Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File:                     bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier:          u9Up5tPW3pEAxAPsgY2TQnrldfpQv2dRDLjXJ9QqGaE=
Subject key identifier:   EE:30:A6:A0:9D:6A:11:E2:59:88:40:C8:31:B3:79:D4:62:B0:E6:55
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       01962E2B2A5CCB1AE30B28434631E355DF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number:          151E
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
                          2: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
                          3: JJI-C-9oBtcYV-r3BsX5tLItXlM.roa (hash: zjcnzqo9avDuhv+fzgrvfrwSKuXtAwZT2xHNcRH+6B8=)
                          4: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
                          5: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
                          6: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: k/XcAxR8jVP/63m5VZ08lb2dlMCRBHg/5XZHwftIBNo=)
                          7: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
                          8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:5c:cb:1a:e3:0b:28:43:46:31:e3:55:df:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=ee30a6a09d6a11e2598840c831b379d462b0e655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:2d:fd:82:ba:6a:11:56:0d:6a:83:f2:bd:
                    56:4d:ba:7a:a4:1c:27:7e:b4:f0:d1:16:3e:93:16:
                    2a:12:26:65:a1:91:c2:2b:a3:4f:95:c1:4e:39:1e:
                    07:ae:0d:5e:e0:67:f1:3f:d1:f8:47:a6:d9:9f:08:
                    6b:ca:03:a2:ce:47:d3:ed:2a:d0:c1:62:83:62:5f:
                    53:f5:77:dd:9a:5d:65:eb:a8:8b:ef:70:92:47:ec:
                    8e:d0:3f:f2:15:4c:1c:eb:18:65:b0:3f:b3:af:48:
                    a5:92:88:74:ad:af:9b:74:1f:a8:30:47:7e:54:2e:
                    16:0e:0b:b6:8b:de:a0:d8:ba:58:29:09:42:e2:62:
                    a9:04:81:db:bd:25:08:9e:d5:ab:a5:e3:f1:09:28:
                    27:56:5d:0d:ac:fb:63:74:45:2f:55:76:9b:28:98:
                    0d:a4:03:13:f7:89:a6:cc:30:8c:f2:4d:b7:7f:7d:
                    1e:3c:5f:9c:2a:9c:4e:e1:31:0b:63:38:ba:6c:23:
                    71:54:37:f8:95:69:5e:42:e4:db:91:92:98:d1:e8:
                    6c:22:a3:d4:93:b3:89:2e:25:d0:1a:99:45:55:76:
                    7c:88:ad:4e:cd:8b:01:6b:2c:89:2a:71:e8:c4:8e:
                    14:cb:df:4c:5a:6c:b9:d8:fd:e4:f2:81:3e:a3:a0:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:30:A6:A0:9D:6A:11:E2:59:88:40:C8:31:B3:79:D4:62:B0:E6:55
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:68:22:e8:94:62:6c:2b:9c:dc:d3:24:a1:84:f6:b2:ba:c0:
         79:75:33:f4:26:ae:6a:53:14:55:7b:9f:e5:a1:b8:48:b9:c0:
         fc:71:d9:11:12:92:4a:c9:53:66:fd:9f:40:bb:ba:5f:a2:cc:
         3d:e6:df:e8:b3:b2:bb:c1:0f:4c:25:a4:b8:78:99:85:a0:4e:
         43:98:22:4b:2a:3b:e3:26:a4:13:6b:7a:28:e5:f2:6a:56:34:
         60:ef:f6:31:b2:de:21:6e:3a:08:5c:8d:70:f0:03:67:9c:39:
         a8:62:ab:9f:67:d8:09:75:b9:1b:8d:b6:e4:c5:86:c1:d4:e3:
         ca:58:bb:15:2b:0a:35:bf:84:27:a1:f0:9a:f6:5e:a4:0d:84:
         c6:42:ab:a3:cf:d0:c4:a6:15:04:a4:f8:7f:46:d3:2e:1d:5c:
         54:6a:26:b2:05:27:70:b2:d7:83:8c:03:b1:1d:b7:dd:01:29:
         f0:4b:2d:35:c0:12:ca:c2:f7:be:f5:5a:0d:a4:2a:be:94:08:
         84:e9:da:0b:e3:0a:63:35:1d:a6:98:fc:35:7f:8c:27:99:5e:
         50:66:df:95:fe:bc:ec:89:26:b8:d5:ec:72:02:d1:46:64:4d:
         9e:04:d5:e8:d2:3b:75:bd:c3:e4:aa:37:ec:a4:aa:3f:9b:e4:
         77:6f:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----