Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File:                     bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier:          /2Zmd2QdGqvN9s2P5jvSv6Cg/WB8Kd4PdW5Me01s50Q=
Subject key identifier:   87:2E:12:59:8A:6E:5B:3A:E8:98:07:44:30:9B:15:7A:94:C4:C9:A7
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer:       /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial:       01962F7481FB1EB1C1EEDB2BC284A699144D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number:          0F6B
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: o+xf8yQer7YmsFb3UyxnggGiE0QRg/pGxZ0Ibd8EUro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:fb:1e:b1:c1:ee:db:2b:c2:84:a6:99:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=872e12598a6e5b3ae8980744309b157a94c4c9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:06:bb:69:c9:f3:f6:34:e9:19:34:0a:1d:
                    7f:6e:32:63:28:7e:07:83:d0:76:7c:3b:41:27:0b:
                    76:db:9e:ae:ec:e2:16:69:0d:58:64:66:76:83:22:
                    f8:65:e1:6c:16:8e:a0:1b:63:2c:b3:59:35:39:b4:
                    84:60:d0:8e:f4:26:ff:23:b3:4b:40:e7:26:9d:97:
                    18:db:c2:68:b3:65:0e:95:7d:c7:80:5d:5f:62:73:
                    49:81:7a:46:be:06:8b:9f:41:1c:6d:3e:38:01:61:
                    93:3c:fa:27:8a:3e:fe:d1:41:31:47:18:7f:e8:4a:
                    62:73:1c:15:04:5c:ff:bb:85:aa:46:b1:8b:81:cf:
                    0f:d9:91:84:05:da:52:b3:79:98:2f:9e:94:81:1d:
                    28:f8:a4:1e:8d:16:3a:06:6a:98:13:91:fc:01:d8:
                    de:b6:89:8a:44:2c:00:b6:ec:73:45:6b:55:3a:f2:
                    d8:0a:9a:18:e7:a7:aa:37:60:72:6a:c3:41:31:51:
                    05:77:df:3b:4d:a4:37:46:27:ca:6b:4d:24:60:6a:
                    15:3a:5b:46:9b:bd:21:3e:e2:de:d0:dd:ab:3b:bf:
                    42:13:1a:df:04:ba:03:00:6c:84:f5:28:2a:be:53:
                    61:ff:a1:1b:a3:35:fe:1b:77:86:11:e0:8d:d2:ad:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2E:12:59:8A:6E:5B:3A:E8:98:07:44:30:9B:15:7A:94:C4:C9:A7
            X509v3 Authority Key Identifier:
                keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:49:00:d6:bb:10:e9:18:b2:d2:72:90:19:f4:9b:5b:2b:c1:
         f0:54:96:56:22:83:60:16:2c:ed:6c:74:43:c2:e4:07:08:b9:
         71:83:2f:71:7f:3c:66:e6:39:77:82:0e:88:af:7b:4e:74:52:
         c0:0d:57:9a:11:96:d4:9d:7a:d1:66:12:26:cc:3a:8c:f6:31:
         ae:9b:6b:e0:c5:52:bd:95:30:ff:53:41:16:67:e9:c4:b1:16:
         a3:47:00:00:34:fa:01:4e:fd:71:8d:83:59:71:b0:71:02:e5:
         be:0d:ee:b1:af:b9:03:bc:4a:1c:3f:3f:c2:40:de:2b:52:fe:
         57:1f:75:2c:b0:fb:29:b2:95:e2:f1:17:96:a9:c1:1d:b8:01:
         2a:4d:e1:c6:2c:6b:b7:f2:b0:82:7a:d5:f5:23:11:2d:19:bd:
         30:f7:b0:9b:b1:d9:1f:3e:12:d1:33:68:50:48:54:dc:c7:bc:
         6e:c5:bc:d6:d9:4c:73:dd:1d:aa:96:e8:e2:c0:40:8d:6e:93:
         88:22:fc:87:5d:76:cd:fa:e0:b1:2a:6d:8b:a5:c7:75:4b:9d:
         d4:0d:0b:fe:1f:2c:e3:da:46:f0:5c:72:20:19:e3:0d:88:87:
         96:e4:13:10:b8:85:10:18:ea:58:38:91:83:e2:6e:93:e2:a4:
         cf:81:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----