Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          20UaDuZTwVBMRXw/7WGtlGMFsdjWtggEx/ClOZ+yR2Q=
Subject key identifier:   21:CB:7C:F0:4E:92:17:75:D4:7F:FB:4B:54:AF:A0:C3:AA:0D:48:74
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       01962E61A0E9AD524C93D171758E1E961455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          1057
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: ngaVQBvMQy6qqlksG31KKm2Za2kYAvlHDxEPm/mPT8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:e9:ad:52:4c:93:d1:71:75:8e:1e:96:14:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=21cb7cf04e921775d47ffb4b54afa0c3aa0d4874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:ed:ab:31:b6:e5:3d:ac:c8:5f:63:74:80:
                    2e:64:e9:81:bb:ac:91:cc:d1:63:9b:9b:6d:76:0b:
                    a2:6c:1f:f6:20:74:c1:d0:06:85:64:dc:b8:68:63:
                    3e:c5:b9:d5:6d:9d:50:3c:55:00:23:0e:4f:e9:90:
                    6b:15:40:58:00:d6:15:72:22:ac:e7:42:b7:8c:32:
                    ed:77:2c:28:ff:e7:26:2c:0a:90:ff:3a:03:8a:1b:
                    25:6a:b0:b6:ac:2c:97:f1:dc:09:2f:27:42:ef:32:
                    5c:d3:e8:98:77:8b:fa:ae:e8:9d:47:c9:3c:8c:69:
                    8e:ab:83:0a:b5:81:68:7d:5e:29:d1:d7:e8:8a:50:
                    c9:69:fb:9f:85:e0:f4:c3:0d:4b:f4:0b:c6:0f:5d:
                    4d:83:c0:a7:c4:a2:67:fb:8d:9d:8e:e9:85:fc:e8:
                    5f:b5:2a:97:57:04:f5:d9:4f:90:12:05:e1:d4:15:
                    13:b4:4e:aa:b7:75:05:75:a9:14:21:17:b7:ce:7e:
                    01:3d:16:56:48:32:c4:a2:18:ef:76:29:0c:5a:e4:
                    87:07:9c:b7:4d:e9:a9:8d:8e:dc:36:20:23:8c:b1:
                    97:cc:d3:1b:fe:3b:51:14:71:4c:94:42:b3:b9:59:
                    35:f2:28:aa:8e:8e:ae:fb:df:a9:58:0a:0c:68:63:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:7C:F0:4E:92:17:75:D4:7F:FB:4B:54:AF:A0:C3:AA:0D:48:74
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:38:d5:3f:c3:97:86:fb:ab:5e:2d:8d:37:b7:c4:25:90:
         62:e4:af:d5:2e:43:b4:dc:56:f4:d9:98:48:a9:76:08:74:a2:
         ff:4e:1d:1b:b8:0e:11:2a:7c:f0:fe:df:51:fe:e4:93:3a:d8:
         d1:7a:62:14:38:7f:2d:23:64:f0:c8:b1:1f:4d:c3:2a:e9:24:
         6c:19:ed:d8:08:2d:f4:84:10:59:0b:bd:fb:b3:ef:78:96:c4:
         11:53:56:65:13:3b:28:dc:43:f8:7d:54:20:d2:11:4d:6c:9e:
         5f:b7:18:cc:0e:fb:c0:17:45:e7:3b:5b:4f:94:49:d3:f1:ba:
         aa:91:c7:ae:a1:1b:bd:a1:3a:a7:ef:71:89:6c:15:31:fb:be:
         7f:d7:d2:f8:ea:d8:2b:90:da:b4:15:8f:23:6d:52:71:12:9c:
         bf:8b:85:ec:51:89:7b:c9:90:f4:7a:66:4f:75:50:57:ab:6e:
         29:ee:c2:a9:1a:fb:b5:24:65:15:43:de:76:3f:31:fe:56:bd:
         fc:6f:26:8f:4c:39:60:2f:a0:27:ea:1f:46:d7:e1:cd:cd:8a:
         f2:99:6e:91:0f:28:d8:fd:66:56:60:64:68:93:fc:a0:5e:74:
         22:eb:64:90:0a:92:e6:30:7f:a8:15:3c:07:cf:99:96:44:82:
         53:29:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----