Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File:                     bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier:          CUF5Ru3BlbfxjG+azrduXn3xt1xMs1/K7LUS3LdrTNQ=
Subject key identifier:   01:A9:B9:AC:9B:AD:DA:65:A2:BE:84:18:49:E9:A6:6A:C3:D1:06:5C
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer:       /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial:       01962F066D1B870EEFE3D93F8A6EFD32CAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number:          0956
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
                          2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: v3A6vbgOuxPpLvtaIs4O5qg5xk/R7tV399RelH53H6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:1b:87:0e:ef:e3:d9:3f:8a:6e:fd:32:ca:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=01a9b9ac9badda65a2be841849e9a66ac3d1065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:36:a1:45:30:50:92:4b:3d:8e:a9:b4:5e:
                    5a:ca:a0:20:ce:9c:fb:25:58:df:98:20:00:60:f2:
                    69:c9:15:1e:60:fe:de:40:9b:7c:02:31:23:0e:33:
                    9e:e3:89:01:4f:21:f9:9a:86:b2:7a:c6:9a:c4:84:
                    cf:ce:7c:f9:b3:3d:84:f7:72:2d:89:a0:46:1a:11:
                    02:64:4d:58:90:d3:4c:a4:d7:53:61:f6:af:98:43:
                    61:a4:1b:25:b7:dd:fa:09:1d:e7:e7:8f:1b:27:bc:
                    58:b9:1a:ea:22:c0:8f:a0:b4:5e:9a:6a:13:72:8a:
                    96:c4:01:6b:2e:77:48:64:be:1a:99:91:01:40:58:
                    00:2c:a7:02:b7:41:72:ff:8a:18:8d:b7:59:19:55:
                    75:6f:a8:15:77:04:02:f7:aa:34:ec:75:e9:f0:00:
                    05:03:65:ca:ce:6e:17:cb:d8:0d:62:9b:b0:ba:a0:
                    0d:68:6b:5b:b3:f5:b0:4a:75:7c:37:0a:5b:13:1e:
                    01:9f:06:96:77:34:08:fc:46:6e:76:71:86:ad:9b:
                    2e:3f:75:84:b9:65:f6:a8:17:a0:07:62:94:9d:c3:
                    0c:3a:ee:e5:6e:5c:2d:e1:4a:f2:14:69:0e:84:d7:
                    bf:66:7d:06:7f:35:97:a0:0e:94:1e:45:79:da:d4:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:B9:AC:9B:AD:DA:65:A2:BE:84:18:49:E9:A6:6A:C3:D1:06:5C
            X509v3 Authority Key Identifier:
                keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:91:f0:1b:63:e4:f0:1b:ce:0a:75:71:9e:2f:67:db:ce:
         dd:7d:53:c4:f6:31:b6:02:f4:aa:ca:dc:a3:77:39:e7:12:62:
         44:8d:a3:33:18:ed:2c:2e:1a:33:5f:bf:b5:35:70:6b:92:ac:
         3e:f7:79:bc:ce:53:51:ea:d9:8a:a0:1c:3d:eb:72:fc:11:f8:
         f7:96:fd:0c:3e:06:12:20:b1:c2:c0:bd:ce:da:ec:ef:80:b9:
         b1:0b:9f:95:1b:fc:fe:b2:8c:50:db:9a:7f:60:0b:6b:ea:56:
         7d:14:29:f3:37:76:0f:d5:c4:f1:f8:cc:ca:8b:0a:85:82:f6:
         80:69:eb:3a:ff:e6:e3:8f:40:75:6a:75:b0:fd:34:b5:bc:7c:
         d4:db:7b:47:43:14:09:9a:cf:0b:0a:24:39:39:1b:f4:9d:4b:
         22:f0:3d:cd:55:a2:3c:5f:dd:2f:93:7c:b4:18:26:68:7e:5d:
         53:55:80:f1:26:21:03:b0:1b:68:36:d8:63:2a:d3:a6:9a:fa:
         af:fc:76:b6:7a:3c:e2:d1:f0:f9:8e:74:e8:66:e0:25:d7:6f:
         a2:8f:b4:57:22:0d:00:9c:19:0e:b0:2b:f5:90:7e:54:0e:64:
         6f:e4:cc:24:91:0f:81:c9:60:a3:b8:db:11:37:27:0e:27:51:
         e8:a6:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----