Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          FotVcCGD+yJ7QCgRQsWVNyO5PKiAqfnJdeEp8zkg08w=
Subject key identifier:   0E:5F:AF:61:E0:A5:97:5A:E7:38:A9:07:52:14:DC:9E:DB:32:7D:0F
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       01962F3D5941B1AA1AC74D50B22EA2DE81B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0AC5
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 1g0S9dVTOEOmddtvVcu8fgeRfzweW0FaqNySAb+/A3k=)
                          2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:41:b1:aa:1a:c7:4d:50:b2:2e:a2:de:81:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=0e5faf61e0a5975ae738a9075214dc9edb327d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:55:2b:46:4e:01:49:82:ae:7a:13:4d:83:
                    38:f2:a7:d9:39:ac:67:aa:1c:9a:96:4b:42:a1:b8:
                    c6:2b:26:1b:85:c1:67:cc:d9:d5:f4:86:32:56:5a:
                    3c:69:e0:7a:fc:8e:71:da:13:fe:28:77:89:1f:d9:
                    5e:3f:44:97:d0:46:92:3d:0e:36:63:7d:64:ce:4f:
                    f9:fd:b6:7a:12:71:e4:23:0a:94:7d:9b:b2:b8:2b:
                    af:3c:8b:a5:bd:3f:0c:29:e6:13:d3:78:aa:df:fa:
                    b3:c8:20:e8:c8:fa:ab:ae:42:87:cb:66:84:a0:26:
                    4d:a0:64:6a:29:21:82:e6:b8:ee:a3:a3:15:74:a8:
                    94:3d:de:cd:cf:81:02:bd:9d:9b:64:1d:f9:28:0a:
                    99:c4:c1:7a:8a:21:11:f4:f5:30:92:8f:6d:0a:4b:
                    aa:89:84:de:6b:0f:d0:39:0d:0b:61:60:0f:1c:66:
                    57:7b:22:98:82:cd:31:06:5e:80:49:1b:f9:5b:5e:
                    19:6c:2a:4b:bb:1f:0a:cd:d9:ec:6c:fd:70:7b:67:
                    a4:63:b3:2f:d6:7f:3e:b6:bc:c5:af:c1:2f:7f:be:
                    a5:79:79:c1:5c:f4:07:fc:84:63:dc:22:98:df:99:
                    38:b8:cd:c6:fc:40:d6:ef:c3:10:20:2f:41:a4:a8:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5F:AF:61:E0:A5:97:5A:E7:38:A9:07:52:14:DC:9E:DB:32:7D:0F
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:37:75:59:50:89:69:a6:d8:f5:a8:8b:28:09:bc:a2:74:43:
         dc:b1:b6:b8:62:c5:95:83:7d:2e:a3:e3:4f:ee:a6:49:6a:94:
         83:50:62:2d:4b:30:30:3e:e6:64:1d:76:97:c2:bb:e3:ae:46:
         97:73:9e:ae:86:8b:d1:5a:83:e8:5e:ac:d3:81:a8:81:2a:93:
         97:3b:e6:3c:96:61:21:13:5c:09:18:d2:23:78:27:c8:aa:70:
         17:96:e6:80:f3:2f:46:d1:b1:35:c1:f6:e1:12:31:6c:bd:65:
         84:95:0b:be:0a:1c:3e:c6:5f:a1:97:7b:16:90:e0:9b:e4:5b:
         ff:9b:bb:a6:1f:df:ef:a5:ce:1e:4b:33:f6:5f:11:fa:de:3b:
         9b:a9:6c:f8:d0:92:08:fd:84:d0:53:bc:7c:e3:b2:ef:58:7f:
         84:31:d4:bf:47:e0:83:20:07:d4:35:ce:78:d1:bd:1c:37:35:
         96:b1:f1:dd:f4:a3:a5:0d:25:4e:da:ac:04:3f:8d:08:57:9b:
         de:4d:95:25:b8:6f:bb:42:6c:f9:a2:b7:74:80:da:6f:dd:f9:
         a5:9d:d7:07:72:7c:bc:06:cb:a9:62:f5:6a:c9:e5:fc:9f:76:
         ff:6b:cb:1c:00:4d:74:08:04:c9:99:14:0a:4f:f8:7d:fe:3c:
         cd:d4:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----