Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File:                     tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier:          enfm+UDtOEkgi9erGViQsRy9/bfq1aFAcOFzAMpNirg=
Subject key identifier:   6A:43:CF:CC:4D:97:6E:D6:CD:54:71:DE:0B:44:58:A6:8A:B4:74:86
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer:       /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial:       01962E621BF780708C6183495F60F207C2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number:          22
Signing time:             Sun 13 Apr 2025 09:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:43 +0000
Files and hashes:         1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
                          2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: SK5Ed5pD9g6dudP5OqmFIDEsZt3GQbWNUluu9AjPu1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:1b:f7:80:70:8c:61:83:49:5f:60:f2:07:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
        Validity
            Not Before: Apr 13 09:01:43 2025 GMT
            Not After : Apr 14 09:01:43 2025 GMT
        Subject: CN=6a43cfcc4d976ed6cd5471de0b4458a68ab47486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:30:09:4f:fb:31:ac:35:c0:87:e3:5d:5c:
                    bc:a8:0d:2e:97:5b:9a:c4:ca:b7:da:93:2e:b0:c5:
                    a5:ad:85:7d:59:04:ed:90:da:de:5b:e9:bc:9f:8f:
                    5b:c8:7b:c4:63:94:e3:0d:05:7e:f0:23:9c:ed:47:
                    0b:c4:a2:cf:58:30:ef:37:e0:3f:2c:93:75:5c:cf:
                    f2:45:38:63:11:bd:a7:51:30:b6:30:77:51:ac:97:
                    35:b2:4f:47:f3:b4:7f:9d:49:84:5c:8c:82:f1:6f:
                    a2:80:b1:ca:bb:62:80:a9:4d:22:67:98:fd:fd:08:
                    bf:18:05:9a:cf:73:ca:d9:9c:ce:40:67:1e:bb:83:
                    c9:f2:58:7f:de:87:f0:55:f5:0d:44:25:c7:b0:f2:
                    2c:9c:93:e1:cf:63:94:69:21:f0:49:53:81:83:27:
                    0e:3b:b0:f7:9a:37:de:1e:af:49:4e:22:5c:7f:c1:
                    f6:33:eb:e8:19:cb:d1:d9:25:87:61:89:c4:8d:56:
                    e0:81:63:a3:06:27:e3:f4:13:62:af:38:bc:29:d3:
                    6b:b6:eb:24:b2:87:c4:7b:43:c7:5f:3d:46:91:a0:
                    e2:2f:e5:13:44:cf:d5:2f:12:68:5a:ea:14:af:db:
                    0f:28:a2:2c:b2:99:d4:d0:af:26:ad:c3:78:01:71:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:CF:CC:4D:97:6E:D6:CD:54:71:DE:0B:44:58:A6:8A:B4:74:86
            X509v3 Authority Key Identifier:
                keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:21:4f:ec:16:4d:ec:33:51:49:7c:03:f7:c7:04:74:5b:
         5d:2b:2e:43:0c:bb:71:b6:53:63:5a:ea:00:88:5f:96:4d:b9:
         d4:67:ea:c3:53:21:00:be:33:d6:91:b9:7b:ba:6d:ad:0c:2e:
         e1:e3:42:07:d5:51:f6:ec:f2:0b:d2:83:ec:cc:a4:fc:08:f5:
         1f:12:60:15:d2:7e:f2:ff:d1:9b:e9:3e:2d:89:f9:c9:0d:17:
         13:e3:ec:83:71:ef:7d:51:e9:d7:17:78:82:a5:4a:e2:3c:28:
         64:83:5b:5c:8f:b9:b2:4e:c8:a3:f6:a4:62:e7:d5:a0:05:5e:
         9d:72:9d:ba:b6:bf:f7:5c:d4:7a:4c:40:61:ab:68:6f:6f:72:
         f7:55:d1:e9:3a:96:85:47:d5:9b:be:46:47:f0:5c:d7:1b:78:
         66:b9:ad:c4:bb:07:2b:4d:3e:16:93:4e:8e:cf:5b:8a:5d:9e:
         f2:36:c8:24:5b:7b:57:cd:df:a8:67:05:f1:61:7b:50:34:ac:
         73:6d:5c:08:7c:2a:a5:d3:c0:33:b1:1f:7f:4b:18:aa:46:f7:
         dd:81:e9:19:d9:0f:3c:9a:47:b5:f2:a6:e9:8a:60:aa:a0:1d:
         53:d7:6d:f3:89:e7:09:bd:f0:72:a2:55:02:f8:24:64:24:67:
         38:15:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----