Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          DllgFU1kXkJU6LV+3emtp1S+J+vhwbAy7N9xMCZojOI=
Subject key identifier:   5B:89:23:FA:FC:CC:67:7E:0D:9A:5E:43:A8:0E:F6:47:6C:C4:0A:8F
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       01962DF4180A592398C9FE4DB620064416C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          0C06
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: 4OLOxEQPgKlaR34Y1wlprgVyTCyvFkvo/zRYWkzQb7I=)
                          2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:18:0a:59:23:98:c9:fe:4d:b6:20:06:44:16:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=5b8923fafccc677e0d9a5e43a80ef6476cc40a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:56:83:dc:00:74:ed:19:3f:37:59:6f:9d:
                    c9:7c:14:85:8d:38:3d:95:cf:d4:28:4a:0f:85:b4:
                    c3:e6:5f:a0:b0:42:13:26:71:96:59:2b:ae:e3:65:
                    f4:47:ac:b7:05:e5:4b:ff:95:41:6f:53:80:3c:a0:
                    e4:df:b3:44:0e:56:83:d4:42:3b:27:ea:f2:ff:a5:
                    6f:e9:e4:dd:71:d9:8f:05:09:34:c4:90:1d:b2:73:
                    41:38:fa:86:7c:d0:8c:3e:2b:88:e0:2e:d6:c5:8f:
                    81:e9:58:b9:36:f1:47:0e:23:33:a0:11:71:6c:92:
                    80:6b:91:56:c8:56:85:97:26:7c:2e:e4:86:c3:44:
                    b8:74:0f:fa:dc:10:7d:30:c0:11:46:95:8a:8f:5f:
                    04:86:5d:36:33:3d:d2:fc:8b:45:42:fa:83:e8:07:
                    b7:81:af:37:f5:79:f7:e4:85:25:89:6e:11:f8:bf:
                    d3:04:17:e7:49:35:c2:cb:35:7e:3c:1d:63:84:91:
                    44:17:26:73:51:89:de:6d:de:02:32:f3:73:44:21:
                    2e:81:25:01:b3:e4:bf:48:e3:9f:85:ff:33:61:f5:
                    f8:89:5d:c2:1b:58:c8:42:ab:96:5a:56:fa:5c:d3:
                    41:68:3c:c0:1b:91:b3:3e:05:ae:a2:a4:02:f1:9e:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:89:23:FA:FC:CC:67:7E:0D:9A:5E:43:A8:0E:F6:47:6C:C4:0A:8F
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:95:97:52:af:a7:19:82:d5:f5:5d:54:f9:3f:46:08:a2:21:
         80:ad:bd:a2:6d:fe:78:c9:41:8a:d2:c9:62:1c:68:21:7c:38:
         9d:92:93:d2:d5:13:6c:1d:9e:90:81:47:bb:d3:20:da:31:0e:
         c9:3b:e2:d2:7c:79:22:18:31:57:f6:7e:57:36:46:0e:b0:8c:
         de:bf:58:44:d0:f2:ed:35:a4:a1:52:83:4f:b2:a1:df:8b:79:
         22:5e:4e:76:21:a1:fe:9b:26:08:64:66:f0:35:90:02:c3:d7:
         49:20:5a:65:2d:ff:c4:8d:a5:1e:cb:dc:8f:25:4f:96:a8:5b:
         45:5e:41:12:64:d1:61:cd:fa:57:8e:bb:8b:66:f9:18:d7:e0:
         18:24:65:bc:ad:b1:ef:25:a0:ef:20:ab:9c:3e:65:c7:5f:2f:
         32:6e:90:4f:d9:04:ba:e3:7f:b2:4c:64:45:91:ea:94:27:b5:
         56:db:f9:25:93:7e:01:a9:ff:73:4e:1b:6d:c2:47:9d:c8:2e:
         af:85:9b:4b:16:8d:5c:cc:b9:75:4c:db:a3:13:ff:76:e8:95:
         cf:00:89:55:b5:1d:16:74:f0:c0:e0:a0:6f:02:16:72:f6:2d:
         1b:3a:e3:d2:2c:5a:8e:61:b1:fb:e2:8b:56:1b:26:ee:19:cc:
         b4:f2:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----