Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          NkkMrXtQpYUwMx/yN8jxns7uThSrrTzmzo2NUd0DYyQ=
Subject key identifier:   77:AA:3A:2B:47:0A:93:30:B2:8A:D9:E1:77:A4:89:BE:B4:69:14:B2
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       01962E2AD206D845BDB413D31A36B58F1008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          0F94
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (hash: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=)
                          2: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: 0N02RVD/ko455b5MmLAbx6zLT0jhOAdT2RjeGH3AfE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:06:d8:45:bd:b4:13:d3:1a:36:b5:8f:10:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=77aa3a2b470a9330b28ad9e177a489beb46914b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:b7:85:00:e5:5c:cf:73:b5:85:69:0c:ab:
                    62:9a:f5:67:15:1c:28:a0:04:78:23:69:44:71:29:
                    07:d8:9e:fa:97:98:42:36:b8:c9:e3:33:61:a9:25:
                    30:69:5d:38:2d:a8:ca:24:39:6d:5b:e5:8a:2f:68:
                    8e:72:f1:b8:7b:47:4f:a0:94:8b:fd:0d:69:c8:ea:
                    a4:7a:b1:77:d7:b8:06:a4:15:74:60:bd:f2:56:78:
                    58:59:31:75:2c:f7:04:06:cb:61:07:8a:0e:c2:ba:
                    92:f9:93:74:b7:c5:2a:8c:dc:32:2e:34:cf:c6:3d:
                    ec:6e:93:e7:18:e5:67:8c:de:b6:a0:b7:69:52:0d:
                    97:26:92:2e:35:6d:7a:86:44:93:9c:e8:b7:48:e7:
                    ff:b6:54:ab:6d:80:ea:87:04:0e:c3:91:a7:ad:d9:
                    b5:4d:17:64:e7:c5:71:48:4c:b7:ac:d9:17:a3:8e:
                    27:6d:b2:c0:4f:ac:0e:8e:17:42:67:11:b8:35:13:
                    ad:bd:7b:c0:d6:76:6f:bf:ca:53:d2:f1:74:fd:25:
                    64:28:ee:a2:c1:ec:ee:47:8f:e6:be:46:7c:e2:e9:
                    5e:88:37:ec:81:cd:d7:4a:09:2d:ef:46:4c:6c:6c:
                    d4:f0:26:82:30:12:0d:bb:20:b0:18:20:97:13:97:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:3A:2B:47:0A:93:30:B2:8A:D9:E1:77:A4:89:BE:B4:69:14:B2
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:1c:e8:cb:0e:55:d0:b8:33:f6:83:11:a7:09:54:52:f6:
         bd:24:2d:28:dd:d9:78:29:b9:bc:10:34:88:79:ac:66:0e:94:
         ee:90:92:fc:d9:dd:8a:f1:68:bf:e1:5b:dc:b6:42:18:f7:4e:
         2f:1b:90:a0:1f:8f:f6:9b:5d:e5:de:7f:93:2c:e9:5a:67:27:
         5d:21:9f:79:09:79:86:cd:a4:6c:12:9d:11:87:61:f8:64:71:
         66:5d:f5:01:99:7d:18:aa:2d:c1:63:9e:2d:d7:88:b2:d7:49:
         f6:82:5b:92:66:d4:4b:11:05:d0:e9:bb:e8:71:f6:c4:c9:85:
         cb:23:92:5d:60:b7:f1:84:e6:19:39:bf:03:e5:1c:b5:3c:b6:
         78:16:7f:b5:2d:4d:79:83:f9:98:17:1a:c3:86:17:ce:53:30:
         1d:ca:6b:ba:e6:08:06:2e:7f:de:b1:1a:26:f8:ec:36:73:10:
         8e:e6:57:2a:3c:d2:15:ea:75:c1:ea:66:21:dd:5f:b9:b7:c3:
         03:ac:77:18:b7:61:bb:a2:8d:98:29:a8:8a:e1:76:3b:a3:b1:
         18:bb:41:29:28:18:be:7c:96:41:e8:37:99:cc:7f:ed:47:40:
         bb:9b:47:c7:2b:69:44:b7:f0:85:1b:dd:1c:5d:5b:3a:67:fd:
         00:91:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----