Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File:                     bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier:          tXobjf3yyBphwkFEBdZw6WG1PHxEXaP/HM3aLOk/Qig=
Subject key identifier:   FE:13:FC:4F:8B:EE:C7:53:27:A6:91:CB:67:B9:AC:65:7D:FD:E4:FD
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer:       /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial:       01962F74BD4DD14A1519A921A1F2A84EBFB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number:          0923
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: C81nGvUuiPSMYroSB9N+rHSo5x3mxxpEa/zQrsKFm38=)
                          2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:4d:d1:4a:15:19:a9:21:a1:f2:a8:4e:bf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=fe13fc4f8beec75327a691cb67b9ac657dfde4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:34:fa:57:63:e4:b8:42:19:df:2e:86:da:
                    e9:01:ea:4c:41:47:d2:26:6a:52:98:07:fb:5d:72:
                    b4:84:a8:55:d6:83:6c:43:61:73:24:c3:9e:f3:7d:
                    86:07:b6:47:e7:3b:f0:32:e3:4f:22:a7:c4:3a:fd:
                    93:e6:9c:6b:f4:5b:d6:2f:14:02:d3:59:96:1f:18:
                    4f:67:72:21:c2:14:0d:16:25:70:4a:78:4b:6d:aa:
                    5b:49:bf:f4:3f:3c:fd:36:49:d9:8a:85:1f:36:f9:
                    38:9d:b1:d2:27:15:43:7f:83:b2:78:00:b1:2d:60:
                    45:b0:28:87:e7:0f:89:a4:56:e8:01:7a:13:52:4c:
                    16:a9:10:2b:80:c7:55:86:f8:6d:6f:5e:eb:fd:4b:
                    5f:0e:3d:1e:7f:9b:9f:fb:e0:fa:60:cb:49:a0:55:
                    81:23:5d:53:04:2b:a7:22:c1:8f:69:bf:97:d6:ef:
                    a5:76:fa:ec:e5:4c:3e:f6:36:90:4f:4a:4c:7e:9a:
                    0e:68:ed:32:c2:94:39:91:92:4d:86:27:4b:ea:9c:
                    2b:f7:ff:27:c4:2e:98:1f:03:04:17:92:07:06:d3:
                    4f:5f:9a:12:37:0e:7b:64:08:d1:79:e6:ce:0c:67:
                    2a:53:c4:b5:ea:2f:56:26:90:77:a5:d0:61:51:f4:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:FC:4F:8B:EE:C7:53:27:A6:91:CB:67:B9:AC:65:7D:FD:E4:FD
            X509v3 Authority Key Identifier:
                keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:a7:52:ef:6a:ae:4d:56:69:d5:29:22:43:65:a1:ef:00:
         1c:81:4f:ca:50:76:f0:b4:fb:8d:6c:b1:d0:49:68:c7:e6:8b:
         d1:95:f3:45:9a:70:65:9e:50:66:b5:38:68:b3:ed:87:b4:aa:
         dc:14:ba:65:97:1e:75:bb:c0:d8:69:9f:93:65:53:98:38:74:
         40:1a:b4:38:c5:8b:08:88:18:ec:c5:06:da:b0:eb:59:84:58:
         f9:d9:36:26:34:55:02:34:cc:3c:37:6a:be:ea:4a:29:87:68:
         59:e1:f6:66:e5:14:32:ae:b5:89:96:18:56:c2:e3:b1:38:d1:
         f9:78:d9:0b:3a:e7:30:1b:d9:5c:0a:0f:6d:eb:49:20:a9:07:
         0b:d3:fa:5c:57:34:53:f1:f0:f2:c2:38:75:e9:20:82:3a:37:
         d8:a3:53:37:93:a4:75:e2:c7:96:fd:3e:82:3b:a2:80:f4:8a:
         95:f6:1a:8a:6d:b0:38:88:01:a6:40:9c:08:5a:7f:93:47:77:
         87:5d:e1:d5:ca:87:ce:aa:f2:e3:b7:c0:5e:83:02:fb:93:ff:
         e5:6c:f7:24:9b:07:96:16:89:5c:56:16:11:29:36:82:31:a2:
         22:56:ed:c5:05:f8:ce:a7:0a:55:2a:45:55:91:f6:62:7b:d7:
         25:55:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----