Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
File:                     b20hysOH8-N4uiOkynfeyTA7qS0.mft (raw, json)
Hash identifier:          xdDsxkDQKqrW1CZfcknHYYYZe9o2LJ9LpQYx9Bnick0=
Subject key identifier:   BC:7B:9B:EE:AC:72:67:0E:98:A2:78:07:8F:6E:4F:24:55:62:38:06
Authority key identifier: 6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D
Certificate issuer:       /CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
Certificate serial:       01962F3DDBDA0E577933E9D4C20F4431E549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: b20hysOH8-N4uiOkynfeyTA7qS0.crl (hash: XDlYA3Jl2cg1upsXF9QsaL5QVEm60BxaAw2rWfgE/zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:db:da:0e:57:79:33:e9:d4:c2:0f:44:31:e5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=bc7b9beeac72670e98a278078f6e4f2455623806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:23:a7:2e:1b:b4:fe:c4:b9:ce:3b:74:60:
                    60:b4:a9:cf:dc:93:0e:3b:25:96:05:81:96:61:14:
                    61:7c:02:42:ba:43:b4:a1:4a:72:e5:cc:11:71:79:
                    7d:76:e8:2a:7a:35:12:93:ba:f9:f1:d2:43:3f:2b:
                    28:0a:52:cf:97:0e:5e:9d:46:21:4f:81:f6:86:96:
                    53:6d:6a:41:98:b9:a4:64:da:44:fb:81:85:73:50:
                    24:79:5e:0c:15:94:17:5a:ea:35:4a:f7:13:a4:a5:
                    e1:2a:7f:c3:c0:77:90:1d:b5:91:fb:1f:c3:65:1e:
                    14:3e:72:74:8b:21:41:a6:50:63:cf:c5:5b:15:f8:
                    0b:de:6d:db:5f:8a:43:ad:1f:48:66:44:58:72:b3:
                    98:4d:8d:5f:94:bb:be:6c:7d:7c:3f:33:dc:f7:29:
                    93:e3:da:d6:9a:81:98:33:05:29:f8:f0:81:7a:05:
                    21:38:db:b4:8f:9b:79:27:ed:47:2a:da:8c:61:fd:
                    36:b5:6c:86:f3:e9:36:60:11:03:5e:4c:35:fd:0d:
                    75:e2:0c:cb:16:04:b0:0a:5e:ed:b8:3a:e3:50:9a:
                    a7:35:07:bf:86:b4:02:39:29:6b:08:92:99:e9:71:
                    40:49:25:f0:9e:ee:93:4e:e7:db:02:09:4f:7a:44:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:9B:EE:AC:72:67:0E:98:A2:78:07:8F:6E:4F:24:55:62:38:06
            X509v3 Authority Key Identifier:
                keyid:6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:83:cf:9f:5d:22:da:ec:64:78:37:d8:a2:91:9d:92:97:26:
         02:84:01:a5:21:e1:76:46:37:4c:2f:10:fb:44:78:3a:11:fe:
         9c:8e:51:94:12:28:72:98:5c:46:03:69:25:e5:8e:31:c4:00:
         69:19:f1:a3:c9:bc:97:54:c3:bd:d7:c4:7a:2c:c5:fb:40:37:
         ee:2b:d7:f0:18:45:c0:f5:bb:fb:e7:d0:9d:1d:f7:2b:f4:e8:
         f2:ac:46:04:92:46:f6:45:36:d1:a1:af:87:15:d2:34:27:55:
         eb:4f:53:f5:e3:f9:5f:74:73:3d:09:03:13:00:ae:92:5a:21:
         10:00:9f:a4:78:91:96:a9:e3:a3:fb:b4:51:85:a7:0d:f8:cd:
         52:4a:12:06:fe:8d:00:f5:57:a3:7d:13:84:43:b5:ff:69:78:
         02:95:d3:f0:63:aa:c0:18:78:26:92:2e:c0:53:e8:2f:ef:80:
         18:f2:a2:d4:e3:03:4c:cb:21:b6:34:f5:e3:1e:a0:58:b1:55:
         4c:6d:a3:cb:8c:1e:d1:ad:75:58:d8:0b:ad:23:80:31:d4:11:
         37:46:ad:3d:59:47:b8:07:cf:3c:0f:75:56:b7:0d:9f:a4:65:
         b9:d7:36:64:11:c9:85:ce:d3:41:71:f7:9d:45:22:86:c8:65:
         e6:18:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----