Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File:                     bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier:          Pu9fB3+0oC1SvbOESzx0aaI2Qw3HqIfc3ObaAChbi90=
Subject key identifier:   3B:D4:1F:DA:7C:1C:BC:6F:26:0F:EC:66:72:4B:5C:44:D0:AD:0A:A4
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer:       /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial:       01962E98878FF8C8CD7AB90453699E4CDDCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number:          066C
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
                          2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: tzEIUxn1bv8Bc5J3WOP84mi/fvI6U0fBeth2LrjrYIQ=)
                          3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:8f:f8:c8:cd:7a:b9:04:53:69:9e:4c:dd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=3bd41fda7c1cbc6f260fec66724b5c44d0ad0aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:9a:71:eb:13:16:cb:7a:e8:3b:b5:48:49:
                    c1:a6:3a:f6:df:b1:1c:a4:b7:35:19:fa:b0:01:3e:
                    30:93:f3:ef:97:40:a5:21:55:46:86:88:52:3f:65:
                    0e:d1:2b:49:cf:65:f9:d4:07:0c:fd:24:07:7a:87:
                    c8:19:a5:9c:ef:b3:15:25:b2:e0:8b:15:9b:d9:57:
                    3c:85:38:68:57:29:ad:8c:1b:f1:2a:50:1a:27:d1:
                    2c:ef:31:73:04:ec:f9:cd:79:3a:02:e5:fe:af:98:
                    64:a7:e2:9d:cf:c6:93:ac:a3:47:26:c5:c3:7b:29:
                    72:85:6e:8c:2a:3c:cf:25:fd:7b:e9:73:c1:72:9e:
                    bc:0b:0c:3e:7e:ff:fe:72:ac:15:e8:28:05:25:e6:
                    08:c5:be:8e:6f:ad:b2:67:60:a9:11:52:3c:25:06:
                    9e:3f:04:65:ed:62:30:79:c8:a6:cb:56:9d:3a:7c:
                    95:55:a6:23:fe:06:b5:b8:45:5f:f6:ab:dc:bb:23:
                    c8:85:60:00:f0:10:ce:23:19:0a:5a:c4:94:51:9c:
                    30:20:dc:b4:5f:74:e9:f7:06:d1:98:1c:c2:96:c5:
                    a8:60:3d:d8:35:57:03:b2:fd:31:f4:d2:a3:20:87:
                    a0:fc:19:78:d2:4c:f6:da:73:1e:f0:73:59:63:e4:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:1F:DA:7C:1C:BC:6F:26:0F:EC:66:72:4B:5C:44:D0:AD:0A:A4
            X509v3 Authority Key Identifier:
                keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:64:32:86:c5:43:b1:0c:ab:b6:bf:dc:b8:ec:37:0e:bd:0d:
         e4:bf:02:30:e1:68:96:c5:22:c4:4d:68:a3:6e:12:37:aa:85:
         4c:e6:28:14:c8:96:12:07:5a:5d:0d:77:ef:6d:11:45:a4:3c:
         ea:e8:4f:09:8a:65:31:b1:3a:5a:1f:20:18:62:29:8d:23:0c:
         1f:d6:2e:47:38:d8:07:f7:5b:5b:a4:84:54:25:3b:68:79:5d:
         a2:0a:e3:07:dc:74:99:b4:c6:59:14:8c:88:98:d3:db:e0:fa:
         63:db:f8:24:a1:c1:7e:5d:4f:45:52:f5:76:e8:9d:1c:7a:be:
         12:1a:a6:43:ed:8c:4b:d8:14:b2:cb:f7:fb:f1:c4:55:48:5e:
         62:4a:16:6a:9f:2d:24:06:29:a5:25:f3:c7:26:08:a5:06:bd:
         89:56:2c:19:f0:22:48:ce:c9:c6:d8:f8:93:c3:af:6f:32:e9:
         29:1d:bd:90:40:22:66:e9:b9:aa:13:9b:04:77:08:c9:ba:07:
         f0:da:aa:cd:15:31:f3:11:5e:e7:9f:64:d3:00:df:22:7a:8c:
         f0:b3:56:a7:13:98:66:16:36:b4:c8:d8:e9:2a:21:3b:09:f9:
         06:ba:79:ab:60:b9:fd:aa:87:ea:18:0d:d0:0f:7e:25:41:64:
         60:86:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----