Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
File:                     F6b6gLLRxD7J6oJOfoOV95KU44o.mft (raw, json)
Hash identifier:          Dx1gdNVqkc5tv50ziSubPUhI3E24ccYumjhco1R8AB0=
Subject key identifier:   67:B3:D8:6D:39:08:0D:98:5F:DB:26:E9:86:52:24:4C:11:9C:F6:2B
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Certificate issuer:       /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial:       01962F06DF39A667E18AA2C82BCD0191559F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: F6b6gLLRxD7J6oJOfoOV95KU44o.crl (hash: M8ggoKlXFcaVSAPPK0hHlXx6FadkcOnmtyyh3hTmI5U=)
                          2: NgR9E--L8OGtLWDYEisSSXDhdo0.roa (hash: 2D+QLTfpb+BXrHtU/zI2nDkh1Piz6nOMwxdV8hz+smg=)
                          3: ouBji2SgP5WP-tAVvBIOpWh6QHU.roa (hash: tjTYINhRmm1QHUqB8THsImRJUSYCerOiGq+34MjJwz0=)
                          4: sf0sGyYsdo6jCF2Onf3P164cdrU.roa (hash: GoOEVs4mVq7L9vye2gyb1R3/Fn8szYG5AVhTHRjEmnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:df:39:a6:67:e1:8a:a2:c8:2b:cd:01:91:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=67b3d86d39080d985fdb26e98652244c119cf62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:30:86:47:5c:27:d2:5c:7f:94:0e:70:01:
                    ed:d9:39:d1:b7:03:67:0c:e3:9e:8e:50:13:a6:d4:
                    a0:3c:aa:92:1b:91:8b:55:b5:ad:54:f5:7a:9e:3c:
                    77:65:19:e7:5d:ca:37:1c:e0:6a:d9:45:58:cd:1c:
                    d0:ed:a6:3a:7c:22:e9:dc:6d:db:dd:7d:37:6e:d8:
                    21:0f:e4:c7:2e:62:58:df:8b:aa:c8:67:f1:30:94:
                    30:78:0b:c2:b9:a2:8b:52:f6:d9:cb:93:e4:c2:c0:
                    37:a2:eb:45:db:2b:9e:d0:61:52:62:97:45:33:ab:
                    71:c5:44:56:ba:f6:46:63:08:bd:85:94:76:25:ff:
                    66:a3:65:9e:6b:b5:2d:ef:e4:3b:8c:9d:50:ec:2b:
                    52:08:7c:19:bf:41:8b:bc:bf:af:b0:30:f4:c5:46:
                    c6:95:be:d7:04:2f:fe:ef:64:ee:1d:b2:cb:cc:3f:
                    f9:c7:23:46:30:7f:d5:8d:10:ea:e6:72:0b:b5:aa:
                    94:24:42:dc:9c:d5:3d:37:49:26:51:0c:4d:31:8f:
                    3d:74:00:3d:f8:19:c4:6c:09:75:48:a8:1d:7e:bc:
                    1a:15:33:07:32:24:95:64:f8:8a:eb:00:98:5e:f0:
                    db:64:14:b1:1d:dc:1b:f6:df:2f:39:57:c4:37:7b:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:D8:6D:39:08:0D:98:5F:DB:26:E9:86:52:24:4C:11:9C:F6:2B
            X509v3 Authority Key Identifier:
                keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:07:f7:10:a6:79:07:b3:f5:0b:a2:1c:9b:01:f8:36:68:
         4b:df:1c:fe:93:c6:19:8d:31:62:b2:c0:a6:05:73:2e:08:cd:
         89:f0:61:68:45:17:4e:68:d3:22:9e:13:95:c3:8e:9b:81:83:
         0f:15:8e:91:e2:5f:b2:40:10:28:01:42:e4:f3:58:65:21:61:
         2f:d0:4a:6e:61:9a:d4:53:dd:51:26:b9:77:1a:59:dc:18:9b:
         fb:eb:6c:65:07:57:f5:86:ef:4e:46:65:2e:04:59:ab:22:fd:
         c5:05:11:03:2a:c2:7a:d0:6b:1f:97:62:0f:e1:5e:e0:b5:a3:
         cf:7d:27:3b:21:cd:bd:a6:64:2f:7b:40:40:f9:04:26:07:17:
         99:87:70:dc:a2:d7:f4:ab:88:22:00:8c:da:ec:7c:f1:fd:20:
         5e:e6:3a:4a:12:28:4a:b8:6e:97:08:1c:86:4b:6e:77:92:a1:
         6e:2f:7b:85:6e:ea:e4:55:c9:28:be:29:e0:dd:15:a8:f6:9a:
         bf:7b:cd:77:58:28:c2:40:15:ec:bd:2b:0c:5b:8b:36:32:d7:
         37:33:ae:a8:46:5a:86:14:b7:7a:ef:0e:99:5a:29:8f:c6:d4:
         ee:51:8a:57:8e:5e:b3:e7:5d:05:08:cb:4a:4b:58:5a:99:1a:
         0d:2d:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----