Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          yHOdIa++DpPQqBQ3EVgHhrH8lHBrj66jWeaCfA2/Oho=
Subject key identifier:   48:A3:28:31:3A:0A:9B:0E:AB:18:0A:DB:7B:D5:37:34:16:65:7A:FB
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       01962F06633BD958495FC1EFCCEFF62764C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=)
                          2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: nhPIWNHzRkgcz7+v0CIYLWJGyBZMIw+7HriLtw5B9tc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:3b:d9:58:49:5f:c1:ef:cc:ef:f6:27:64:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=48a328313a0a9b0eab180adb7bd5373416657afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:a2:f5:24:75:d5:f5:6c:9b:29:b9:26:52:
                    52:75:93:fe:97:5d:2e:81:1d:2b:06:c1:a8:e5:7b:
                    81:9e:c7:69:23:75:2e:6b:5e:17:1e:db:ae:b6:19:
                    34:ba:88:27:f6:a2:43:9f:f6:ae:0d:c0:4b:c8:85:
                    58:c6:75:c8:47:d0:8d:3c:a9:ac:c3:2e:b4:ab:cc:
                    18:88:54:2d:ec:ed:8b:d8:43:a8:5d:f9:e1:ad:f8:
                    d2:92:44:22:d5:53:82:7d:49:c0:fe:a5:95:15:f2:
                    99:c8:5a:ec:5e:3a:68:ef:24:25:92:cb:7d:29:4e:
                    a8:2b:27:2b:25:07:64:ca:96:4a:c4:0d:fa:8a:4d:
                    3e:07:9a:10:67:d1:c7:fb:9a:ed:2a:75:ba:a1:e3:
                    ef:ac:23:e1:b6:72:5b:7a:e2:1e:5f:af:49:1c:ec:
                    54:13:11:1a:ac:02:18:ad:8b:4e:a8:f5:0e:e0:05:
                    0d:df:f6:c7:95:9c:04:6a:85:a5:f3:8e:5b:8e:e6:
                    18:80:24:bf:b0:f6:0b:af:ec:5b:21:9e:ae:d1:79:
                    b8:12:b5:40:59:56:c7:93:cc:da:eb:ca:6b:3b:13:
                    dd:4e:61:32:4a:45:df:52:73:db:5f:70:87:8a:3d:
                    03:cb:ce:12:5d:31:f3:66:8e:b8:ce:81:7e:51:af:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:28:31:3A:0A:9B:0E:AB:18:0A:DB:7B:D5:37:34:16:65:7A:FB
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:24:df:e9:91:bb:3b:c9:02:b8:e3:2c:93:fd:55:f3:94:
         2c:ab:2c:ca:d0:9c:bf:6f:5e:02:3c:f3:ee:6b:a8:8c:3d:67:
         bc:1e:0d:9e:10:91:74:19:d0:3d:6b:47:d7:35:cf:6d:b6:35:
         1d:03:6b:f6:34:ee:75:e0:f3:17:29:f1:a0:b5:20:5e:a4:e2:
         de:c7:4e:09:72:42:fe:02:b7:ad:5c:2c:36:35:84:28:70:07:
         0f:1f:6d:2f:58:95:b4:8a:c9:4b:2d:cb:1b:3e:28:d4:15:12:
         4b:5b:6b:35:63:97:86:0d:12:ce:c2:ea:c7:22:9b:47:f0:ad:
         fe:ce:93:29:57:17:d6:b5:df:d3:34:9e:e7:d3:e1:c5:b7:2c:
         4a:de:6b:08:b9:27:56:eb:71:6a:d4:19:69:1d:1b:66:0e:63:
         73:4f:b5:84:b0:b7:b2:1d:52:3b:9c:0c:57:01:91:89:b6:71:
         c2:c0:c7:f4:15:2e:e4:ef:93:94:cb:42:e0:f5:9b:f2:a5:e3:
         97:7c:23:79:b2:63:c2:27:dd:36:1e:0f:75:61:eb:bf:d1:5b:
         69:d7:72:a5:30:fe:81:95:f8:be:e4:fd:d5:d3:a1:39:48:da:
         e0:c5:53:04:e8:66:77:11:8d:dc:40:53:3c:be:5b:4d:2f:e0:
         37:93:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----