Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b304f2-c9ca-47f2-978f-15f82b4e7b5e/1/sbE6oLQb2YE0LDYh09LbH8VbeV8.mft
File:                     sbE6oLQb2YE0LDYh09LbH8VbeV8.mft (raw, json)
Hash identifier:          92W/xr1yDfyuTPQkf9tTlaKY7OL4xm/KiVvh8UofX0k=
Subject key identifier:   54:8F:2A:28:BB:F7:B2:89:23:54:E0:B4:52:FD:DA:C6:CD:B5:E3:A9
Authority key identifier: B1:B1:3A:A0:B4:1B:D9:81:34:2C:36:21:D3:D2:DB:1F:C5:5B:79:5F
Certificate issuer:       /CN=b1b13aa0b41bd981342c3621d3d2db1fc55b795f
Certificate serial:       019546DA0685C9BA7F989E90374E0F5C52EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbE6oLQb2YE0LDYh09LbH8VbeV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b304f2-c9ca-47f2-978f-15f82b4e7b5e/1/sbE6oLQb2YE0LDYh09LbH8VbeV8.mft
Manifest number:          07C2
Signing time:             Thu 27 Feb 2025 10:00:48 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:48 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:48 +0000
Files and hashes:         1: sbE6oLQb2YE0LDYh09LbH8VbeV8.crl (hash: II1SolvERmKrQ+mc9ZtHPJqjZOATwhQOqQhRrMFlIoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:06:85:c9:ba:7f:98:9e:90:37:4e:0f:5c:52:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b13aa0b41bd981342c3621d3d2db1fc55b795f
        Validity
            Not Before: Feb 27 10:00:48 2025 GMT
            Not After : Feb 28 10:00:48 2025 GMT
        Subject: CN=548f2a28bbf7b2892354e0b452fddac6cdb5e3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:8e:10:07:e9:6c:db:c4:e2:16:a0:06:a8:
                    c5:4c:a5:66:64:9c:2c:e3:50:07:c1:02:fa:f6:10:
                    93:e3:9e:6a:be:ee:b6:73:c5:ae:b4:59:a3:5b:8f:
                    8e:0e:47:f6:99:98:7e:22:96:93:cf:b9:b1:c2:07:
                    39:e0:8c:fb:53:37:73:f5:eb:f9:e9:dd:6e:c9:45:
                    8b:89:2a:9c:4d:8b:1d:22:dc:86:fb:73:ca:c5:f6:
                    25:01:e5:15:60:af:25:04:f5:15:fd:42:42:ba:fd:
                    7c:73:df:12:03:5b:c0:30:a7:f4:46:d8:9b:ef:01:
                    51:94:1b:ca:70:e2:eb:20:c0:92:a6:9f:27:6b:a8:
                    f5:47:7f:69:ef:c7:52:e9:fe:98:3a:e7:49:ea:3b:
                    5f:95:7f:a4:fe:70:38:00:0c:d0:11:2f:9b:71:fc:
                    1b:1c:d9:2b:ec:c4:ad:a8:5d:c1:f4:15:6b:b2:87:
                    a3:cb:10:eb:e2:de:7a:a7:cf:17:cb:b9:72:56:f9:
                    cf:c1:6e:7b:39:49:ae:4d:6c:93:25:c8:6a:b4:78:
                    a4:50:19:8b:44:e4:1b:b3:27:30:0e:24:79:d3:33:
                    b5:a5:25:82:6c:6b:32:e4:32:df:63:9b:e8:e2:b9:
                    80:05:7e:19:c1:11:ca:c5:8a:9c:1a:c3:ac:12:72:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:2A:28:BB:F7:B2:89:23:54:E0:B4:52:FD:DA:C6:CD:B5:E3:A9
            X509v3 Authority Key Identifier:
