Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          m5tDhvr+BHyZYyRJvvXwjx61tNolHXc4/X1Z50nTWdQ=
Subject key identifier:   F8:6C:D2:96:4A:04:2B:16:05:E0:06:5E:5B:D9:F6:D5:F3:7E:C3:4C
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       01962F741AE8AB69592DF6A9BF933413C941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          12A8
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
                          2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
                          3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: R31lgLLR1eDl37UUB/sMl8I0nmCEMq2vQ+l/Lesm6Qo=)
                          4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
                          5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:e8:ab:69:59:2d:f6:a9:bf:93:34:13:c9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=f86cd2964a042b1605e0065e5bd9f6d5f37ec34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:9f:be:43:c3:7e:32:bb:b0:d4:cf:37:5b:
                    5a:0f:de:3a:e1:9c:9d:9f:71:43:84:fe:c7:7f:b4:
                    a0:2f:52:de:8d:0d:5c:ee:37:f4:80:43:78:94:f7:
                    b7:df:39:9a:20:33:a6:54:f8:be:85:62:fd:72:f7:
                    fa:e5:5a:59:90:d3:4f:62:65:c3:86:51:93:1a:41:
                    4d:a4:22:fd:21:f0:2f:e6:77:b2:31:98:3e:b6:9c:
                    31:7d:25:ee:89:bd:74:ec:c6:f4:e5:4c:ca:c8:d5:
                    4f:96:b1:52:9e:e4:61:3c:56:c7:39:ad:35:e0:1b:
                    13:d2:72:33:fd:a6:3c:8c:c9:5a:59:32:f7:6c:0e:
                    7f:5b:8f:0f:28:d9:59:23:e9:fe:b9:c2:fa:a3:34:
                    cb:32:1e:fe:04:d1:a2:96:fd:3e:a3:6b:9d:60:97:
                    8a:93:7e:42:23:40:41:9d:3d:ec:3e:9e:31:bd:58:
                    45:d6:22:ed:32:90:76:45:3c:47:d2:ec:e7:5d:15:
                    51:23:14:38:bd:a9:f1:0f:20:60:c1:b8:9d:81:36:
                    45:5b:79:65:ad:e4:64:9c:5c:04:44:b9:a9:ee:2d:
                    87:61:e1:35:31:59:58:21:e0:03:8f:ba:8b:19:cc:
                    3b:08:e6:86:ce:91:91:7d:34:6e:66:75:6f:89:69:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:D2:96:4A:04:2B:16:05:E0:06:5E:5B:D9:F6:D5:F3:7E:C3:4C
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:c3:e4:40:df:16:8f:23:4b:92:16:9a:62:99:2b:87:09:
         ba:ad:ff:11:11:95:2d:0d:96:c0:14:71:77:ac:f6:28:75:c8:
         cd:c6:19:58:5a:cf:18:f1:41:41:40:b7:52:18:5a:00:df:08:
         94:9d:83:73:b5:39:8d:3d:21:a6:1f:9c:2b:79:6d:3c:0b:76:
         70:bd:71:2e:c5:66:66:31:fb:ab:b7:c3:56:f8:d3:88:74:cc:
         a8:ab:cd:b9:27:e3:f0:a0:f3:da:5c:9d:32:6b:ba:98:1f:66:
         99:81:fb:56:35:4c:14:e2:02:79:31:91:44:c5:b3:23:98:73:
         5a:5d:c9:b4:7c:55:77:d3:31:94:4c:db:38:7f:92:87:e3:73:
         09:cd:f8:53:2c:12:1f:23:67:7b:9d:9a:0a:db:53:60:7f:0b:
         f4:a9:74:a1:c9:ac:1b:43:c9:d3:39:57:dc:e0:21:c4:a6:ea:
         f0:d4:05:26:b8:21:34:c1:d8:80:a3:b0:ad:ae:fa:2e:8b:55:
         73:a9:d1:de:ff:93:e9:11:17:fe:29:9f:5e:2d:87:4a:2a:bf:
         75:11:a5:8b:7e:2f:d6:af:1d:95:91:df:f5:9a:18:9a:68:e7:
         83:83:3b:47:96:85:cd:7c:a7:d4:10:63:1f:2d:31:e3:7b:4e:
         47:8e:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----