Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File:                     bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier:          B67I/7lmf2vXczXSZ3xKogjfXU/L5XN/tQBw2pB/W4c=
Subject key identifier:   2E:4C:59:16:DB:BB:7F:B4:86:4D:4C:9D:B2:08:CF:68:36:8A:E6:80
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer:       /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial:       01962F06CD63EAB284F9D75AC4F66A2DC4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number:          0D53
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: eLQ+Z5U3CRcqGY1zgzPxbbKOGZTe0c2B/zpZpF2znMs=)
                          2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
                          3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:63:ea:b2:84:f9:d7:5a:c4:f6:6a:2d:c4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=2e4c5916dbbb7fb4864d4c9db208cf68368ae680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:16:df:54:9e:7d:a1:1b:59:6d:c5:cd:a0:
                    26:e0:68:cf:d0:68:2e:47:d9:b7:19:2e:98:d5:ec:
                    95:20:9c:77:06:02:f7:93:ab:b6:cb:3d:23:8c:00:
                    5e:81:e3:60:ec:c7:67:cb:32:a7:5a:1f:57:b6:31:
                    16:3a:ee:4b:18:2e:a6:a8:19:c5:2b:3c:36:8c:af:
                    4c:c2:c5:8a:77:ea:00:81:b0:0c:26:ab:28:fd:0a:
                    14:b8:bb:56:fc:b5:b6:7a:ec:c9:c4:13:64:f3:0f:
                    57:60:dd:3d:63:e7:b1:43:54:8b:cf:45:2b:01:6c:
                    12:83:39:10:15:22:26:c8:66:55:57:aa:6a:7f:b8:
                    ea:56:c8:b4:f4:2e:b0:81:43:40:94:d1:96:d0:3f:
                    ce:41:d9:0d:61:18:0a:9f:9b:b8:11:b3:06:75:d8:
                    87:27:31:20:07:a1:c6:f1:de:e4:d6:d7:3f:83:69:
                    d5:b9:01:e5:5a:f4:01:84:ea:f2:bd:2d:e3:ec:21:
                    27:95:78:b2:77:e9:22:0c:4f:37:1a:05:df:41:0a:
                    b7:24:01:4a:06:c0:d9:ba:fd:42:29:72:6a:fd:89:
                    1f:c7:4e:b8:02:f9:36:5e:36:c4:62:f3:e9:f5:e2:
                    1d:f1:7f:61:3a:ad:2f:08:32:05:7f:ce:59:64:fb:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:59:16:DB:BB:7F:B4:86:4D:4C:9D:B2:08:CF:68:36:8A:E6:80
            X509v3 Authority Key Identifier:
                keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:11:5e:ce:a7:f3:41:64:25:31:17:dc:5c:d4:fa:e2:ad:
         8d:55:42:03:58:3e:5c:5d:32:16:3c:77:0b:48:d7:6e:2f:73:
         76:33:5b:5b:ba:a6:32:b5:ce:f7:7d:4c:42:0e:5c:f4:a1:c5:
         a3:7b:1b:88:cf:b5:6b:f2:9e:f0:57:da:43:02:5e:db:11:66:
         5d:7b:16:60:63:56:eb:d7:ed:05:6f:7f:d5:8e:28:91:dc:52:
         b8:f1:c9:67:e3:7f:ef:f3:6d:00:93:c9:8f:28:a3:eb:d3:47:
         bf:26:40:80:ce:9e:ed:79:5b:a1:95:da:c4:e1:5f:87:7d:c3:
         00:ab:1e:d5:a6:78:7f:4d:df:89:57:37:c6:ca:dc:60:c5:c3:
         55:47:6e:fa:df:9d:72:92:10:d0:43:e5:a4:78:b9:f6:af:d9:
         24:41:a4:15:bc:28:3d:0e:72:b3:29:d2:77:18:68:f6:6f:eb:
         68:0d:54:8d:e4:23:2d:2b:aa:1c:62:5f:d9:50:01:e0:1e:32:
         76:c8:6d:09:e1:f4:70:9e:7c:d1:18:69:5d:86:ba:f3:59:50:
         f5:f0:0a:fe:78:07:0f:48:13:23:6c:bc:0c:61:e1:ff:37:a5:
         17:0a:80:68:1b:be:f8:cb:98:34:f1:80:c9:99:4a:03:fb:84:
         8d:b7:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----