Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File:                     barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier:          pWdyuxXcBnMnMHqTCKzqz69d6ddOX3IcZCjkuRs8X3k=
Subject key identifier:   DB:D1:9E:BB:61:F3:F8:FC:2C:D9:FD:DE:37:91:20:09:3A:6B:E6:5A
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer:       /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial:       01962E98EA2581063C93BFB1B0305865FAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
                          2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
                          3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: L44OWJLPuLpadX9t+Vyf+OyFmwdxiJKB0lAlRfiExLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ea:25:81:06:3c:93:bf:b1:b0:30:58:65:fa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=dbd19ebb61f3f8fc2cd9fdde379120093a6be65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:85:13:33:d3:1a:2a:df:33:bd:e8:db:ce:
                    24:c9:63:5b:9e:c4:3b:d3:2a:4a:7a:e3:e7:a3:e5:
                    8b:aa:7e:0f:a0:4f:99:75:af:e6:52:c1:b5:52:a4:
                    31:37:39:08:b3:59:93:4c:58:da:17:de:67:4b:0d:
                    a2:ef:0b:2d:1b:8e:65:36:fc:83:a9:46:64:5a:28:
                    93:f5:0f:66:50:7f:bb:d4:cb:64:94:57:9a:7a:2c:
                    4a:4d:58:d4:1c:91:1a:4c:11:f8:23:2f:68:a4:9c:
                    a9:2a:12:e9:88:24:b4:90:1a:fa:9d:f7:b2:42:fe:
                    be:d3:95:1b:94:65:93:33:af:1d:70:ce:4f:31:d1:
                    13:37:10:ff:bf:0f:9f:c2:df:d0:c8:17:72:fc:d0:
                    5d:d6:57:95:a2:2e:09:b3:dc:e2:c7:30:ca:a7:ea:
                    66:b5:cd:aa:2a:a2:2f:b3:c2:08:6c:95:bb:1d:0f:
                    31:57:6f:a4:26:16:c2:ae:91:09:63:6b:bf:14:74:
                    1a:3e:56:8a:99:01:2c:1c:fa:fb:fb:ca:75:b1:de:
                    a0:2a:0e:e3:e8:3b:6d:c3:d1:8f:05:0b:a9:28:05:
                    25:3a:5e:33:7e:47:f5:82:90:10:3c:50:6c:9d:cf:
                    48:77:cd:c5:c2:96:84:22:d7:a1:42:6d:db:1b:59:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:9E:BB:61:F3:F8:FC:2C:D9:FD:DE:37:91:20:09:3A:6B:E6:5A
            X509v3 Authority Key Identifier:
                keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:19:dc:bd:90:f0:02:93:d3:11:1c:e0:41:fb:67:cd:78:
         02:9a:22:8e:9f:50:cf:78:72:d9:49:a2:6c:d0:dd:f6:bb:a5:
         0d:39:98:75:50:c0:9b:34:c7:8e:73:a1:77:96:a6:39:4c:cd:
         56:7d:90:72:00:ca:a5:61:d5:d8:38:11:f1:4a:32:ba:22:17:
         52:12:c8:a7:2d:a9:a4:43:c8:60:0f:45:fb:a5:31:a9:20:19:
         de:e7:d5:5c:9e:f6:5b:3a:94:2c:b1:07:f4:da:87:eb:6b:6e:
         e1:16:38:59:5c:0a:25:d3:48:f5:56:5f:b6:a1:05:c3:6c:16:
         cf:ea:3f:6b:20:f9:53:89:12:66:2c:79:aa:22:36:28:38:29:
         57:83:37:b3:84:09:ef:29:ee:17:28:f1:90:62:58:13:aa:21:
         69:59:ca:6b:15:cb:8c:a2:ce:f7:f5:43:12:3f:73:f7:60:52:
         a9:bc:2b:e1:e4:09:61:8c:ae:ad:1f:c3:b2:c7:85:b0:65:87:
         de:a4:ad:56:46:57:34:78:8f:d2:b9:7b:be:0d:24:e3:eb:70:
         d7:8a:ac:f4:5f:10:1e:5e:21:ea:29:9e:ac:c8:7f:ac:c4:42:
         36:ec:44:35:d9:f8:22:6b:f1:8c:5e:c6:89:b4:8b:69:53:53:
         19:ce:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----