Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          9RZIRKzJnNhuYwMTdbDEW7dWnh5gj/0J5y49fZa7BdI=
Subject key identifier:   A9:93:2E:76:F3:B8:7E:83:1D:79:52:5E:36:39:CB:4D:F8:DA:26:B1
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       01962F74D6EBD65BDB59D8446711ED59207B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          01A3
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=)
                          2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: NNVj8mjSdL8nh54psFaBFtD73QG8QBy7H28FhwADJEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:eb:d6:5b:db:59:d8:44:67:11:ed:59:20:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=a9932e76f3b87e831d79525e3639cb4df8da26b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:96:47:ef:4e:30:32:09:99:a8:3d:5a:c0:ab:
                    c5:1b:a0:7d:ab:39:96:39:89:1c:dd:3d:3a:bf:5c:
                    dd:60:6d:fb:88:79:76:ce:e9:37:8c:03:25:43:ad:
                    db:10:49:96:ec:6b:d9:f0:37:d5:1c:1e:53:87:97:
                    4a:06:00:6e:3e:99:1b:54:8b:d3:e2:e2:ce:32:4c:
                    7e:f2:44:5f:c9:40:7b:23:b5:7f:3d:87:83:ba:63:
                    e4:cb:28:13:0e:50:d8:f9:d1:27:fc:2c:5e:5f:a4:
                    f4:d6:78:05:26:ca:29:55:7e:75:02:24:17:14:ae:
                    9e:c4:21:98:ee:01:ae:06:83:a0:a3:3e:1f:1c:79:
                    2e:cd:ae:bb:dc:40:a5:96:b8:7a:82:dc:03:90:3f:
                    0c:40:7e:4e:36:06:96:e6:88:cf:a3:b9:f2:b6:65:
                    f3:b0:c4:4f:f3:ff:3d:0a:a5:1f:0c:ff:f0:4c:79:
                    a2:67:7c:69:45:ba:67:08:cc:7f:f4:28:2c:1e:e4:
                    28:2a:63:08:bd:46:b0:76:94:37:27:be:e1:84:7a:
                    a1:a1:8f:63:86:48:df:25:9a:e9:01:85:44:a2:eb:
                    f9:b3:8d:e9:3f:88:5f:ef:e7:55:d3:da:e9:f0:9b:
                    79:d1:fa:b8:82:eb:0a:b7:05:c9:89:72:87:fc:9e:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:2E:76:F3:B8:7E:83:1D:79:52:5E:36:39:CB:4D:F8:DA:26:B1
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:76:d8:15:8e:0d:58:0e:9c:8a:01:e6:cb:c2:9e:a3:61:
         54:50:0d:c7:ab:61:bc:33:0b:ef:ba:63:bb:fc:71:93:e1:09:
         9b:4b:5f:66:0a:b3:a3:ea:48:3a:7b:99:13:09:36:ca:7c:48:
         dc:f9:c1:e6:3d:65:9c:74:34:67:4a:7f:14:70:86:0e:07:3e:
         b5:f9:ab:b6:39:0f:25:bd:2c:ff:a0:2c:b6:3e:23:5b:c3:00:
         e2:07:d7:63:7e:0e:1a:f8:4c:c6:98:c9:7a:2b:c8:bc:ac:a5:
         5a:36:69:b4:3d:ec:63:11:34:d1:ef:7d:db:6e:86:f4:40:34:
         a4:b6:51:bd:e8:cb:dd:79:a5:25:9b:87:8c:90:ee:2c:48:d9:
         ad:ea:ee:57:b0:6a:c4:19:11:0a:62:a0:e1:ca:39:b6:bd:c6:
         79:92:9e:da:32:06:b1:47:88:25:d3:d4:32:7e:f9:0c:bc:84:
         72:ab:7b:0c:2c:79:45:52:6f:52:4e:b5:c0:3e:f0:85:2e:76:
         98:4c:fa:26:39:fc:e0:29:9c:f3:ab:6b:ef:1f:9a:6e:74:f1:
         5a:26:83:e5:d9:97:2c:63:86:d5:42:9b:8a:44:80:9a:e3:b7:
         69:d3:ae:05:9b:73:82:8d:8d:fa:88:d0:40:15:d4:ec:5a:d3:
         4b:c0:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----