Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File:                     sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier:          4xBlOQvt5Nml4vnOtn2XjHGtk7v9Xlp5VD4R7Ln7uXA=
Subject key identifier:   FB:32:7D:A6:0B:42:AE:9F:C2:1D:47:9A:F1:66:4A:DE:4A:64:41:29
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer:       /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial:       01962E619DAAA7642E7FFBD57C4EB1366690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number:          0176
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: 4npspEN1Akagx5GRtvAdS5XGmy5vkAc8hQvrpncashY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:aa:a7:64:2e:7f:fb:d5:7c:4e:b1:36:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=fb327da60b42ae9fc21d479af1664ade4a644129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:99:24:90:e1:9b:b7:9a:4e:50:f4:71:5b:
                    bd:6d:d3:1f:34:ee:f6:3c:9c:56:3b:f4:e3:a1:84:
                    c7:8f:44:b1:2e:a1:55:7d:e4:c4:d7:26:6a:92:ad:
                    1d:f5:e2:3a:e0:92:38:a3:99:8a:21:f9:40:f9:a5:
                    3b:a6:7e:6f:51:ae:7f:17:68:7b:d3:9c:ed:72:31:
                    a2:8c:70:a4:18:eb:37:b3:6f:82:c8:2d:19:a2:4c:
                    f1:b5:5c:e4:5e:4f:f4:ed:f3:98:7a:3e:d4:4f:29:
                    a6:60:e7:6c:41:33:1a:15:f6:48:a8:11:e8:2b:6a:
                    d3:5b:58:cc:81:f7:7c:d0:97:f2:39:48:9b:28:fa:
                    2e:a2:b4:c6:a0:7b:35:d0:4a:38:4e:69:c7:f9:d6:
                    d3:e1:cf:30:51:47:37:04:e6:4f:e2:f7:45:80:d7:
                    7d:99:5b:68:8c:d6:52:43:1b:64:5e:db:45:8e:95:
                    96:08:f1:fe:8e:81:fb:18:93:a3:64:58:16:9c:63:
                    23:15:ce:14:91:1a:b7:6e:ce:08:ce:28:8e:36:70:
                    89:d9:82:cf:24:26:84:00:63:40:fc:a7:71:26:0c:
                    92:d4:30:45:d5:7a:93:32:21:9d:4a:fb:8e:e0:bf:
                    ac:ef:f3:0a:44:14:8c:3d:cd:54:ee:a0:1a:79:ea:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:7D:A6:0B:42:AE:9F:C2:1D:47:9A:F1:66:4A:DE:4A:64:41:29
            X509v3 Authority Key Identifier:
                keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:47:f7:58:31:25:55:2e:f0:78:7f:fa:2d:de:9b:c7:73:14:
         7a:ec:12:63:83:12:aa:24:1e:79:7b:5e:1b:de:5a:5b:d3:3a:
         aa:f4:e9:90:b8:f3:d2:cb:50:0c:f0:3f:f0:1a:ba:21:a8:d6:
         4a:1b:5c:a4:9e:90:78:e6:cc:94:9e:f2:6f:80:78:77:7e:37:
         e4:66:0e:76:47:bb:a9:bb:ae:00:70:ff:24:e5:9d:51:c0:16:
         db:b3:65:7b:77:af:dc:ea:87:8f:64:d5:7f:6b:b0:ab:e7:44:
         33:41:82:b0:00:0a:2f:66:6d:80:02:de:9f:f4:75:41:a2:52:
         13:77:14:ae:25:10:50:b1:51:44:e1:c3:dd:59:74:a9:71:a6:
         e9:5c:fc:51:05:0e:2a:27:ed:52:7e:74:a9:e2:54:f3:35:d0:
         b9:7e:f1:76:d2:5b:40:a7:0c:36:af:70:b5:cd:ce:71:3f:05:
         3e:96:91:5e:79:bb:1e:1d:25:e2:28:98:7b:c3:e4:3f:b6:8d:
         73:c8:04:3e:d9:59:25:e2:73:82:07:15:a2:58:65:b6:29:c0:
         65:ca:02:2e:20:81:c9:b7:c4:05:62:85:98:f3:d6:18:4b:92:
         30:b5:af:54:1a:3d:7b:ca:62:fb:4e:29:f3:4a:da:59:7c:95:
         3e:59:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----