Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          jsMPuocLwB31dfncbXiwOlnSIKmqgi3JHRUpK/Wt5iE=
Subject key identifier:   0C:CB:F4:97:99:51:EA:4C:32:88:1C:5F:33:A5:E8:97:9C:3F:FC:81
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       01962FAB78EE189DD5C4F94FF427012ED844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0B7B
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: VFRNqb0yZW69EfAy5o/R74G4WU9kSivtEA4hMvU+zPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:ee:18:9d:d5:c4:f9:4f:f4:27:01:2e:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=0ccbf4979951ea4c32881c5f33a5e8979c3ffc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:f5:23:dd:b2:5a:69:fd:3c:c7:3e:db:3c:
                    dc:0a:21:1d:39:e1:1c:2a:32:78:1c:e7:32:4f:1b:
                    0a:f8:ec:8f:15:21:0c:b0:33:b8:f1:57:a7:9c:71:
                    36:0b:5c:e5:db:59:60:bf:7a:c0:e3:89:21:a6:71:
                    72:7f:6c:b8:10:f9:cb:36:ed:78:aa:50:91:82:98:
                    1a:e0:0d:fd:bf:75:5d:25:ec:3c:09:b6:c2:39:70:
                    19:a4:53:ec:80:e2:94:1b:56:68:78:c8:33:70:90:
                    7f:1d:25:bc:3a:f7:85:94:3b:82:2a:7c:a9:22:f3:
                    4a:55:e5:86:e8:84:14:1f:0c:7e:ee:57:be:53:ef:
                    98:a0:62:a5:6e:ff:a7:f7:e3:01:ec:cc:0b:b0:dc:
                    a3:1b:ab:c6:e1:f0:26:1b:29:9a:c7:03:74:7d:6b:
                    87:d1:cc:6e:ce:7d:c5:5f:a0:d6:43:27:fb:5b:58:
                    11:61:2b:1f:fe:f2:f0:83:b4:8e:85:1c:5f:29:1e:
                    b0:81:95:ef:3a:39:72:69:a2:12:57:79:c2:21:24:
                    74:3a:ab:12:13:d4:60:fa:00:bb:d5:20:8c:f6:0a:
                    0b:5d:14:ab:08:54:8f:0b:c0:e4:94:37:9d:52:85:
                    8d:58:06:d1:2c:4a:56:dc:17:0b:17:da:32:bb:55:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:F4:97:99:51:EA:4C:32:88:1C:5F:33:A5:E8:97:9C:3F:FC:81
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:16:4c:50:10:f0:1a:5f:f7:fa:d8:02:b4:92:05:26:91:73:
         cb:8c:fe:1f:f7:38:6c:10:11:7e:ef:50:cd:82:59:d7:9c:d4:
         2b:f8:9c:b9:39:d1:a9:bf:7e:44:ce:1a:96:8c:ab:c2:6d:24:
         f5:bb:97:33:35:f7:67:6f:23:9e:5c:76:ea:8f:e0:4b:00:b7:
         b3:7d:bf:0e:1d:51:20:57:83:8d:55:3d:06:17:c1:2b:3b:ee:
         60:fb:18:4c:c9:15:70:a0:41:1e:7c:df:11:d4:4b:26:44:84:
         36:5a:e5:a3:e0:6d:05:5e:e9:b5:4d:eb:77:65:d8:36:45:34:
         8a:43:4e:8e:0b:c4:a4:8e:ee:a1:06:6a:c6:b5:da:d1:6c:73:
         e0:aa:ed:13:c6:f0:09:7a:38:ca:b2:98:51:9a:ae:1f:bf:1f:
         e2:bc:de:41:e3:57:7a:12:12:8b:fa:d3:a6:f5:ef:1a:58:4a:
         c1:87:cd:cc:28:b2:01:f8:d7:60:af:07:40:dd:4a:66:b7:e2:
         93:56:0f:97:95:68:18:c3:d2:dc:c0:86:4c:29:5d:77:12:02:
         f9:87:2f:18:f1:e5:aa:9c:22:e6:de:0a:c6:4b:ee:04:66:68:
         33:b1:78:56:46:ee:2c:7d:6c:50:ea:c5:12:cd:90:7c:27:53:
         d9:a3:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----