Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
File:                     bfhqH1cK4xUpAiqk9h79nsK5fQU.mft (raw, json)
Hash identifier:          ujrRozoWlvSZ5lRIJ7vP04Ah90B37xg8i2/NhA8XnWc=
Subject key identifier:   C6:A4:6D:BB:46:71:F1:C4:43:E8:2A:0B:75:7B:21:DB:5F:4D:EB:6D
Authority key identifier: 6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05
Certificate issuer:       /CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
Certificate serial:       01962E61993EC33AC5C934351E44E48498EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
Manifest number:          1365
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: BpLbGApyHXLB4qqgJyw3nGH9lH0.roa (hash: 4AoUx/2M994KEwtEdAKInOt11G1446xmTonI1qJPrOg=)
                          2: bfhqH1cK4xUpAiqk9h79nsK5fQU.crl (hash: 7n69q+f6ypIYM0E5Nku1YOlF8B/7796bcqDNazmYKsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:3e:c3:3a:c5:c9:34:35:1e:44:e4:84:98:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=c6a46dbb4671f1c443e82a0b757b21db5f4deb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:c2:8c:25:ac:f1:12:c6:d0:dd:8e:6c:7f:
                    08:1a:77:fd:a5:09:89:ce:60:44:0a:61:c7:a1:87:
                    70:70:90:fb:4e:de:fb:27:a3:8c:32:df:f6:15:cf:
                    60:b8:d4:f4:a7:d2:39:df:18:4b:35:a9:d4:1e:b9:
                    9e:af:dd:15:ef:8c:cd:76:08:a2:e5:5d:d0:f9:1b:
                    4b:15:2a:0f:f6:9e:ab:b5:39:50:ef:23:fe:bf:14:
                    0f:c6:d4:8d:d5:24:fd:e8:1c:08:f8:fd:51:0e:49:
                    37:e7:c4:49:2f:f6:93:82:11:50:34:65:e7:2c:09:
                    41:28:9e:da:0b:9c:8a:9b:60:12:e6:ae:ca:0a:5e:
                    13:b5:f6:09:c4:87:4d:ef:71:e0:d4:bf:5d:d3:da:
                    ce:da:d3:83:b2:28:80:a7:73:82:e1:fa:7c:77:83:
                    bd:da:eb:74:32:11:12:c8:57:3d:19:f9:36:fc:b6:
                    92:24:b8:01:cf:93:35:80:61:7a:ea:aa:f2:fb:8d:
                    24:f7:97:09:60:4f:4b:b3:22:ae:d2:02:ca:ec:89:
                    98:b5:dd:b5:3f:aa:26:da:7f:ff:b7:d3:ff:80:a7:
                    e2:55:90:05:d8:72:c1:fc:7d:34:fb:86:e2:02:12:
                    50:d8:ab:b7:33:a5:62:15:57:d1:4e:0b:fd:64:10:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:6D:BB:46:71:F1:C4:43:E8:2A:0B:75:7B:21:DB:5F:4D:EB:6D
            X509v3 Authority Key Identifier:
                keyid:6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:3c:70:0b:a4:b5:4d:cb:e6:4f:5a:d7:dc:2f:22:f4:b8:
         49:71:d4:e9:11:a0:f2:e1:48:05:8c:e4:f5:42:79:63:85:9e:
         3e:98:25:b3:67:49:f5:c3:d0:7a:8e:43:b1:6f:ed:da:07:e1:
         bd:6e:c8:f1:ad:6e:25:3c:20:4c:bd:01:71:9a:9d:0f:7a:58:
         81:fb:d8:0e:61:1f:61:2c:a6:7b:05:d4:a8:08:3d:84:84:8b:
         2a:d2:5f:03:a2:77:92:17:7a:f9:89:55:c4:ba:fa:5b:bc:db:
         f4:48:35:01:35:82:8a:39:86:99:9c:28:a9:b2:16:7e:56:11:
         55:dd:a0:5f:d9:84:53:6b:c8:62:f9:5d:5e:fc:f4:09:aa:ae:
         3b:9c:76:bb:e1:c0:7f:de:66:5c:b6:db:b4:bc:a5:64:23:e2:
         a0:21:a4:28:dc:cf:81:24:2c:9b:b6:67:fd:9f:f7:ed:b6:fc:
         4d:9d:86:fc:fb:a7:01:02:e8:b3:d9:6c:3b:2d:ad:89:24:01:
         59:64:97:77:6e:79:cb:2c:a6:03:11:a1:ab:1d:c7:bc:27:74:
         83:15:72:e4:a8:91:d0:59:b6:b5:a2:68:56:39:55:c1:5e:d5:
         ca:32:24:5d:0c:fb:f7:cf:f2:fd:b4:aa:06:81:b9:f9:5e:c4:
         0f:bc:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----