Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File:                     bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier:          d6uIr91GRtrfrpV+vJ3/DCnQAmkXpJXB25yb0YIbI1E=
Subject key identifier:   AF:A1:E3:72:6D:EB:48:61:D7:97:B5:57:65:3D:E6:81:1A:2D:AF:CE
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer:       /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial:       01962E61DAD8E9CA0E798424CF2D1D616263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
                          2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
                          3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: juOi+L30w/k9+y7BgiVHE3o4hNpTWcdvt5gn9fKVcfA=)
                          4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:d8:e9:ca:0e:79:84:24:cf:2d:1d:61:62:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=afa1e3726deb4861d797b557653de6811a2dafce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:62:aa:83:2c:31:13:fa:c5:5e:fd:78:a2:
                    52:11:d1:22:35:7a:c9:91:28:79:07:6b:b9:b6:2a:
                    4f:df:d4:7c:24:42:ff:58:b6:b6:d0:6a:89:23:0e:
                    64:c8:38:50:d3:cd:90:21:6b:65:9d:9d:2d:8b:98:
                    a2:5f:b3:4a:7c:d0:b0:52:fd:85:0e:e8:9b:61:00:
                    49:4c:32:bd:9d:41:63:70:eb:50:7f:1b:d7:3e:c8:
                    d0:8e:b2:a8:0d:4d:22:93:d0:33:fd:4f:c8:d2:4b:
                    69:6b:2c:31:f8:8f:37:bb:bf:80:30:9c:a8:e2:f6:
                    47:82:ee:11:53:19:40:36:e4:c6:bc:e3:86:9d:38:
                    3a:96:3c:57:e3:98:87:d2:97:a3:13:64:1f:d1:ed:
                    96:68:a5:e6:2e:c1:a8:08:a2:cd:45:64:ae:eb:12:
                    66:e2:17:7d:72:d7:ba:7d:5f:af:48:a0:27:93:7c:
                    49:0f:2c:be:63:c5:1e:5c:cd:f5:ce:61:b7:a2:30:
                    43:72:10:13:ba:23:27:43:a5:33:c7:a5:96:39:46:
                    ef:0e:9d:f9:0f:ca:fd:7c:36:21:9e:96:e2:de:29:
                    9d:2a:ed:9d:bf:5d:e9:3a:97:1b:1b:a8:9a:41:93:
                    5e:15:6b:94:26:a9:ce:1f:c8:d8:11:77:d1:d2:64:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A1:E3:72:6D:EB:48:61:D7:97:B5:57:65:3D:E6:81:1A:2D:AF:CE
            X509v3 Authority Key Identifier:
                keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:22:e2:e8:68:0e:be:91:33:20:72:f7:b8:d2:67:f8:63:
         b6:a5:38:85:9f:f2:a9:38:ba:f7:3d:25:45:b1:fd:f3:5c:75:
         04:08:0d:c0:e6:5b:77:ff:b4:c9:5c:36:dd:44:49:5b:9e:08:
         d0:1c:3b:91:f2:8a:41:6d:55:1c:22:77:82:15:83:c0:14:83:
         fa:2a:9d:1f:38:ac:95:d4:46:bd:c0:5b:d7:97:ac:c3:5a:65:
         a0:5d:f0:7e:be:c2:90:f6:b9:b1:98:af:da:b0:d4:1c:e9:fd:
         2b:db:f0:8e:67:f3:cf:e7:6a:e5:07:88:16:d2:78:ad:76:18:
         9e:4d:48:b9:d3:0a:c3:b5:0d:32:5d:fd:b3:d9:07:e3:ab:09:
         5d:e3:9d:36:ef:5f:51:21:b6:5f:f3:a5:e5:e1:8e:b8:45:08:
         61:02:c8:1b:35:ad:ac:14:28:f0:b3:be:b4:7e:1d:08:3e:9e:
         6d:4e:76:d0:3a:de:5a:01:c0:99:74:c0:55:17:8f:39:b3:ea:
         2d:2a:49:e5:3d:de:6c:89:57:f9:39:9c:0e:a8:30:cb:f4:1e:
         08:ea:55:cc:27:d3:f6:8c:f4:67:0d:2b:02:47:ac:f3:7f:a3:
         bc:5c:a8:bb:48:08:90:53:c6:c0:4c:95:ae:9c:23:01:80:38:
         f7:11:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----