Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File:                     B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier:          SjKVSjg592lrMOBoVwQg64ujRg4yK9p+hcWNPLpyIGw=
Subject key identifier:   5D:DE:17:49:58:01:A9:70:95:5C:45:6E:BD:A6:4C:76:7E:F6:67:64
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer:       /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial:       01962E61928FF69D98CC5E9A7A74BF273FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: 7mRNj/00dLxCxAYnbzF6tceON7bYbV0+s0fIR7g245k=)
                          2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
                          3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
                          4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:92:8f:f6:9d:98:cc:5e:9a:7a:74:bf:27:3f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f2a175be20108641c649553213f212511667a5
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=5dde17495801a970955c456ebda64c767ef66764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:8a:02:6d:d1:78:d8:1f:e4:3a:8a:c9:56:
                    a7:b9:47:47:c1:f7:1f:33:91:43:0d:3e:31:b1:8d:
                    19:c4:6d:61:75:9a:2b:70:2a:05:76:01:db:ff:e4:
                    7d:a9:39:18:b4:e7:15:b5:e2:91:5c:97:67:bb:a7:
                    40:80:7e:9f:1f:a0:48:83:27:cc:d3:88:1b:87:d9:
                    9a:3b:b2:a8:c8:81:65:05:f3:d5:67:dd:78:7e:71:
                    a7:e3:c8:97:57:c6:d1:0d:75:d7:8b:b7:8e:23:d9:
                    1b:20:7f:ed:41:84:41:87:0d:f0:c5:75:35:b5:89:
                    3c:06:98:a0:54:00:0f:48:03:66:35:2f:64:b6:51:
                    34:94:82:1c:09:01:e5:08:2d:ec:b5:7f:fb:b1:19:
                    57:79:52:dd:ee:22:f0:48:7a:1c:37:d2:1a:76:cb:
                    7d:c4:41:60:fe:fd:08:de:d0:3b:9c:71:6b:1a:db:
                    34:bc:d8:50:c1:7b:0c:38:cb:77:d6:11:f2:c4:72:
                    e5:84:e5:f8:e0:00:6a:bd:84:41:cd:c6:97:00:f0:
                    20:c0:77:23:cb:74:27:54:2f:08:09:98:0f:1c:49:
                    77:9d:06:cd:9a:7f:8b:85:6d:72:57:9b:b8:05:a9:
                    f4:e8:4d:62:33:5a:a5:71:bc:2f:cc:d6:e8:8c:99:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:17:49:58:01:A9:70:95:5C:45:6E:BD:A6:4C:76:7E:F6:67:64
            X509v3 Authority Key Identifier:
                keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:31:8e:c7:d4:ec:42:0c:36:e0:be:a8:ba:af:6e:ec:5a:
         78:3f:30:55:aa:9c:f8:41:79:ca:b2:59:f1:43:a5:f6:f7:2a:
         3a:3d:76:81:10:e4:c9:c7:e9:fb:d7:c7:75:32:f7:a5:98:5f:
         b3:ea:06:ae:66:7e:b4:fe:d7:19:7e:c3:f3:84:3c:4e:4b:25:
         d6:cd:e8:48:4a:20:39:1e:95:c4:f7:c8:75:9b:e9:1c:58:42:
         cc:a9:3f:76:20:3b:3d:4b:44:8d:08:e6:77:b4:20:32:c0:2d:
         93:2c:ba:d9:18:c8:26:df:25:f9:6d:d2:a0:3d:a0:df:6b:b2:
         5e:3b:a9:79:ad:f8:a0:70:87:f5:cb:c1:14:04:1d:06:69:28:
         0d:f2:e7:08:ff:46:d5:57:6d:32:ff:4a:62:6b:16:f4:39:87:
         c4:eb:3c:3b:08:89:46:88:95:4b:5b:83:0b:ae:4d:d1:20:e3:
         b5:d8:ed:ff:08:03:9d:cc:0d:5e:ad:27:6d:16:d5:d7:e1:6f:
         f0:95:fa:35:83:32:72:88:f0:90:fc:11:b0:d7:4e:4c:fc:13:
         7b:df:6d:43:8b:2f:ff:89:71:88:6a:ee:70:45:c6:6d:70:16:
         70:c3:3b:11:6a:c1:39:4f:89:2f:a0:e2:f7:21:0c:87:39:39:
         94:eb:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----