Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          OuzcJ5TjRbLSUpPeSrRy2dx6Mn72S1Mg5FJuMcka9wo=
Subject key identifier:   B0:EA:0B:C2:93:CC:CF:E0:39:34:41:A3:0E:89:30:8F:8F:23:89:D3
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       01962FAB0891E85113BD38C17C7B39D7DD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          0B66
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: s/ESq7FMZIiYJAfLcBHDw4hlZBeosiN+vIgX2CYkrcU=)
                          2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:08:91:e8:51:13:bd:38:c1:7c:7b:39:d7:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=b0ea0bc293cccfe0393441a30e89308f8f2389d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:53:e1:6c:aa:b8:51:a2:ca:7e:36:48:0c:
                    79:e3:57:f5:f7:88:07:a9:5b:a8:90:63:67:fe:e6:
                    11:56:3a:2b:30:b7:82:cb:27:49:ab:17:ec:82:21:
                    16:ec:f4:d4:2c:f1:bb:3f:fa:e0:b7:1a:db:2f:12:
                    d6:c8:c2:48:e0:56:1b:06:17:ab:64:be:bd:0f:e9:
                    db:b2:ec:4d:74:8e:17:2e:0f:be:e5:d5:c6:bb:de:
                    66:48:2d:64:4d:06:00:6a:bc:8a:9b:a3:10:3e:33:
                    b9:49:e6:6f:61:56:21:a1:ef:71:3a:be:3f:db:32:
                    e4:fd:b6:67:4e:43:85:81:2d:aa:7d:cd:1a:b1:8c:
                    e8:7b:2e:79:f3:c5:0b:7b:2a:ed:61:f0:f7:56:3d:
                    5e:91:df:0a:71:5e:9d:6e:f8:23:77:47:ba:e9:c5:
                    25:e3:82:44:7c:12:1a:6f:3a:8d:34:ed:47:80:4f:
                    17:3b:29:a2:8d:2a:a5:98:b3:c1:e0:17:11:ae:7c:
                    ff:c3:1a:6f:20:09:da:5c:0f:4c:36:44:a3:05:79:
                    54:4c:da:ae:43:fb:74:7e:cf:4a:c1:a4:4d:c8:10:
                    83:6f:95:34:fb:d1:37:3f:38:af:5d:44:23:e7:b5:
                    c4:72:1e:c5:28:0f:ab:1c:7f:3b:1b:d4:b1:09:ca:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:0B:C2:93:CC:CF:E0:39:34:41:A3:0E:89:30:8F:8F:23:89:D3
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:35:18:02:1e:5c:24:2c:20:4a:b9:05:d4:94:39:16:7e:
         f2:b6:aa:42:0a:cd:64:bd:d8:cf:56:3d:61:36:44:4a:08:22:
         70:bc:30:ba:2e:56:80:03:2f:e6:05:14:0c:0f:8d:34:59:6f:
         57:fe:57:cf:92:11:5f:02:5c:06:b9:f8:53:d9:30:cf:bf:06:
         ec:76:a5:b1:24:60:2a:50:19:55:e4:0c:ea:8e:77:9c:56:89:
         ed:e9:fe:84:0c:99:f2:88:e7:cf:67:b7:4d:91:72:9a:46:8e:
         d9:3c:45:16:97:3d:55:1b:9f:57:fb:21:c2:63:a5:7a:ad:5f:
         ea:a7:a6:b7:ab:0b:a9:bc:1a:32:44:b8:4f:f8:c3:24:fe:10:
         17:df:ae:dd:12:0f:13:d1:d3:83:72:73:fb:2d:cf:3f:fe:cb:
         54:d8:b6:80:bc:2f:d8:d4:bb:5c:ba:98:59:9d:26:e7:09:e3:
         35:a7:90:73:98:00:c0:64:40:57:32:58:4a:91:37:41:5f:95:
         a9:81:f1:8e:dc:59:08:ea:21:b7:95:dd:15:70:af:96:45:94:
         02:7a:12:6e:9e:5d:26:36:4e:4e:99:dc:15:b0:76:44:1b:b2:
         61:3f:e2:25:9d:6e:22:53:33:e8:e7:6b:78:25:8f:24:fb:30:
         df:29:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----