Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
File:                     bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json)
Hash identifier:          mA/IVXmtqzyekmJa3OJpds8fv4EFOOrnCEmgrHhD2iA=
Subject key identifier:   C8:18:A9:28:B6:C3:78:20:E2:E0:42:06:9C:6F:3E:C9:A1:97:C3:AB
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Certificate issuer:       /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial:       01962E617A1D55672A197E300461DE9D621A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
Manifest number:          1569
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=)
                          2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=)
                          3: UTgRulJfmraGi0toko70wCEmGFA.roa (hash: /+qQOZA++jaLu5bGfT6khqkHyM9MBYNcQ493XjcwmbI=)
                          4: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=)
                          5: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=)
                          6: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=)
                          7: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=)
                          8: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: WN7qtZ84EyDDJuBQwirSqFejJ73Am2Ce1J/jgOGK5FI=)
                          9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=)
                          10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=)
                          11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7a:1d:55:67:2a:19:7e:30:04:61:de:9d:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=c818a928b6c37820e2e042069c6f3ec9a197c3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:6f:34:35:b3:d4:e8:68:76:4a:eb:a8:21:
                    fe:bc:bc:de:51:0c:c9:e8:ca:c2:1a:5d:a2:8e:18:
                    5c:ee:13:dc:c9:5c:11:d3:2d:f3:81:fd:df:d3:36:
                    26:1c:77:a8:31:06:d2:1a:d0:8e:55:fd:7c:6f:6e:
                    40:cc:7c:5d:07:c3:30:41:c5:a9:91:19:21:d8:43:
                    4e:df:ed:d5:0c:3c:94:b8:5f:a9:11:fe:23:4a:b8:
                    58:23:21:00:51:ab:4f:5d:66:1a:cb:ff:04:91:41:
                    27:3b:06:d9:89:b2:8e:e9:ac:72:cd:47:39:90:c7:
                    65:c1:84:32:7c:73:c0:75:da:70:76:35:a1:5a:c0:
                    8c:6c:20:c0:ad:b7:44:d4:f0:bd:23:6f:d1:be:2a:
                    c4:21:ce:3e:d0:45:7b:f5:27:06:0c:5e:8d:d0:c6:
                    28:e7:2d:d0:88:dd:1d:b3:db:a2:b0:a8:3d:a1:ed:
                    91:1e:c3:09:f7:2a:5e:a9:d3:fd:13:f2:9b:f4:57:
                    17:a8:e5:12:7b:c3:bd:95:26:7d:55:54:da:48:c0:
                    77:91:24:70:bb:32:32:60:f9:23:38:17:5f:6f:55:
                    9a:2a:2e:3a:9d:04:6b:16:97:ed:0e:bd:91:e2:06:
                    21:10:f7:02:2d:a1:d9:e4:fa:d8:12:e0:73:c6:26:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:18:A9:28:B6:C3:78:20:E2:E0:42:06:9C:6F:3E:C9:A1:97:C3:AB
            X509v3 Authority Key Identifier:
                keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:23:be:49:ed:0f:21:0b:24:c3:cb:9d:10:9f:90:b4:4f:
         31:27:ec:61:4f:4c:4c:e0:7b:87:3c:b4:41:01:eb:65:fe:4b:
         db:76:e1:7c:5e:8a:94:5c:cd:bd:1b:c3:22:78:1d:78:07:2e:
         d7:cf:0e:c3:39:ab:df:47:6b:dc:82:71:a8:62:f8:9d:72:25:
         25:c2:b5:74:14:1f:01:51:13:37:49:52:5c:ea:63:ed:0c:dc:
         45:b0:92:ce:6e:dc:a5:58:47:2f:4c:c7:ea:d2:e2:1d:84:b9:
         da:15:3a:b9:0d:2a:a8:43:71:00:7c:fc:3d:31:19:42:14:53:
         07:69:e5:c0:0a:cb:55:35:a7:08:b4:a3:48:1e:6a:6c:5d:37:
         74:74:ca:c2:2e:9c:c7:41:fa:c8:f1:65:b7:cb:ff:d9:dd:fc:
         73:4a:aa:d9:71:4f:d3:da:01:49:58:a9:67:00:26:f6:97:ca:
         a1:64:ba:16:62:3b:87:c3:39:14:35:d3:61:84:59:99:2c:23:
         d8:44:76:13:9c:28:9f:ca:79:bc:13:19:36:a9:a3:82:1b:65:
         9a:80:3b:c2:5f:1b:77:22:0a:1b:5e:bd:c4:84:42:b5:0b:a3:
         26:e7:48:f3:ad:2a:4d:54:3a:30:29:ae:23:45:d9:c9:7d:8c:
         32:20:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----