Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File:                     U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier:          C/hRM4Frusdc95HvljkyWbGBt2aAo9M1t67vLmAprWU=
Subject key identifier:   CC:03:E4:69:5F:9F:B8:F2:EB:CA:A3:7C:E3:F5:2C:46:FD:D4:DD:7A
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer:       /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial:       01962E2AED3E7A6CBEA1BAD0BC25F53B9C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=)
                          2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: 7rEri/XNcPItnOaWFIgeskIOv+pWXoE92rytcRnef/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:3e:7a:6c:be:a1:ba:d0:bc:25:f5:3b:9c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=cc03e4695f9fb8f2ebcaa37ce3f52c46fdd4dd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:df:07:37:1e:f7:c8:e4:35:53:37:b3:f7:
                    93:f4:b6:9b:fb:f8:5a:93:05:73:23:43:9c:96:4f:
                    c1:6f:27:f1:60:71:f1:0a:ea:8f:42:1e:2c:3e:ad:
                    65:3b:9b:fc:eb:0c:dc:8a:e0:6c:c1:66:c0:94:f2:
                    08:9e:74:fc:dd:ff:20:ac:41:a8:ef:98:4a:c0:9d:
                    4c:24:bf:7d:14:19:e4:ef:fd:03:82:9b:15:54:5d:
                    45:0e:ac:5e:11:35:75:68:60:a2:26:f0:94:92:de:
                    a9:d6:34:a0:64:a6:be:e0:30:94:9c:e0:5f:d4:dd:
                    74:fa:25:db:8b:50:19:dc:55:8c:f7:d9:ff:6b:cb:
                    b1:0f:e5:67:79:d0:0d:07:15:bb:69:fb:01:7b:0d:
                    59:8b:df:14:49:ca:c1:3d:3d:b7:bd:81:bf:14:04:
                    ae:56:5a:98:f6:6f:23:e4:ca:af:34:1c:71:6f:d8:
                    a5:06:72:e1:ba:20:89:09:73:49:77:83:e6:ac:97:
                    94:2f:d5:0b:76:f3:a9:04:82:cd:21:7b:c2:8d:62:
                    28:a0:22:b8:82:59:4b:3e:94:c7:b5:0a:2c:44:6a:
                    77:ad:ad:00:0a:81:f8:ce:b4:6a:69:0b:fa:59:af:
                    cd:b5:e3:d7:6a:2c:e3:ce:9e:3a:87:6b:ee:71:c9:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:E4:69:5F:9F:B8:F2:EB:CA:A3:7C:E3:F5:2C:46:FD:D4:DD:7A
            X509v3 Authority Key Identifier:
                keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:c1:04:f3:89:5e:21:a9:75:8c:d0:59:23:dd:ee:16:52:
         8e:5e:ed:07:5c:b2:1c:20:01:aa:b5:cd:3f:0f:ad:c1:64:ff:
         76:a2:08:3d:0b:a9:38:92:5c:d7:13:43:ca:4d:72:bf:56:b7:
         02:1f:3c:60:c7:b3:70:6a:48:64:ca:ae:49:dd:08:38:85:46:
         e6:43:26:e0:d0:49:cc:e2:33:bd:43:c4:18:36:56:f4:b4:02:
         56:c5:d1:8a:a0:c4:a3:10:dc:32:12:9c:55:fa:cb:16:a8:6d:
         23:44:da:fc:49:7e:41:5f:72:d9:1a:40:b4:0b:bd:b4:5c:e2:
         1f:7f:df:69:fb:a9:96:d1:eb:b6:44:8d:04:38:36:5c:22:51:
         98:c1:8a:9c:f6:f7:94:b8:3f:08:3e:17:33:b0:bd:66:a4:12:
         ba:49:4a:c1:b9:2b:fd:59:ef:be:5f:fb:63:85:eb:2a:17:77:
         1d:be:92:f9:ba:c8:e0:78:d3:75:78:02:d9:e3:41:13:e9:bd:
         f3:76:7d:a7:85:98:bf:78:c0:8b:1e:59:1c:95:90:39:b8:7d:
         6f:27:ec:da:c0:da:b3:91:5f:da:f8:69:82:28:fc:b6:78:05:
         0d:47:12:ae:19:f0:64:54:6b:87:72:d3:cc:16:cc:f9:44:15:
         1b:3f:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----