Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File:                     bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier:          JDDlEFSbr2syIwrtqQkEXz5WRypEXd4FY/BN6t8nSZc=
Subject key identifier:   EC:08:14:53:04:4F:AB:6E:71:4A:6F:0A:2E:F1:DF:A0:1B:48:46:43
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer:       /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial:       01962F3D86E98ABD2EC8993C1CBEE4BAB5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
                          2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: nCpmfymmYnK26J+TuWa7PugaSCDwBL86JgPu0WOXOJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:e9:8a:bd:2e:c8:99:3c:1c:be:e4:ba:b5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=ec081453044fab6e714a6f0a2ef1dfa01b484643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:bf:4c:05:1f:27:df:91:7c:13:18:42:4a:
                    20:54:4c:23:ac:a0:9d:bd:62:2f:59:a4:22:f5:bf:
                    24:cf:6d:35:3d:08:8b:ed:69:03:a0:4d:9d:70:91:
                    b6:0b:bc:a2:db:ce:63:4b:68:fa:23:40:0a:08:a2:
                    dc:99:b5:08:d7:f0:7a:aa:a4:f8:2d:f4:ce:05:ee:
                    3d:cf:5f:17:a6:7d:1c:50:ed:02:e3:97:c8:2a:0e:
                    69:16:2d:85:1b:09:fc:dc:ac:a9:2c:22:8f:0f:e7:
                    80:d3:94:41:20:1a:fe:8c:ed:70:49:6e:98:49:9c:
                    8c:a6:e8:7a:b1:c3:92:0a:65:f9:02:d0:da:20:06:
                    7a:b8:a2:5d:88:7c:2a:de:0b:e9:70:96:3d:5a:65:
                    fa:1f:a8:ab:80:ec:e2:a2:40:0c:d2:60:51:d5:0c:
                    8f:70:0d:ab:ca:01:d1:92:20:7a:47:f0:91:a5:55:
                    01:73:93:d0:ea:a0:4b:f4:09:67:22:f8:9d:1d:f8:
                    ca:1f:4c:7e:a1:52:16:2b:86:f7:37:39:53:76:0b:
                    49:c0:97:88:a6:24:6d:53:28:c2:f5:0a:87:65:04:
                    bb:c7:3c:53:57:b6:bc:f8:84:2c:8d:a1:fa:11:9d:
                    35:1d:e5:96:a3:4b:39:fc:77:0f:c4:f3:01:05:ff:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:14:53:04:4F:AB:6E:71:4A:6F:0A:2E:F1:DF:A0:1B:48:46:43
            X509v3 Authority Key Identifier:
                keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:a5:c1:65:40:c8:bb:e7:d0:f2:15:b2:2d:de:b4:77:f8:
         40:03:46:71:1c:0a:d7:46:b4:8f:da:28:bd:b2:ac:04:1c:44:
         70:1e:01:fa:66:ac:e2:1f:17:f7:8d:e2:0b:a0:20:ad:bf:79:
         48:81:8c:6e:37:65:df:cf:99:90:2a:db:ad:f1:7a:b2:42:33:
         d7:9f:07:b7:fe:01:3b:f8:40:0f:fc:d9:93:9d:65:8c:19:ea:
         10:9b:16:25:49:fb:d4:18:87:e9:39:96:f6:35:0a:9b:b1:0f:
         73:8f:1b:fc:ac:cb:2a:2b:c8:11:8c:45:02:01:64:32:e8:3d:
         b8:ae:9c:3f:a0:84:56:51:cb:b5:fe:6d:f9:06:14:bf:99:ab:
         de:1c:ac:93:c1:fa:19:7b:b3:1b:54:44:f7:01:5d:21:80:c8:
         4b:9c:e7:ec:be:79:93:fd:10:64:84:99:9f:a5:33:03:e2:df:
         78:ee:39:e7:5c:20:30:52:35:48:ae:c3:e6:9e:53:3e:08:48:
         b1:bf:30:ce:28:54:74:24:b3:42:63:4e:38:82:80:da:59:17:
         2b:6c:99:f8:08:22:9a:d1:20:36:92:ad:ba:40:62:b7:f1:84:
         7f:fc:fa:a7:ce:59:ab:ea:80:b8:56:cf:54:2c:50:af:b8:cc:
         15:91:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----