Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          tQarEKPtpBT3sle48i7TN0a91TZwLDeuWlH6yOrkg0M=
Subject key identifier:   11:5D:00:EF:B1:E2:A7:98:73:5C:8A:0B:B6:83:59:E4:30:A3:B9:CF
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       01962FAB26D1C0D1718B0246BA32C80FFC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          1171
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
                          2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
                          3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: G0Mz/hhO8c3LJABS4Hs0UBoVuyc93YYVYB0xoGDFVNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:d1:c0:d1:71:8b:02:46:ba:32:c8:0f:fc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=115d00efb1e2a798735c8a0bb68359e430a3b9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:05:87:27:c8:85:3f:bb:8e:bc:71:49:bb:
                    1e:5e:80:81:0a:fe:69:63:60:2e:70:7a:76:f0:32:
                    b4:8b:c6:57:35:f0:0f:5d:97:94:c9:f7:01:30:41:
                    00:56:de:97:a8:7d:0c:4f:e2:db:06:61:ee:fd:27:
                    3e:d2:f2:10:36:2a:6b:6e:07:31:3b:e6:55:14:dd:
                    ae:7d:d5:45:af:63:d3:c6:32:4e:9a:44:87:a0:cf:
                    a7:82:f0:c6:0c:86:a8:8d:e1:91:04:96:36:d1:73:
                    4c:0d:1b:2f:36:74:3b:d2:11:83:6c:e4:1c:a0:31:
                    82:54:97:90:32:df:08:5f:2a:f8:20:38:2c:1c:10:
                    0e:d7:8e:ac:49:62:64:44:74:f5:29:c4:68:5c:bc:
                    79:fa:d2:80:eb:2e:f4:8d:77:48:9b:01:d5:7b:62:
                    c4:35:0e:41:1e:6e:a1:0a:fa:8f:5b:34:55:9b:30:
                    35:64:59:7f:98:c5:03:42:50:5e:f5:b5:ae:36:96:
                    ae:9c:92:16:7f:e1:0b:b8:83:b7:a2:39:05:7c:40:
                    6e:be:c5:63:dc:1e:cd:0d:bc:e2:9a:0e:bf:fd:26:
                    de:c2:7c:ba:28:3e:50:45:cd:dc:98:b6:99:47:a1:
                    91:e6:1c:15:fa:b9:5d:fd:e9:24:36:64:13:a4:eb:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:00:EF:B1:E2:A7:98:73:5C:8A:0B:B6:83:59:E4:30:A3:B9:CF
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:d7:f7:c1:db:e0:60:6f:93:3b:c0:03:c0:71:f3:a9:89:
         09:0f:3a:ae:f2:c3:7c:da:6e:2c:d5:9c:23:f4:91:3c:50:fb:
         09:95:18:b2:f0:e6:e2:c5:f4:e6:0c:86:86:97:2c:91:b9:8c:
         89:0d:74:92:f1:9c:fe:d5:da:da:da:c8:62:37:c1:11:73:3b:
         40:ed:b4:8d:22:37:9f:fb:cb:51:36:79:36:59:7e:08:86:8a:
         29:56:6f:52:bf:d7:c5:af:c1:b0:fe:ac:a1:c9:27:31:b2:6b:
         81:7c:2a:b7:48:48:c1:23:d2:97:b7:67:67:83:99:98:08:11:
         aa:c5:ef:27:df:f3:e3:63:4f:f4:9e:2d:5a:69:88:43:75:d4:
         42:02:a9:9b:9d:cb:a1:8e:54:d1:51:e5:c3:25:c7:11:4b:30:
         bd:f6:82:41:25:13:30:b6:6a:cc:87:0a:37:66:22:cc:de:da:
         e2:35:e2:23:7b:0f:f8:23:58:fc:99:ef:9f:f9:a7:49:26:02:
         66:45:1e:7f:c7:fd:c4:94:88:43:f2:b6:d5:6d:9e:f9:e8:6c:
         1c:96:37:a1:3a:09:12:24:43:1d:58:b1:6c:63:62:1c:dc:82:
         64:05:36:4e:6e:ab:1a:e4:91:b2:ec:93:9f:b2:8f:1d:c0:99:
         2a:13:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----