Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File:                     BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier:          rjndcJXUeUsu0yO8fV9P2cYGwpi457zUT5Sgu2KNlSI=
Subject key identifier:   1B:2B:C2:CD:42:42:74:2A:A4:CC:02:D1:1E:9E:99:6D:4D:C0:53:0D
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer:       /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial:       01962F74EC1840C007A08A68D21E1E32DD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number:          1480
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: o8fnGfoTMBD1pA5um1vrtD47IhRcjWgrqFlq6SUn7Nw=)
                          2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:18:40:c0:07:a0:8a:68:d2:1e:1e:32:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=1b2bc2cd4242742aa4cc02d11e9e996d4dc0530d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:9e:68:c3:cd:f5:e6:2b:4d:c1:bf:2d:92:
                    70:fc:d2:73:ff:87:85:48:8f:35:da:2a:b8:d2:3a:
                    16:23:0c:48:8b:11:b9:ed:d4:89:6d:9b:47:72:3d:
                    95:ef:7d:70:e4:9a:95:fc:68:f0:f4:96:2f:7f:aa:
                    79:01:11:74:15:ce:39:da:d5:58:8d:d0:5b:5d:ad:
                    1b:86:92:4f:4f:f6:95:9c:86:10:41:e3:03:40:2d:
                    2c:eb:ff:fa:df:52:52:3a:e6:32:73:ab:d2:b0:8a:
                    8e:71:24:f0:4b:b6:08:64:32:d1:b9:8c:77:29:45:
                    42:78:9b:08:ae:3f:bd:67:b5:8e:20:6e:5c:bf:f8:
                    cf:58:fb:41:4d:c9:1c:63:15:e3:bc:3d:b2:11:e5:
                    2f:bb:63:17:29:04:71:90:91:23:12:c0:d6:cf:ce:
                    d8:ea:4c:63:f2:e0:4f:31:76:d4:a4:7e:6d:b0:cd:
                    f1:16:17:c7:9e:81:86:c6:79:f4:9a:56:07:09:e0:
                    9a:d7:74:6d:cc:25:7b:f4:d7:a7:97:85:fa:31:85:
                    3e:8c:10:47:4f:99:e0:a0:31:bc:c0:88:75:0f:29:
                    2b:54:f7:c5:ce:70:70:9e:b8:8c:d4:d4:23:5f:d5:
                    ff:0e:cf:7a:b7:b7:f1:9e:a3:e9:95:e6:10:7e:ed:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:C2:CD:42:42:74:2A:A4:CC:02:D1:1E:9E:99:6D:4D:C0:53:0D
            X509v3 Authority Key Identifier:
                keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:64:d3:ed:ad:86:0d:d3:4f:7f:c1:83:3c:34:f4:1f:e5:
         24:01:82:69:2d:05:5d:97:41:63:53:e9:cd:11:bc:15:63:51:
         92:2d:61:73:72:ca:5b:5e:40:76:f1:69:32:7a:77:e2:b5:d1:
         6e:fc:8a:ba:e4:9f:99:96:be:7a:be:2f:e8:89:4c:8a:3c:3f:
         a4:67:ca:81:a2:7b:f6:31:90:3d:f5:09:93:af:0b:5c:aa:c1:
         66:be:4f:22:2f:23:d1:4e:34:98:7e:b4:dc:c4:50:e6:e3:ae:
         0d:3b:ad:d9:2a:b2:00:e0:28:57:66:12:15:33:b4:51:90:b1:
         b5:c5:20:4b:f9:b3:c7:a2:72:93:a9:21:31:1d:45:6f:e0:58:
         0b:88:66:de:ab:de:f7:53:7d:c0:ea:fc:05:92:d5:0d:8f:45:
         ce:48:3e:83:75:0b:bf:9d:94:96:b8:77:81:97:92:64:1c:79:
         37:76:e0:d3:19:bf:44:70:9d:4b:a8:4b:2e:6c:23:90:22:2c:
         09:9f:19:2c:2b:94:c7:f9:1a:e5:e7:2f:77:d5:7c:1d:53:40:
         8c:81:77:73:75:fa:40:8d:b0:e2:fc:36:a1:19:d9:0f:c2:0a:
         51:11:33:ff:10:06:53:9a:82:16:c8:b1:ff:c1:a1:b8:f8:b0:
         03:26:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----