Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          JJUxgsqJm/vx7JeydCjYdxMThsbjAltS4oU7bgfTjIk=
Subject key identifier:   9E:5C:95:42:06:A7:A5:59:59:D3:7D:72:07:9D:87:86:76:E5:FE:06
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       01962F3D982EE709B673AF1B8928A1D26AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          0C9D
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: 7yM3gRg4J8vPrZ8xoMz1lvZ8awcLy33bbZ3lFLBFRNk=)
                          2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
                          3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
                          4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:98:2e:e7:09:b6:73:af:1b:89:28:a1:d2:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=9e5c954206a7a55959d37d72079d878676e5fe06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:3d:19:0d:46:1c:fc:36:a1:88:74:20:10:
                    ae:b6:78:43:6f:73:6e:0c:69:ea:2b:cc:fe:c0:36:
                    05:ce:9d:d8:cb:16:57:0c:0e:02:4d:62:46:10:66:
                    bc:29:9c:80:0c:54:47:96:b4:94:2a:0d:cc:4d:b6:
                    14:e1:23:a5:6a:6b:be:53:6d:bf:22:be:ee:b7:7b:
                    e8:a7:ab:57:d1:f7:fb:44:ff:ae:dc:35:e4:cf:65:
                    6b:cd:37:e7:10:5d:fa:5a:50:09:8a:83:cc:43:cb:
                    cf:8a:56:4b:cd:0c:c7:da:cf:5a:f4:52:9b:83:9e:
                    ae:51:86:23:0b:b2:4a:b2:a2:ac:0d:65:08:0d:0a:
                    92:b2:f0:ff:f7:0a:c4:16:c0:03:a6:b2:80:7a:ed:
                    27:07:4e:16:f5:f5:38:31:f3:0d:73:5d:0a:e5:78:
                    1d:90:a7:4c:53:9a:97:89:a7:b1:e6:57:1f:e7:0b:
                    7f:83:12:00:63:a5:50:77:3f:ae:89:38:9f:4f:47:
                    45:20:83:bf:6b:ba:25:0d:ba:fe:70:de:10:11:35:
                    14:c4:a1:f9:fd:e9:2e:79:82:e8:5a:45:6f:b1:e6:
                    94:e4:5d:ff:a5:86:2c:7a:51:4a:8b:c6:a4:13:ab:
                    e5:f4:2e:a5:90:95:7a:7c:bd:e5:b5:3a:62:4b:b6:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:95:42:06:A7:A5:59:59:D3:7D:72:07:9D:87:86:76:E5:FE:06
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:2a:f0:0d:b6:3e:66:bb:e7:1c:7c:f7:9b:02:36:f6:d9:
         3a:a2:87:89:1a:65:65:ee:5d:c8:69:b6:45:bf:2b:8d:f6:df:
         6a:ce:d6:6d:38:d6:3d:ae:c2:dd:10:c4:f1:25:59:df:b4:a3:
         8c:ad:03:92:fe:a3:f9:62:6c:2a:34:b6:3d:07:00:ad:d3:f3:
         bf:97:4f:cd:e5:6b:8b:83:b1:5a:1e:5a:ad:cf:19:b2:13:00:
         b1:20:04:6d:96:93:28:90:b8:21:9f:f5:a2:26:d7:17:b0:d0:
         d8:77:72:5f:19:52:48:93:87:3a:e9:cf:ab:b2:a5:c4:a5:49:
         d3:c3:42:a2:97:68:ef:e3:28:96:fb:6f:f0:66:3a:d5:92:ab:
         6b:da:14:92:7b:d4:35:e9:94:54:0d:11:19:c8:7b:dc:bb:28:
         4e:19:51:50:04:44:09:e5:6e:c8:92:6e:87:ce:12:50:04:04:
         23:b7:0c:2a:3f:60:d9:e2:b8:54:c8:eb:fe:27:6a:08:2a:e8:
         5f:41:aa:a6:dc:00:cd:f5:73:8d:31:ce:20:03:28:14:b2:53:
         da:d6:2c:3c:5f:b9:8d:36:38:0f:13:cf:9d:d6:74:83:47:ca:
         32:05:45:07:74:b2:8c:bb:5f:0b:77:32:f3:a2:d6:53:70:f4:
         60:69:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----