Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          vuRlkPVY5JvYgJ93M+Pe1Rk5Y8NFG7KF2u4gjYK16kE=
Subject key identifier:   F3:1A:6D:60:DF:73:57:75:F3:98:BC:91:6A:9E:B4:8C:38:FF:A2:2A
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       01962ECFBBE7E09D128FCC5F97DD1A39B2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          016C
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: AALa0wwSWCPO6PAvCMgo3tYB+YoM7oHTlcEWpVjsN+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:e7:e0:9d:12:8f:cc:5f:97:dd:1a:39:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=f31a6d60df735775f398bc916a9eb48c38ffa22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:00:94:e0:73:b1:84:b6:bd:dc:35:69:a2:
                    90:5d:d7:3a:f9:6c:cb:8d:25:8b:55:93:90:3e:d1:
                    4c:44:20:d8:ab:0b:8e:05:05:07:62:16:6a:a5:b5:
                    2a:72:8e:1b:a0:53:72:a6:21:28:87:5d:11:5e:58:
                    fe:c3:35:35:93:5d:60:4d:9c:c9:56:a5:79:fb:52:
                    d2:d8:d4:de:9b:ba:22:a3:9a:1f:70:23:79:ba:94:
                    1e:93:92:13:fe:38:d3:b7:39:08:05:8b:c2:72:33:
                    a1:55:30:58:fd:5b:c5:79:62:62:8c:4d:0b:c7:49:
                    78:fc:15:c2:a9:7e:34:12:5c:68:98:9a:58:f9:0e:
                    d4:0f:e0:8a:5e:40:ab:37:b0:64:f0:d7:fa:23:11:
                    ab:4e:1d:f1:96:b1:2a:f1:ff:44:6c:a6:f9:a1:5b:
                    a4:68:80:04:20:71:c8:f0:41:c0:3c:a4:c6:49:fb:
                    a7:07:06:b2:05:ca:5c:22:8c:eb:4d:b8:46:08:11:
                    87:5f:7d:21:da:0e:ba:3a:ed:64:f7:e6:8f:1c:77:
                    05:71:d6:dc:2b:14:66:9e:13:91:75:a1:b9:94:ed:
                    0e:2e:58:20:01:9a:c6:f8:34:a8:c7:18:1e:c3:e3:
                    d9:15:20:cc:16:ca:44:5a:93:37:61:1d:13:d1:70:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1A:6D:60:DF:73:57:75:F3:98:BC:91:6A:9E:B4:8C:38:FF:A2:2A
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:a2:7b:0a:72:a0:9b:25:9e:05:62:d2:0c:b9:a8:1a:31:
         f3:2d:c0:52:f8:d9:66:98:4e:ff:b3:9b:f7:2e:34:b4:c3:cd:
         a4:88:45:34:de:6e:1f:e9:7f:b3:53:bb:7c:5f:0b:05:ea:42:
         f5:9c:42:21:87:11:b9:b9:58:3b:9d:9e:41:d5:93:29:a6:fc:
         61:78:bd:00:88:55:ee:4c:f9:15:69:8f:56:d7:d0:6a:a3:9a:
         f5:20:71:6b:f4:e7:da:4f:a3:4b:ed:cb:41:9c:f1:89:f2:14:
         74:03:d9:fd:bf:5b:35:32:4a:2e:c7:cb:fd:46:46:17:90:56:
         91:2c:ca:3b:74:0c:57:c8:e7:f3:82:0e:dd:ad:76:5d:a7:9d:
         a3:14:00:47:ff:89:33:17:83:42:80:19:be:22:88:d1:49:3d:
         ba:52:fc:df:98:fd:7a:12:f0:99:ce:fa:88:f9:cf:68:ee:af:
         37:d4:71:ae:ba:ab:3c:03:7e:bd:27:d2:4f:c2:7d:a7:c4:12:
         c6:9c:43:e3:be:90:72:9e:f1:44:74:68:27:fc:71:b4:32:f6:
         f4:f5:75:0f:c5:0e:36:ba:8a:57:2b:98:ad:f8:a2:0b:41:a9:
         5f:fd:75:b7:3c:cf:7d:b4:e5:cf:58:70:83:08:d7:7b:30:f7:
         78:e5:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----