Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File:                     bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier:          fggodl3CimtD7gxuRmZ20PO0RQQaWQyGJGiOiG7TQe8=
Subject key identifier:   C2:0F:F8:CA:64:AF:57:EF:9E:2E:0D:7E:CD:0D:43:79:77:B4:07:EB
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer:       /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial:       01962DF419E0F5C08B7E4B2BC0B0521BBEA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number:          1212
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
                          2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: ZWeCYJ22920FesBXOvJEsiottuTkfUIpCmSbBhuFs8k=)
                          3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:e0:f5:c0:8b:7e:4b:2b:c0:b0:52:1b:be:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=c20ff8ca64af57ef9e2e0d7ecd0d437977b407eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:90:5d:4b:17:e3:16:bf:0a:81:2c:75:7b:
                    19:e5:9b:d0:c7:9b:59:89:50:f6:ea:88:3c:52:a9:
                    12:b0:8b:3e:27:c7:df:9a:93:e4:59:d8:a0:24:7d:
                    b8:12:3f:73:19:37:14:77:44:63:d3:6f:2c:52:44:
                    10:f3:df:4d:9c:5c:e0:f9:19:6c:dc:16:f0:f6:62:
                    2d:e5:90:c7:8d:fb:59:92:b8:da:b5:f2:2b:50:89:
                    76:13:94:53:08:2f:f1:0c:de:6e:53:40:92:b0:a3:
                    43:77:21:02:5f:b3:bd:8d:d9:85:9e:7c:2c:ca:f6:
                    f4:78:95:3f:22:21:42:53:a6:e9:ee:52:7a:25:15:
                    e2:f5:2d:ce:39:2d:5e:3e:2f:64:31:10:ac:e1:5f:
                    33:1e:ac:0f:ca:f8:18:8d:fd:71:60:49:c8:e1:7a:
                    be:1c:b6:43:52:5e:53:04:6c:23:ad:02:c7:ef:ae:
                    1d:a4:56:42:be:9a:9a:09:62:40:b2:13:4d:6b:cb:
                    4f:2d:44:33:7e:1d:2a:c1:93:70:18:8c:c2:c7:03:
                    b2:57:bd:41:7e:7b:95:6d:34:d2:cc:c7:b3:71:b7:
                    f0:d8:b6:33:70:16:6c:53:01:6c:7e:56:f1:4e:73:
                    1d:6c:89:17:72:d8:91:0c:ec:2b:32:82:c4:82:7c:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:F8:CA:64:AF:57:EF:9E:2E:0D:7E:CD:0D:43:79:77:B4:07:EB
            X509v3 Authority Key Identifier:
                keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:7f:59:31:5b:d1:8b:a8:0d:c6:1b:25:c1:36:50:78:30:
         0b:ed:16:e2:75:f2:21:5c:3a:94:f9:fc:86:bc:75:46:dd:6f:
         e0:44:bf:a0:f4:0b:cf:f3:dd:62:98:f9:6c:ed:93:14:d4:6e:
         4f:c4:3e:4f:de:3c:1c:a2:e9:a0:6f:5a:0a:ae:bd:f7:ec:6e:
         05:57:62:b2:cc:17:0d:e7:43:b5:f4:7a:8e:db:9e:f7:c1:39:
         0f:28:ae:57:ba:c7:b0:ff:96:e1:4a:83:5f:65:d4:45:4f:60:
         fb:28:56:ba:60:b1:83:3c:75:a8:d4:25:74:6a:b0:95:f9:94:
         eb:b9:de:8b:d2:3e:b0:9f:b7:26:63:f0:d0:7c:eb:e1:b5:6b:
         a0:2c:f9:26:8c:7a:40:d1:a2:d7:67:96:e2:53:e8:bd:c0:c1:
         a3:5b:cc:9a:c4:c3:38:d4:4c:54:a3:3a:93:00:bd:73:18:08:
         a9:c3:78:cd:21:d2:85:b7:dd:fb:58:cc:d0:3a:f2:08:a3:52:
         18:61:cc:bb:3d:57:7c:0b:76:47:64:5c:a9:31:dd:28:3b:79:
         d5:a5:bd:47:cd:66:86:07:4f:6e:58:82:87:28:46:07:fc:75:
         cf:77:75:95:76:dd:2c:47:ff:49:11:3f:21:ec:ab:d7:da:ea:
         fb:3d:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----