Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File:                     u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier:          nQl04Ka+FE0s8QuY20fCo3TPJ16JfRqResx5u65k31g=
Subject key identifier:   E5:FF:2C:3D:32:FD:43:C8:93:B4:A4:36:1E:91:04:28:6B:D7:54:E6
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer:       /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial:       01962E2AF7460B8904CC8A567046DE20A8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number:          106B
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
                          2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: c93IQJTmrHyLxynhidFsnNIja7VYXThIyRjnxvjIx2s=)
                          3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f7:46:0b:89:04:cc:8a:56:70:46:de:20:a8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=e5ff2c3d32fd43c893b4a4361e9104286bd754e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:04:5e:44:4f:d7:c2:e6:97:9a:8c:80:16:
                    25:93:f6:7b:80:6f:44:fa:51:1c:49:33:28:5c:e4:
                    34:7f:95:fc:a0:44:46:ca:9d:a6:1a:1b:fe:54:ba:
                    d8:29:09:33:55:a0:69:18:2e:2f:73:4f:6a:1c:2b:
                    5d:c8:51:1b:38:27:39:31:e1:bc:42:53:a6:e5:5f:
                    a4:2b:5a:6d:25:50:23:4e:ea:6a:bf:78:7e:d3:a1:
                    3d:dc:86:5b:74:2a:da:31:f0:a5:d0:ef:ba:57:ef:
                    54:46:0f:4b:8f:c7:01:ab:a4:b7:a4:d4:8d:c3:d2:
                    43:15:54:b7:b5:37:7b:16:43:f7:70:59:74:cd:38:
                    50:af:dd:f7:09:a3:67:39:28:40:4d:7b:d1:0a:ba:
                    74:e3:8f:29:a5:33:a0:6e:22:3f:8e:a8:29:e9:94:
                    31:3b:41:72:9a:3c:b9:5f:ea:65:f1:98:46:39:5b:
                    1f:22:f3:6f:63:ab:79:a6:14:41:4d:8f:1b:08:ab:
                    60:aa:ff:9f:be:d2:bd:65:e5:70:52:a2:98:a0:92:
                    8d:ee:e6:01:09:77:24:a4:89:80:af:55:29:a3:a3:
                    11:8a:b4:2b:44:dd:d2:e3:39:95:28:c8:6d:95:a8:
                    4d:72:96:05:28:01:3d:44:57:1e:0d:fa:46:ef:43:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:2C:3D:32:FD:43:C8:93:B4:A4:36:1E:91:04:28:6B:D7:54:E6
            X509v3 Authority Key Identifier:
                keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:91:af:f7:fd:b7:6a:bc:a4:08:22:d8:94:51:8b:81:dd:29:
         cc:e6:b8:62:c3:4b:96:24:6b:79:7c:0f:d2:c8:c4:37:cb:a8:
         12:1e:a4:6f:e6:d7:dd:3f:47:26:9e:3b:dc:f3:15:da:eb:c9:
         4e:73:4e:98:af:38:70:29:bd:0c:75:9e:6a:af:2e:85:e8:87:
         aa:9c:da:ea:7c:57:3f:94:33:45:7a:02:ea:96:04:b7:0a:df:
         11:34:6d:85:72:1b:be:fa:87:1e:15:c1:b9:ac:39:3c:b6:f5:
         05:fb:48:bf:9f:07:43:f5:7e:ff:48:c4:dd:fe:3d:51:80:d2:
         9a:27:65:39:f4:b4:29:e6:94:88:36:03:1d:04:8b:df:58:5f:
         31:61:b3:9d:05:2e:43:44:be:fa:6a:e4:56:1c:cd:38:64:ad:
         18:8d:b5:0b:5d:f2:5e:7f:d7:17:7a:6f:72:11:96:c3:78:de:
         fe:84:30:a5:91:d6:2a:dd:3b:28:d3:2e:1b:e3:c0:24:06:23:
         8d:a6:da:24:88:3c:6c:6d:57:6c:ef:db:7d:e5:68:bd:bc:bd:
         55:29:9b:75:32:31:2c:32:3e:9f:2f:8f:ef:31:d4:33:18:48:
         3e:bd:33:9c:ce:63:06:eb:1e:ae:40:ee:3d:7f:b9:60:cf:02:
         2b:59:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----