Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
File:                     IYbEbjsYJreC0j5jBOUPEwFJT8c.mft (raw, json)
Hash identifier:          JFDOmImmiLhCbGN1IiTPXyF0ue3g4OGXMHL4qQEE+bg=
Subject key identifier:   7F:DB:F9:55:23:B5:82:11:22:D2:5F:31:CF:38:EC:B6:3B:29:85:96
Authority key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Certificate issuer:       /CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Certificate serial:       019547480473169B07BD6CD2D9BB297909ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
Manifest number:          07B9
Signing time:             Thu 27 Feb 2025 12:00:56 +0000
Manifest this update:     Thu 27 Feb 2025 12:00:56 +0000
Manifest next update:     Fri 28 Feb 2025 12:00:56 +0000
Files and hashes:         1: 4sCdUrrg7-vswiKHkNSy1fkSLQc.roa (hash: qShQZzAdkj+1VexUUIH1OWq5M6Z+BJoC4MY621wi2GE=)
                          2: IYbEbjsYJreC0j5jBOUPEwFJT8c.crl (hash: ZLkwchb7ScSY0waF0FYcoZ46x5pdlQCI3vPnf2x4rw4=)
                          3: Tjeo1WmIkn1TfxuXYhk9r4gFwTk.roa (hash: OzL+U5DSKVSFJwICcNjGpO9oUrSPwiGey45zDs/0u8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:48:04:73:16:9b:07:bd:6c:d2:d9:bb:29:79:09:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
        Validity
            Not Before: Feb 27 12:00:56 2025 GMT
            Not After : Feb 28 12:00:56 2025 GMT
        Subject: CN=7fdbf95523b5821122d25f31cf38ecb63b298596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:0b:36:79:1e:59:82:d2:bb:9f:21:22:a8:
                    9b:bb:25:01:63:36:59:ba:a1:47:d1:5d:ee:b3:10:
                    56:27:2a:5d:6f:21:17:1d:d9:89:77:84:ef:c0:ac:
                    20:5c:82:66:fe:fa:5b:29:10:76:86:16:0f:19:f2:
                    82:bf:57:5a:56:5d:e2:35:5e:5a:be:53:c3:b9:25:
                    cc:ae:50:28:3b:63:fd:54:83:0f:4a:72:d3:9a:02:
                    64:b6:76:b8:0b:b0:10:6f:25:bf:c3:2b:70:98:fc:
                    7c:3d:e0:2d:85:2f:0a:d2:84:78:05:dc:41:4e:0b:
                    b9:02:0c:8e:df:00:0b:1a:4c:1d:27:1d:08:f8:4b:
                    d0:4c:74:0b:ba:be:8b:07:59:1f:7d:d9:58:4b:0e:
                    c3:73:f6:0c:32:91:c3:3a:04:1e:f9:f3:02:48:96:
                    a1:37:d0:da:b0:99:29:53:72:de:ba:31:1b:b3:4f:
                    ef:94:d1:fb:3b:c9:ea:bc:8f:aa:84:05:c4:af:62:
                    d7:03:9c:e6:ff:0a:ac:be:2b:66:00:35:ca:36:9f:
                    68:fe:f9:cf:f6:3a:8d:d1:2c:b1:e2:64:21:ef:ba:
                    be:14:8c:5e:b7:cf:a3:24:62:3f:b6:20:7a:79:bb:
                    70:4c:5f:3a:ca:e3:2b:d9:d5:49:16:85:f1:e0:49:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:F9:55:23:B5:82:11:22:D2:5F:31:CF:38:EC:B6:3B:29:85:96
            X509v3 Authority Key Identifier:
                keyid:21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:71:1d:18:b0:db:6e:7b:ff:3e:0f:12:aa:19:fc:04:cb:06:
         28:2c:dd:d3:05:79:9c:3d:01:f5:83:bc:ca:72:f8:e4:ae:6a:
         ea:8e:79:2d:22:60:17:14:bc:c2:bc:ee:5d:8b:92:1b:97:bf:
         1a:12:da:dd:6b:9b:7d:7d:06:c2:ae:89:5a:09:15:f5:e7:b9:
         98:2a:80:f0:7e:ba:c8:ef:f7:e4:53:95:3f:ad:52:21:c8:94:
         e8:12:64:17:94:19:9b:d3:21:ae:75:37:f2:f2:71:70:d0:7f:
         5f:e5:d5:8b:eb:30:6b:29:46:72:fc:b5:55:ba:4c:1a:75:27:
         d5:e1:be:e9:4d:84:b6:a2:7e:c6:c2:0f:52:81:71:fb:50:5b:
         58:82:b5:6c:8e:1d:dc:49:af:f3:9d:05:0e:1e:eb:e6:96:58:
         cd:d2:a0:b3:05:f9:b2:03:01:e8:84:94:92:77:b9:c7:3e:dc:
         36:ef:2a:98:97:d3:68:b5:a0:fe:6d:ab:b5:cc:0e:9f:6b:fa:
         cb:9f:5e:03:ba:f4:bc:03:ec:2d:be:20:d2:47:a5:bd:41:cc:
         28:8e:f6:88:bc:f3:ae:2a:93:77:1c:9a:c5:2c:71:b8:c3:4f:
         52:ab:dd:43:59:ad:46:77:6d:7c:14:43:10:3a:e7:aa:50:e3:
         ff:ec:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----