Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File:                     bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier:          tL8QvLHRF+5fPdSp6vunlsa/0lsHnr+7KDBfuAnoeUI=
Subject key identifier:   3C:55:06:55:42:47:B5:CE:6D:99:BD:EA:2F:85:6A:96:0B:E1:22:C3
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer:       /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial:       01962F74652E7F3C09F834F591CE75D8546D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: rsUTtljH7uqhSFb3w8YntadwKHQI18m1DD+S+55aOv8=)
                          2: q95LSd8GymIeo50Qm8hbVA1RWoY.roa (hash: 7jNaAGPtx4Ao10+H4Yq9jrjgoF40dHvaQCVKd1ONv9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:65:2e:7f:3c:09:f8:34:f5:91:ce:75:d8:54:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=3c5506554247b5ce6d99bdea2f856a960be122c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:2a:4f:df:8e:7c:dd:04:d9:15:d8:3a:46:
                    bd:7d:2f:f0:bc:fb:5b:40:58:66:f5:0b:32:7a:ce:
                    e3:28:e7:e9:14:26:66:bd:16:a8:9a:ae:35:a3:16:
                    c7:58:69:20:13:4c:85:8f:47:0d:27:92:b4:23:5d:
                    94:a9:2c:de:e2:a4:cd:41:ae:76:41:55:fa:cd:75:
                    15:9f:9e:82:31:83:a4:e9:f1:e8:ad:2a:ca:64:79:
                    58:72:60:93:b9:91:e6:1b:84:59:03:7e:d7:83:42:
                    5e:94:a1:00:af:51:b2:ed:d1:ef:3f:11:26:f1:4e:
                    aa:c2:9c:13:4b:9e:ba:d2:5d:03:85:18:d5:93:19:
                    1b:6a:f9:73:ff:1b:70:3a:80:17:23:72:d6:95:53:
                    b0:a6:26:a9:a1:86:5b:3b:d1:55:04:a5:83:13:a3:
                    48:af:33:86:47:9c:c6:22:1f:10:e6:eb:3b:f7:00:
                    8f:bd:4f:68:95:1c:31:19:52:3c:b8:89:76:d5:77:
                    0b:7a:c3:df:30:6d:2c:ab:04:dd:d5:d8:8d:55:dd:
                    5f:f7:4a:8c:e8:a8:31:69:4d:56:f8:79:33:78:a6:
                    d8:43:6f:fc:41:4c:ac:bf:2b:f0:b3:d4:69:5c:b3:
                    28:ee:db:ce:28:69:12:87:6c:ce:34:37:35:a5:88:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:55:06:55:42:47:B5:CE:6D:99:BD:EA:2F:85:6A:96:0B:E1:22:C3
            X509v3 Authority Key Identifier:
                keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:0e:23:f2:2c:13:2f:cf:6c:ad:ba:96:01:49:33:b6:c0:
         75:c9:10:16:34:2e:ec:41:60:b9:1b:ce:f6:ee:fe:d1:3b:ab:
         32:dc:a2:dc:03:a8:3d:51:7a:bf:1e:97:31:4a:e1:3b:99:0d:
         f1:50:5d:94:d6:82:6d:1a:e4:a4:7a:c4:4d:2b:3b:6e:62:47:
         74:a0:80:25:32:0c:9c:7f:69:56:84:4b:b8:24:be:15:55:73:
         4f:b1:4f:29:38:a6:2d:33:56:dc:af:83:e8:5f:cd:1a:d1:86:
         e7:bd:dd:a0:54:cc:77:b1:73:75:b8:bc:46:01:35:03:1a:7f:
         17:dd:33:84:7d:6e:05:c0:ac:25:3c:3c:72:50:e2:47:26:3b:
         b3:43:69:79:cd:39:ed:dd:51:06:be:3e:81:09:fa:7e:09:61:
         e5:58:da:7f:fc:b9:89:1e:b6:2e:37:8d:ab:67:a9:6a:16:a4:
         c6:01:ad:88:19:92:f6:d4:98:d9:7f:0d:4c:c6:18:2e:06:f6:
         fe:68:02:a8:42:cc:e0:1d:e1:ac:dd:65:22:13:3c:65:ad:01:
         a9:1b:f6:da:97:c6:7a:3f:0f:70:f7:b8:6d:05:f4:1c:fb:84:
         72:8f:7e:d6:48:0f:99:83:9b:4d:88:3b:58:24:7f:3e:5c:61:
         5a:9b:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----