Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          rPchouYjWAFBdV3rFTPxQGPS32NT6O+64bcy1BAVlEs=
Subject key identifier:   69:7B:01:14:4F:DD:38:C8:46:05:BC:46:6C:E9:23:26:04:AC:DC:27
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       01962E2AE8F40F4755805F3091D7A6BBD2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
                          2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 4DZdoADsJYfESh08wFJFBLzumWX3KK3tV+/eASkBI00=)
                          3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:f4:0f:47:55:80:5f:30:91:d7:a6:bb:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=697b01144fdd38c84605bc466ce9232604acdc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:73:2c:78:b3:65:d1:40:62:02:30:45:65:
                    40:08:bb:2f:ed:7e:c3:ce:c6:35:b9:c5:04:61:f8:
                    61:e6:e4:28:c9:a2:cd:6f:b5:dd:8c:98:17:ef:a6:
                    05:9e:c7:4f:e9:8a:87:69:1d:9f:db:d8:bc:d1:6d:
                    60:b5:04:30:37:ac:34:0f:6d:52:49:8c:99:7f:62:
                    69:01:cb:fc:c8:cb:f4:e4:a9:d5:5a:51:31:93:a7:
                    b5:1d:b6:bd:5c:60:e3:1a:72:48:2a:6c:55:ee:49:
                    1e:80:4f:4f:08:7c:f9:be:f9:22:42:2b:28:4a:52:
                    ec:72:81:19:07:52:b5:ec:2b:2e:f3:26:e5:63:45:
                    3e:47:f6:cb:40:fd:f5:b3:91:26:1d:7a:95:b0:0f:
                    39:14:00:08:d4:1e:30:98:b0:ff:42:55:3a:ad:d9:
                    34:6b:11:32:c7:1f:5b:70:22:b8:d3:04:31:a3:7a:
                    3d:61:8a:12:a2:90:bd:12:9a:eb:c8:fe:ab:a4:ba:
                    e9:56:6a:8a:49:b4:12:ce:be:89:06:b1:95:6c:37:
                    7e:af:5e:a6:da:18:c2:fe:17:42:aa:f8:3d:4d:97:
                    1b:8a:5d:e8:f8:ef:db:97:54:2c:45:09:ea:fd:53:
                    3f:bb:db:29:14:0e:00:d4:91:ac:eb:e7:4f:c3:44:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:01:14:4F:DD:38:C8:46:05:BC:46:6C:E9:23:26:04:AC:DC:27
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:af:71:1e:cb:00:bb:c2:9c:b7:6c:0f:57:f5:82:77:76:
         da:63:4c:a9:6b:c9:eb:28:ac:d5:a0:3e:f4:b0:34:c7:03:11:
         7f:9f:0b:ed:72:a9:23:5f:62:e9:5d:08:8f:54:e9:33:12:ce:
         6c:47:09:62:4b:01:a3:9d:a7:52:64:77:d9:a6:37:85:6e:49:
         cd:4b:a3:bd:a2:2d:59:c9:28:eb:7f:b9:c9:a8:0a:e3:a9:c5:
         86:d0:bf:7c:7b:75:92:43:2e:98:ed:5f:b9:54:ec:32:25:66:
         da:ac:85:8f:7e:87:c3:3a:6b:31:1a:dd:c7:18:c9:a0:e9:2f:
         5e:33:d4:8e:6c:1c:41:d0:d7:7a:e6:dd:1c:eb:8c:1a:bb:38:
         a5:47:ff:64:92:a5:09:ce:2a:a4:12:27:7e:18:76:32:7a:23:
         a2:be:d9:7c:40:c7:e5:a2:01:23:5a:51:71:96:46:7c:33:12:
         db:63:44:67:b3:16:75:34:ae:6e:0a:7a:14:1b:f9:df:0f:41:
         0d:58:90:17:fd:dd:43:78:74:31:12:84:8e:7d:6d:fd:8f:80:
         e7:da:12:c5:1c:65:6c:7d:a1:ce:05:24:60:08:4d:fd:18:0e:
         bd:b3:26:40:c2:35:06:cb:f2:5e:4e:c1:75:f4:38:73:d8:b1:
         1d:b9:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----