXx9hMnNVX6lJm5+SJcH2NIY=)
                          2: B3NNjbW2txqCyQHr304M7EKZ6VY.crl (hash: wUO7qE9cJwNIj+ATjuR1lW+mCjQBnOHK4QpoOEDBYEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:5a:a7:f0:45:f6:b5:34:e3:69:1e:3c:9f:a0:26:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07734d8db5b6b71a82c901ebdf4e0cec4299e956
        Validity
            Not Before: Feb 27 17:00:55 2025 GMT
            Not After : Feb 28 17:00:55 2025 GMT
        Subject: CN=6aa3012070056d3c7dbb6bccdc6e0927935c5ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:2e:d1:8f:d3:49:cf:1a:52:8d:e9:0c:dc:
                    a2:37:18:ed:d0:69:6d:6f:e6:9b:76:b3:06:00:36:
                    ce:40:0d:f7:8d:dc:60:0e:d2:9c:e7:91:68:73:31:
                    25:26:ea:8e:66:4f:58:1e:2e:d7:8e:fc:4b:39:24:
                    62:69:c0:49:2b:90:23:fa:87:eb:fd:6c:e0:e2:0b:
                    f0:9e:12:13:28:8b:2a:1d:47:01:5a:dc:88:f5:c8:
                    94:c5:31:e5:e8:5e:41:35:ff:89:7d:9f:f6:22:8b:
                    e1:97:42:f9:5a:0d:f6:d9:0b:5f:21:cb:25:a2:ec:
                    75:27:2a:9a:4b:63:b9:69:86:71:b1:20:5c:1d:64:
                    31:82:8c:10:5b:c9:b8:d4:bc:23:35:ae:a0:c2:ef:
                    04:de:e7:70:b5:5c:c9:f8:a5:de:50:95:54:36:5e:
                    b5:e9:18:11:0e:02:5e:e2:61:e6:a7:c5:f1:c0:55:
                    92:9e:bc:5a:f2:e5:32:1a:0b:aa:aa:8d:81:0d:a9:
                    46:41:4d:49:19:b3:e1:6b:aa:aa:e2:59:04:db:48:
                    48:bf:2d:f6:73:07:10:6d:1b:b9:36:7a:19:5c:57:
                    99:87:e5:73:a1:3b:79:30:c5:61:a4:17:9e:c2:b0:
                    9e:6f:f5:27:6d:ee:d7:97:20:4b:be:04:f7:1b:4e:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:01:20:70:05:6D:3C:7D:BB:6B:CC:DC:6E:09:27:93:5C:5E:D3
            X509v3 Authority Key Identifier:
                keyid:07:73:4D:8D:B5:B6:B7:1A:82:C9:01:EB:DF:4E:0C:EC:42:99:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3NNjbW2txqCyQHr304M7EKZ6VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b0845c-cd18-40f8-a1c7-09562914cf40/1/B3NNjbW2txqCyQHr304M7EKZ6VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:fc:21:26:59:79:a5:b9:6f:17:f2:42:10:1d:ca:f4:ec:
         50:35:0e:bf:5e:8b:ab:7d:b6:32:b8:d5:64:89:92:27:29:83:
         88:45:7a:38:ec:7b:9e:d8:5d:0c:23:0b:5b:22:6a:c9:d0:a3:
         98:c8:d9:2d:59:02:0e:e7:30:19:8b:84:a4:c2:30:5c:90:41:
         54:b4:69:4f:19:89:85:97:7c:c2:4d:40:60:d4:0c:16:c5:b5:
         a0:49:60:32:5c:79:45:42:49:8f:63:53:39:52:d7:ea:9d:95:
         72:e5:c1:ef:b5:53:11:dc:f3:91:7a:b0:b0:2d:93:aa:a1:b3:
         8e:69:e7:21:55:69:11:62:91:93:6f:22:1a:9a:eb:e6:9c:8f:
         cc:59:45:d4:19:ac:34:75:59:c1:61:67:32:b2:95:62:5b:49:
         08:47:51:1c:c6:4a:1c:8f:74:13:91:41:ef:2a:e4:9e:35:0a:
         1a:a8:18:aa:73:4f:36:be:6d:d6:bc:93:bc:33:ba:86:bf:07:
         60:90:ca:f1:1a:34:28:9e:ce:ed:19:4c:b5:da:b0:28:ef:2a:
         b1:e5:57:89:36:5c:bd:a2:dc:dd:76:0b:f2:7e:50:08:44:aa:
         9d:e2:fa:5f:39:50:d9:42:c7:f7:ce:e9:d7:53:8a:b3:19:18:
         71:b9:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----