                keyid:B1:B1:3A:A0:B4:1B:D9:81:34:2C:36:21:D3:D2:DB:1F:C5:5B:79:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbE6oLQb2YE0LDYh09LbH8VbeV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b304f2-c9ca-47f2-978f-15f82b4e7b5e/1/sbE6oLQb2YE0LDYh09LbH8VbeV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b304f2-c9ca-47f2-978f-15f82b4e7b5e/1/sbE6oLQb2YE0LDYh09LbH8VbeV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:51:75:eb:5a:e4:c0:ee:66:d5:4e:f7:b0:f4:a3:5c:0b:00:
         bb:fc:d0:66:d1:11:2d:5e:57:82:4b:ca:19:0e:5a:00:ed:aa:
         0a:bf:a6:96:12:c5:c0:50:f2:fb:da:02:84:8a:fe:ec:27:4d:
         21:be:4e:a0:5e:d4:cf:76:a8:c0:dc:da:b3:be:dd:fa:18:dc:
         64:e2:43:2c:c5:5f:3f:c2:8b:9e:d3:a3:60:3d:6e:51:70:ae:
         59:1b:36:b1:ad:27:26:91:fd:a5:d1:71:87:60:16:9a:c3:ce:
         72:73:f8:65:80:67:dc:8f:61:1c:f4:10:43:cf:bd:9e:ad:37:
         ca:fa:fb:b4:90:a6:f0:27:8e:07:9a:2b:cb:01:f0:cb:71:3e:
         e5:25:b4:4e:34:06:95:7f:19:ed:16:16:b5:d2:08:98:f8:9f:
         b0:75:54:9b:ee:a3:ef:ea:c8:bf:b4:be:a3:c5:0a:f6:81:bf:
         81:f1:49:b4:1a:ec:d0:e9:97:b2:43:e6:10:44:5d:bf:15:33:
         b2:3b:b7:7f:89:6f:79:79:fd:f5:73:30:0e:13:77:38:b9:ae:
         e4:b8:7d:84:6b:27:4b:19:33:c9:1d:b1:93:8d:21:c9:a2:08:
         01:80:ee:88:25:1b:1c:a9:7c:1c:6c:34:2f:de:5c:35:51:ec:
         34:d2:41:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVG2gaFybp/mJ6QN04PXFLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjEzYWEwYjQxYmQ5ODEzNDJjMzYyMWQzZDJkYjFmYzU1
Yjc5NWYwHhcNMjUwMjI3MTAwMDQ4WhcNMjUwMjI4MTAwMDQ4WjAzMTEwLwYDVQQD
Eyg1NDhmMmEyOGJiZjdiMjg5MjM1NGUwYjQ1MmZkZGFjNmNkYjVlM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOqOEAfpbNvE4hagBqjFTKVmZJws
41AHwQL69hCT455qvu62c8WutFmjW4+ODkf2mZh+IpaTz7mxwgc54Iz7Uzdz9ev5
6d1uyUWLiSqcTYsdItyG+3PKxfYlAeUVYK8lBPUV/UJCuv18c98SA1vAMKf0Rtib
7wFRlBvKcOLrIMCSpp8na6j1R39p78dS6f6YOudJ6jtflX+k/nA4AAzQES+bcfwb
HNkr7MStqF3B9BVrsoejyxDr4t56p88Xy7lyVvnPwW57OUmuTWyTJchqtHikUBmL
ROQbsycwDiR50zO1pSWCbGsy5DLfY5vo4rmABX4ZwRHKxYqcGsOsEnKlpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSPKii797KJI1TgtFL92sbNteOpMB8GA1UdIwQY
MBaAFLGxOqC0G9mBNCw2IdPS2x/FW3lfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JFNm9MUWIyWUUwTERZaDA5TGJIOFZiZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMzA0ZjItYzljYS00N2YyLTk3OGYt
MTVmODJiNGU3YjVlLzEvc2JFNm9MUWIyWUUwTERZaDA5TGJIOFZiZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMzA0ZjItYzljYS00N2YyLTk3OGYtMTVmODJiNGU3YjVl
LzEvc2JFNm9MUWIyWUUwTERZaDA5TGJIOFZiZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1F161rk
wO5m1U73sPSjXAsAu/zQZtERLV5XgkvKGQ5aAO2qCr+mlhLFwFDy+9oChIr+7CdN
Ib5OoF7Uz3aowNzas77d+hjcZOJDLMVfP8KLntOjYD1uUXCuWRs2sa0nJpH9pdFx
h2AWmsPOcnP4ZYBn3I9hHPQQQ8+9nq03yvr7tJCm8CeOB5orywHwy3E+5SW0TjQG
lX8Z7RYWtdIImPifsHVUm+6j7+rIv7S+o8UK9oG/gfFJtBrs0OmXskPmEERdvxUz
sju3f4lveXn99XMwDhN3OLmu5Lh9hGsnSxkzyR2xk40hyaIIAYDuiCUbHKl8HGw0
L95cNVHsNNJBHg==
-----END CERTIFICATE-----