Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          ozHuB9BiHy89P4ZqVbdXtOZ8CwKKkyH4XHoIvedcNdA=
Subject key identifier:   1E:6D:1D:86:E1:24:B9:1F:0C:85:07:62:B2:C2:6C:1B:05:B9:E3:F6
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       01962F74D15B798465DAA22D88EAF877E494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          119B
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=)
                          2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=)
                          3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=)
                          4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=)
                          5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: h7LAXCdvwv/0ZmC4nc98DILjEMFNNadr1Cw7vhWRh7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:5b:79:84:65:da:a2:2d:88:ea:f8:77:e4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=1e6d1d86e124b91f0c850762b2c26c1b05b9e3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:8c:15:33:19:00:2c:d8:0e:f7:02:98:8a:
                    60:b3:17:f6:ed:5d:2d:63:c8:4b:3b:5c:23:a5:61:
                    31:60:18:b2:c5:53:55:36:4a:dd:58:92:20:26:60:
                    d1:5a:fc:67:73:e6:f9:b8:e1:42:ce:ec:b4:f2:a8:
                    9e:0b:61:69:5a:2b:e9:df:0c:e3:d2:66:17:58:67:
                    eb:39:c1:cc:5d:20:5a:d5:50:c3:70:33:03:e7:7f:
                    d8:dc:3a:94:68:44:b0:01:66:41:cd:5a:1c:f6:56:
                    39:70:cd:b6:10:77:8c:e2:3c:eb:60:54:cb:13:63:
                    c6:26:eb:a8:ef:d4:18:33:24:30:ab:57:3e:5e:9e:
                    dc:82:82:f6:ba:9f:42:f9:2a:7e:83:9a:e2:52:39:
                    1d:2a:15:d0:40:2c:5b:30:53:02:32:a3:84:1a:66:
                    30:88:09:9f:56:71:af:aa:89:69:2d:22:96:be:50:
                    4a:ff:1c:c3:be:7e:5c:e5:34:17:26:d7:51:76:60:
                    d2:7a:4f:84:fc:3f:6b:b5:1c:99:d4:8e:4f:9a:48:
                    9e:4f:2d:70:14:e9:17:64:fb:ab:9d:6a:3d:ab:47:
                    c5:95:1b:d2:2e:64:e0:e4:b0:7d:a8:ab:0c:63:49:
                    2d:c0:a7:53:a8:e8:68:16:bc:88:61:26:22:a9:7e:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:1D:86:E1:24:B9:1F:0C:85:07:62:B2:C2:6C:1B:05:B9:E3:F6
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:12:cf:22:d0:17:89:1b:fb:ff:e7:8a:06:b7:a0:95:a6:50:
         fe:5e:38:63:58:44:10:a7:09:39:6d:0a:b0:23:de:be:f4:36:
         25:d8:bb:e6:c1:07:22:e4:42:22:0d:6d:2d:f8:61:52:f7:7c:
         a0:39:bf:1a:fb:12:66:9d:98:16:2d:d3:33:4b:45:06:2f:33:
         b7:e8:f6:c3:16:a5:2d:2d:24:05:06:24:57:9f:75:8e:1a:bd:
         ac:98:99:df:45:17:74:71:f3:88:8e:9b:ad:2d:49:92:60:2e:
         6b:00:bd:81:a9:cf:84:e7:03:fc:85:ac:8a:66:43:84:1e:14:
         17:d6:39:b8:c1:73:47:c3:c3:93:ba:26:b5:0d:77:95:50:14:
         b8:7c:49:0e:db:7f:76:74:55:e8:f2:66:ba:d2:04:ff:9a:b0:
         66:8b:9d:f9:cc:88:77:94:78:a8:69:1c:06:17:25:36:c0:6e:
         18:0d:dc:8d:2b:60:cb:19:9d:35:c4:3f:1d:48:40:03:3c:fa:
         7c:f8:a6:6e:3f:69:68:53:27:45:62:41:2e:8c:98:4f:00:a3:
         59:5d:51:fd:3e:b0:1d:a2:41:8e:58:c8:f8:ac:df:fd:ed:d5:
         c8:6c:28:54:ff:a8:ee:0f:b0:47:75:e0:71:f8:15:fb:3f:32:
         37:40:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----