Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File:                     b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier:          Bv6FfhYmtYGASaQR57knq//aNtL3BQu2GGGk3m9n644=
Subject key identifier:   8A:C5:29:08:44:15:D9:B2:B1:64:E8:26:83:62:7B:65:05:20:E4:CB
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer:       /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial:       01962F3D33FD620214FB39F551DC73E12DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: dBEu6EGLYUM1ClXf4cyEjwjGBSzbf21KzJoPwHlHE5I=)
                          2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:fd:62:02:14:fb:39:f5:51:dc:73:e1:2d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=8ac529084415d9b2b164e82683627b650520e4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:82:7a:22:90:94:85:ca:61:e0:aa:77:34:
                    c4:b4:d2:3a:2f:7e:57:44:55:0b:89:ed:1c:2a:96:
                    45:35:91:af:68:e0:60:78:04:45:5c:82:bb:1a:71:
                    5a:58:fd:6f:22:ff:ff:6d:e2:81:24:ab:ce:c4:66:
                    89:c9:c1:e3:39:46:59:34:7d:1b:7f:47:d7:f6:e6:
                    85:dc:9e:51:c0:97:49:24:38:bb:1e:3a:c9:6b:95:
                    3a:33:ec:cd:ec:f6:06:3f:7d:63:31:c6:25:81:bc:
                    ff:85:8c:25:3f:d3:c3:42:16:e3:0b:e6:e4:e3:b2:
                    d1:d5:ac:24:a8:a9:23:fa:20:7a:c5:46:24:bf:42:
                    82:18:ef:39:b2:35:30:f4:b2:c3:49:5b:ae:2c:ef:
                    d4:fc:3f:f7:9b:14:7f:3d:8e:24:a6:c2:e8:8c:af:
                    82:ad:21:3f:9c:c7:54:25:3a:5c:81:96:6b:d3:0d:
                    9c:41:bc:b6:83:f4:2a:24:f1:96:4e:c4:51:ca:52:
                    5b:e4:ca:59:2c:05:95:e8:c4:ad:85:70:15:61:28:
                    77:c0:e4:66:15:e2:b9:2f:71:cc:3c:1a:59:fa:30:
                    b6:85:56:b8:33:2c:91:9e:25:d5:d9:a1:b2:37:1a:
                    95:65:58:d2:bc:e0:1d:d3:ca:66:61:aa:0e:1f:ab:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:29:08:44:15:D9:B2:B1:64:E8:26:83:62:7B:65:05:20:E4:CB
            X509v3 Authority Key Identifier:
                keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:8e:3b:22:1f:12:d0:a0:89:dd:3d:a1:4c:8e:6d:65:0b:
         09:e0:db:fe:2b:8e:8b:4c:fb:76:9e:2d:fc:b8:4f:3f:5d:4f:
         f1:c8:f0:98:96:b5:0e:62:37:e0:b4:99:a9:d2:12:e5:2b:a9:
         41:b1:55:f8:7f:d5:fa:26:44:83:9c:e9:3f:96:5f:b5:56:1c:
         bf:97:26:fc:99:b2:f6:51:dc:4b:75:bc:30:6b:da:23:45:43:
         c9:58:3c:69:0f:0b:14:97:ee:50:82:cd:4f:b6:f8:c7:9c:9f:
         d6:5b:89:2a:64:6d:e6:0b:25:66:ea:1e:b5:8b:17:c0:e5:e6:
         41:77:e9:78:28:f9:49:b7:38:5f:14:4b:68:47:d5:d1:4e:02:
         fb:f8:8f:a1:c5:14:54:85:37:a9:85:c3:87:87:4f:0c:4b:40:
         9f:1f:8a:79:ea:ae:f7:6a:25:dc:58:a7:73:a6:ea:9d:45:43:
         ef:cf:0f:05:9d:41:16:2c:32:b1:97:17:27:3e:12:a1:49:9b:
         d5:c6:56:18:26:d4:b5:fd:9c:d8:bc:f2:a8:c7:28:77:ba:de:
         4b:c3:da:50:56:0b:90:bf:7e:cc:8e:59:fe:0f:1b:dd:7a:17:
         a2:c2:28:9b:59:3b:d3:37:ff:6a:74:91:f7:df:86:a8:bc:4f:
         b2:a0:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----