Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          giNZ9yPiwpZBgsg6M5s803Bm1VVQU7g6bCrbT1C899s=
Subject key identifier:   5F:5C:54:72:C0:F3:BC:6F:31:93:2A:1A:5E:62:A9:73:0D:EF:93:81
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       01962DF45A55B532CF47EFB79AB4CE9B7342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: soeoZv7RhMOBKIlAgNOkiIF6JI/9ni7FbarxsPGW9wA=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5a:55:b5:32:cf:47:ef:b7:9a:b4:ce:9b:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=5f5c5472c0f3bc6f31932a1a5e62a9730def9381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:fd:83:34:ae:24:19:8e:b3:26:a4:d9:7b:
                    cf:62:fd:81:c6:e9:98:4f:ef:49:36:e9:6f:60:3d:
                    0f:49:96:26:0e:e3:3c:dd:49:c6:bb:42:4f:c4:67:
                    7e:b8:50:f7:fb:59:48:be:6f:dc:ba:c2:47:fa:90:
                    ff:70:48:e2:11:56:22:1b:3f:d7:fd:64:d9:9f:a5:
                    70:19:b3:bd:a6:a7:41:b0:bb:73:b0:9e:17:64:40:
                    d8:e8:4c:ac:7f:57:9f:59:f4:1a:1e:5d:0b:43:36:
                    d1:81:8b:24:80:2c:fb:ce:2b:5f:e9:bd:f1:bc:67:
                    cf:8e:30:98:f0:3f:c1:06:ec:cf:f0:6c:f9:8c:95:
                    01:5a:71:cd:77:9a:bf:9a:db:47:35:02:dc:67:f7:
                    df:f8:98:7c:cb:f8:86:72:10:82:79:e9:52:94:4d:
                    ad:1c:8c:0b:11:73:64:7a:92:bf:f2:69:55:58:64:
                    f0:34:f3:71:b1:ea:9b:c4:5e:15:ee:ed:c2:ba:2b:
                    97:59:c0:b4:7f:cf:6b:26:20:d3:87:16:b4:26:8e:
                    53:50:29:94:20:d9:92:04:3e:dd:42:6f:be:97:ca:
                    59:cb:0d:f2:62:00:68:61:a0:61:ce:90:50:2b:df:
                    74:5d:dc:f1:ba:e6:fb:0c:22:b7:7f:01:e9:06:62:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:54:72:C0:F3:BC:6F:31:93:2A:1A:5E:62:A9:73:0D:EF:93:81
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:70:5d:01:d9:26:f1:a8:67:aa:84:1b:f0:ff:de:da:22:
         d2:ee:45:8f:84:d7:9f:1a:70:c0:53:09:c1:b1:6f:ca:f2:4b:
         36:f1:21:03:c4:fb:8e:ac:4e:93:72:8f:8d:f1:0a:72:58:60:
         dd:aa:3a:50:1d:05:7f:47:a1:0d:2f:46:26:f3:69:60:15:4f:
         69:55:62:a5:4a:c2:50:58:1a:99:df:32:ca:06:96:ed:54:29:
         26:d1:48:9a:c1:2d:53:17:fb:00:11:69:0c:96:dc:6a:ec:59:
         34:be:9b:d9:98:a8:c8:53:60:ce:d3:21:cb:7d:85:07:3a:39:
         ec:1e:a1:8a:8a:88:5b:03:ad:23:6f:ba:d2:a6:9d:23:22:c5:
         a3:0c:5e:bc:6b:15:2a:c7:fa:7e:24:08:be:f4:c5:fb:66:58:
         82:f3:62:49:d5:32:47:44:e1:55:81:6c:3f:ca:ee:70:bd:11:
         68:6e:b8:ad:d3:98:6b:9c:7d:cd:19:58:f8:05:d6:55:b8:1b:
         28:25:8b:4d:03:e6:35:7a:84:96:cf:d6:ac:96:67:9c:bc:2a:
         f4:85:28:7f:ab:05:54:9b:c2:81:db:0d:77:b9:4f:f2:35:6f:
         7c:1d:48:5a:71:97:50:5c:31:13:f5:63:68:55:d0:74:3e:12:
         a5:e7:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----