Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          n07rkf+6BmfaH+CKHBHAtDvxpdEVkAvvH4ZClqRgqRM=
Subject key identifier:   8D:3A:0E:82:DA:80:91:DC:E7:18:E1:06:1E:85:D4:D2:74:B0:19:53
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       01962F3DC9A86DE36A7A0DD59737B5BEA7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
                          2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: aJQvTYY3TuJyF+T++NTgOpF78hRelCYrM17mGn9bWrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:a8:6d:e3:6a:7a:0d:d5:97:37:b5:be:a7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=8d3a0e82da8091dce718e1061e85d4d274b01953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:0c:24:60:ff:34:29:37:20:3c:82:ed:fb:
                    0a:bf:43:0a:13:76:bb:90:cb:03:7b:44:e8:a9:cf:
                    44:d2:17:16:5a:45:06:19:10:24:51:c9:68:6c:a6:
                    f9:18:82:be:b2:78:65:58:7b:e7:d6:c3:27:a9:32:
                    3f:85:78:ea:60:61:3d:af:b6:5f:6c:b9:97:38:d8:
                    3e:7c:b5:79:8f:50:11:df:5d:6c:6e:fc:a4:b6:24:
                    54:fc:aa:e5:6e:2b:f8:b8:fb:03:0d:cf:58:1b:3e:
                    b9:51:05:3a:6e:d2:fe:c6:d2:07:51:06:fa:b5:9f:
                    e9:c6:69:c7:e1:c5:18:da:48:30:dd:c1:75:07:4b:
                    a5:e2:64:df:2e:cb:5b:d6:ab:b0:c8:4e:e6:a7:aa:
                    19:86:47:c6:0f:bf:be:be:26:b9:b0:14:26:d9:5f:
                    bb:78:24:8e:1f:29:35:a4:5b:c4:4e:39:76:69:57:
                    4b:11:3e:98:3f:c6:ff:80:8e:05:de:f7:87:3a:b6:
                    59:97:f8:c8:2c:58:85:72:17:a8:00:f9:07:4f:22:
                    d3:38:39:c9:13:9b:65:fd:9a:f6:56:8a:e4:86:20:
                    16:90:9c:c5:e2:7e:62:68:40:55:df:af:a1:ec:f5:
                    1e:d1:12:9f:79:95:d4:aa:5e:23:aa:fa:bf:bb:d9:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3A:0E:82:DA:80:91:DC:E7:18:E1:06:1E:85:D4:D2:74:B0:19:53
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:42:a1:57:59:b2:6a:89:d3:19:70:a5:58:17:f0:e8:eb:
         aa:6e:45:c8:63:16:c6:b3:35:51:ed:e5:2f:20:a8:fa:2e:8f:
         63:87:db:4d:af:79:9f:61:db:30:10:f7:b9:66:a1:c6:6d:d1:
         88:77:db:ba:45:ca:44:82:e1:fe:07:27:0b:ed:98:51:e6:2f:
         8d:f0:a8:ff:6e:fe:0c:c2:d1:29:d1:22:bc:30:5b:62:97:76:
         0f:3f:42:e0:47:bb:93:d1:03:84:20:22:49:b6:a9:e0:a4:7e:
         c8:e2:94:8d:d8:64:88:ab:2e:04:d7:e2:dc:d4:d5:5e:9d:70:
         5d:71:3a:47:d6:66:f8:fe:63:e8:9c:29:41:e3:d4:02:83:ff:
         17:7f:b9:f0:12:85:8c:46:21:fb:90:03:24:a3:60:b8:48:f5:
         a9:3a:2f:fa:8b:2a:7f:62:2f:d7:52:e8:ea:84:92:9a:7c:97:
         18:27:ee:be:4e:21:26:a9:5e:c5:7f:5d:8a:2c:88:e0:18:94:
         9e:0c:86:4c:17:c5:4e:17:e4:77:ce:4a:22:c5:7c:8e:48:34:
         f8:3e:9b:8a:9c:fc:6d:3b:87:60:49:6c:72:09:4c:fc:1f:65:
         7f:10:4e:4b:77:3e:bd:0a:0a:a5:4e:87:22:e8:5e:11:d7:87:
         05:57:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----