Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File:                     bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier:          aQ7tznmwu2t1uSFNqHK2tKfirZLKHZz4OLPW6vHLDaQ=
Subject key identifier:   57:05:23:51:B5:DF:70:00:8C:94:DE:83:48:A6:3C:08:0C:43:4E:38
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer:       /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial:       01962E985EFD8E92E55188FE7338447E408C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number:          1357
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
                          2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
                          3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: cSNOc7p1UpmHbmT9oXvcSMn2bTyFFh4pj0c09DTdb3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:fd:8e:92:e5:51:88:fe:73:38:44:7e:40:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=57052351b5df70008c94de8348a63c080c434e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:a2:3f:1c:e1:9a:71:b7:70:1b:12:55:e8:
                    30:e8:58:c4:26:8e:bd:e0:9d:2d:4b:04:54:87:36:
                    9a:97:04:6e:ca:a8:e6:07:1d:89:05:c7:0e:52:af:
                    3c:20:5c:a7:62:e3:b9:b2:61:f8:e2:7d:52:ca:f3:
                    ba:30:e8:c5:b0:c0:86:1c:d6:3e:7b:f4:f4:86:e8:
                    9b:84:9d:6e:aa:8f:cb:0c:9b:6a:42:ed:47:88:bd:
                    2d:79:97:31:5a:dd:70:0c:f0:4c:ba:7a:33:2a:17:
                    90:e6:15:76:86:7d:6e:44:1f:40:9a:b4:64:50:14:
                    02:1f:58:47:de:ff:57:0f:f6:7e:f3:16:ac:14:8d:
                    92:92:80:8a:da:f2:94:2e:84:5d:a9:31:49:df:b2:
                    31:7e:8d:8c:aa:11:8b:83:08:00:39:46:ea:49:91:
                    1a:ba:00:1c:54:54:25:c8:7a:03:1e:2a:e4:e7:fe:
                    1b:82:a1:ad:5d:77:d0:da:83:61:84:09:6f:23:d4:
                    6d:e1:ef:ea:0c:de:cf:db:af:98:7e:ed:1c:82:84:
                    35:2e:ec:f9:fc:8f:51:1d:08:fa:a4:cb:f4:e4:ab:
                    18:4a:0c:34:4e:52:48:62:38:84:bd:b2:7e:0b:9a:
                    28:94:c1:bb:f0:69:1c:65:c2:08:c9:32:bc:d5:22:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:23:51:B5:DF:70:00:8C:94:DE:83:48:A6:3C:08:0C:43:4E:38
            X509v3 Authority Key Identifier:
                keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:a1:04:50:6e:2b:fb:19:aa:75:5c:40:8d:99:10:ba:1f:
         42:ac:ec:e6:5a:7a:63:5f:d4:1a:d1:30:f9:4c:11:ee:58:c9:
         6a:07:12:ce:bb:15:88:b2:e7:c8:4e:bb:66:db:99:53:a2:4f:
         da:a3:49:98:46:d9:8d:d6:01:31:89:b7:a1:01:28:45:c7:77:
         1d:a0:5a:47:df:90:c5:c1:4a:43:f1:7b:1e:4c:46:9e:78:e0:
         ed:63:d2:4a:18:e3:a3:5f:d0:c1:24:9e:1d:c7:a0:ea:31:8f:
         fa:26:b6:38:33:6d:fd:26:f3:6d:8b:77:bd:2e:67:ca:48:b4:
         4e:bb:1f:1f:b9:d0:ec:52:97:b8:9d:fc:4d:ee:24:77:f4:0f:
         7d:2d:8f:21:15:5f:23:17:6b:b6:85:8c:a3:83:46:d6:7a:27:
         5e:1a:b9:e6:c5:1c:e8:af:6a:c9:10:c2:fc:16:b5:3e:a1:35:
         e5:cd:46:1c:25:f6:26:63:6e:fe:9d:0e:d2:df:e0:70:01:fc:
         7f:30:28:9e:c4:fd:09:21:0b:17:c2:93:48:42:7f:a0:e8:9a:
         31:a6:2d:07:76:55:ae:53:d6:b8:c3:3e:97:64:f2:06:7e:97:
         88:5c:a8:e1:42:27:51:2f:89:58:a6:c9:8d:d6:90:d1:92:5d:
         a8:3b:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----