Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          5H76C2MDnJ9aG4q4+SGGDx3SnBBDNjTAjoYLA8Igtd4=
Subject key identifier:   91:8F:2E:62:A5:9F:B0:E9:EC:15:48:C4:01:05:77:1E:EE:B6:CC:C0
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       01962F06640EAA1513B12D4F36785D26D9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0764
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=)
                          2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: Ikdj2Wat7cNAddrU8EEIXIo0qE12r2mxwTWFHiTUtXA=)
                          3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=)
                          4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:0e:aa:15:13:b1:2d:4f:36:78:5d:26:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=918f2e62a59fb0e9ec1548c40105771eeeb6ccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:34:4b:cf:e2:ff:fe:77:11:ca:d3:2f:05:
                    1d:f6:c0:f5:23:e2:94:cf:3b:f8:e0:34:49:c8:84:
                    ed:77:9a:6f:66:e3:e0:9b:99:b2:a0:97:c9:cf:a6:
                    c2:eb:70:d2:12:24:23:3f:04:ef:fe:58:78:3b:2b:
                    5d:b5:33:5e:b1:95:03:7c:2d:b6:7c:c0:9e:d6:08:
                    09:91:5c:85:ef:75:06:d2:28:85:4b:8b:1c:91:d2:
                    ae:b5:83:0e:f9:0e:f9:ae:32:4b:8e:f1:f9:e4:4a:
                    c4:47:5b:41:f3:18:a8:3e:17:e2:dc:7a:18:51:f8:
                    36:e3:f9:fe:19:f4:7b:6c:de:f9:11:2f:ef:64:a0:
                    6d:ee:50:49:48:43:62:65:98:36:95:8f:9a:4f:91:
                    73:06:34:a3:3d:78:32:aa:f9:bf:08:3f:ac:40:c2:
                    ac:a3:0e:21:e3:00:e2:c0:c9:07:55:be:29:f4:e1:
                    3a:a8:80:ca:24:81:70:ff:a3:56:6b:56:9e:c4:8b:
                    57:ff:57:e5:57:02:79:48:e6:82:2c:9f:19:8a:78:
                    08:44:85:e8:b5:ca:65:d0:2b:ca:ea:f4:5c:94:cb:
                    c9:ab:ee:43:a6:27:20:db:8d:af:0e:a3:7e:a1:96:
                    39:c0:91:f1:14:0f:7e:f5:3b:d5:a2:d2:b7:1b:ca:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:2E:62:A5:9F:B0:E9:EC:15:48:C4:01:05:77:1E:EE:B6:CC:C0
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:6b:1d:26:3a:c8:b0:5b:3a:b4:53:24:48:75:c2:62:dd:
         5b:3a:12:1b:8e:84:d1:1a:7b:82:21:38:99:41:69:4f:a2:53:
         b1:5d:0c:a4:f0:39:4d:6d:30:66:47:6a:da:2c:4c:d4:28:65:
         68:65:b9:66:9c:8c:c0:7a:38:61:2e:32:72:47:57:c0:64:83:
         0a:fd:ed:fc:3b:e2:c8:03:c7:da:f9:28:ed:68:5b:f7:ef:00:
         b1:a1:5d:5b:7b:b2:1b:7a:33:ba:a8:b4:7d:61:86:d5:40:80:
         88:21:61:f9:73:24:45:0c:2b:ef:2b:7f:f8:b6:a0:9d:bc:66:
         dd:96:8d:c1:ee:db:4e:46:93:3a:a6:72:be:7f:2b:68:f3:19:
         16:8e:45:60:c3:00:16:65:54:e1:53:79:a2:42:40:a3:d5:6d:
         a0:b8:80:4b:d0:26:98:b7:9b:15:d5:da:90:73:39:29:95:3b:
         13:9f:82:38:ff:a5:95:8e:12:23:5f:6a:a8:2d:26:f4:e9:01:
         98:5d:49:cd:0f:11:0e:8d:7d:ca:f2:7d:a3:f5:96:27:d9:68:
         d9:b4:d4:c7:89:1e:1b:34:41:b8:61:50:4c:34:03:98:ae:85:
         ea:2e:63:41:dd:38:5e:0b:cb:83:ae:c3:05:d1:dd:db:79:47:
         04:1e:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----