Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File:                     bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier:          kqltSJ4d1SlTuEdmpqZ1lN7OHXaVNm0kciaLhUk3ekU=
Subject key identifier:   BC:80:6D:2F:1A:CF:66:94:37:94:0B:DC:7F:F4:84:78:B1:8E:BA:89
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer:       /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial:       01962F06EA95FE69695950F4FCDE73C359B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: BXBaeU6t+RKGnBdMLAdjmsy3CG2baGad2NqM+ceYBG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ea:95:fe:69:69:59:50:f4:fc:de:73:c3:59:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=bc806d2f1acf669437940bdc7ff48478b18eba89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:6a:2d:63:45:75:bb:ba:85:bc:97:86:9e:
                    78:c9:50:f5:f7:0c:89:67:8d:45:90:42:96:70:99:
                    15:85:1d:4c:ad:9a:78:aa:42:93:51:38:bc:be:24:
                    3b:0d:c3:28:f2:85:32:86:a1:ec:9e:c4:71:64:5b:
                    36:a5:a5:eb:55:60:52:cd:7b:a2:02:3a:90:11:2c:
                    be:0e:eb:4f:ac:ca:df:09:3f:9a:d5:b6:c7:8d:ff:
                    7f:57:55:08:ee:4e:ab:2a:fe:a4:43:d3:87:fd:3e:
                    13:2e:4b:0c:46:db:8c:fb:51:1c:a4:70:e5:1e:8a:
                    d8:b6:52:28:ea:c5:4a:64:d5:9b:bd:3d:d4:30:49:
                    9d:f5:fb:e6:4c:35:57:02:6d:2e:b5:a7:7a:69:4f:
                    70:18:c5:de:2e:4a:aa:37:be:ca:3e:9d:62:dd:8b:
                    08:09:3b:6c:68:ad:96:ff:3c:b2:14:f0:96:ba:cb:
                    9d:42:7e:37:ca:e0:59:5a:7b:6f:71:41:56:64:18:
                    00:01:07:4f:cc:15:79:35:5f:a2:73:68:66:45:46:
                    9e:c7:b5:f2:4b:f8:5c:a3:3b:9a:02:ab:4d:a7:d2:
                    4e:da:c1:a9:64:b4:db:80:f0:9f:26:5f:c7:b4:ec:
                    de:bc:39:43:75:5d:16:a5:cb:03:1f:71:96:89:1f:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:6D:2F:1A:CF:66:94:37:94:0B:DC:7F:F4:84:78:B1:8E:BA:89
            X509v3 Authority Key Identifier:
                keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:cb:88:67:76:11:fc:91:87:15:62:10:e1:2e:dd:2b:23:
         d8:e7:fd:50:32:df:08:27:07:f3:20:c0:47:ea:54:3b:95:08:
         6c:02:5e:3c:9f:60:52:29:90:7e:fe:61:7c:20:74:09:4f:40:
         ee:ce:de:19:4c:ff:42:da:33:cd:96:ba:94:87:9e:fd:54:d8:
         4a:f0:1b:23:89:82:cd:fc:dc:b0:e8:36:be:32:eb:7b:c0:6c:
         28:5d:29:51:23:12:a8:5b:88:ca:9f:45:92:1b:c3:d2:e9:76:
         86:5f:0d:a5:16:8c:5a:ff:4b:05:a2:0b:ee:d1:fb:11:f7:86:
         de:72:5b:bb:39:43:ec:95:b9:a9:10:d7:cf:0a:da:1c:1d:e7:
         65:62:75:79:33:32:5b:81:c8:da:4a:64:1e:7f:9e:94:e3:e9:
         af:e3:56:c5:40:1d:dc:55:b5:b4:39:40:d6:ac:56:7c:f5:12:
         52:13:c9:ce:e9:04:c4:bb:cb:ec:79:e2:54:3c:eb:5e:09:a3:
         28:a5:22:64:99:3e:44:7e:9e:f1:8c:cd:1f:35:d4:1d:04:89:
         af:ca:65:85:8a:62:88:2f:1a:5e:9f:56:56:ca:48:7b:30:67:
         50:e9:b5:30:ed:f5:99:a9:ba:84:c8:7e:23:ef:14:b1:d3:aa:
         cc:00:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----