Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File:                     b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier:          br1UYsGXg0j3ZUhzkNz3pU7mOgCbMyA/DsJEIv19DLo=
Subject key identifier:   FC:8F:67:73:22:AA:FB:D5:CD:66:72:A9:05:ED:6B:D9:0E:61:6E:D1
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer:       /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial:       01962F74CB7B01DDD5599370832032DE60B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number:          0191
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: VPkNXb3ZkdJL4ruOcWq2B8+VAGNEV20augytUOCJ9m0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:7b:01:dd:d5:59:93:70:83:20:32:de:60:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=fc8f677322aafbd5cd6672a905ed6bd90e616ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:78:10:ca:7d:3b:26:e8:a4:ed:ea:bb:0e:
                    0c:aa:af:47:11:45:15:f8:41:4c:20:97:53:72:46:
                    ac:0d:bb:e8:f0:81:04:a5:95:65:45:6b:04:a9:bd:
                    15:99:e1:0e:b9:c4:1d:7f:ae:e2:19:54:85:1d:dd:
                    88:8f:a0:db:76:04:2b:10:3e:32:1a:e7:e7:98:96:
                    4b:92:ca:c3:67:c3:93:5f:fe:78:a9:2c:38:ef:b3:
                    06:cb:d9:3e:48:42:2b:14:6d:5b:bb:60:ce:15:7d:
                    0e:ee:5c:5c:8a:d8:24:e3:d9:ac:bc:c4:36:1a:1a:
                    b3:d0:fa:b0:d9:b6:df:42:55:4d:74:38:5c:20:5a:
                    cb:b3:98:82:f2:18:68:74:5c:8c:7e:7d:4a:ce:1a:
                    e1:48:dd:a5:a0:3d:16:b3:a1:bc:e7:a8:93:7d:2c:
                    69:6c:77:79:89:87:54:79:1e:66:0e:11:10:32:85:
                    2e:b5:96:1d:8b:8a:3e:70:66:d4:85:1d:4b:80:c6:
                    79:c3:4a:79:a3:26:4f:df:2a:68:bf:ea:79:bb:b0:
                    d9:a5:dd:fa:eb:9a:df:79:69:33:cf:4f:3f:eb:b7:
                    35:8e:71:d8:2a:d3:d8:b8:4e:6f:76:55:e0:bb:2b:
                    79:b0:4b:d2:2c:04:34:21:3a:eb:48:52:89:56:68:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:67:73:22:AA:FB:D5:CD:66:72:A9:05:ED:6B:D9:0E:61:6E:D1
            X509v3 Authority Key Identifier:
                keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:19:af:bb:05:a7:e1:49:6c:6c:b1:6e:c8:5b:1d:7c:0c:a5:
         b1:6a:9e:87:97:f9:ae:3c:d9:2a:58:8f:a2:71:e8:8d:52:f1:
         29:a9:5c:86:12:a9:08:df:9e:34:ae:c8:aa:32:17:51:1d:26:
         96:6a:cd:b2:dd:1c:a5:6d:fa:c9:cc:d0:82:1c:a3:15:27:c0:
         17:0d:cb:f0:9f:bc:22:cd:d8:ed:ff:c8:0c:74:06:e8:9d:8c:
         ed:0e:04:c4:3b:20:60:8e:01:28:ee:01:5c:e8:db:11:9c:d6:
         51:fd:c6:16:da:11:30:38:d3:05:d6:3d:00:1f:0e:21:3c:4b:
         63:88:79:26:bb:e7:ea:db:dc:91:d6:8d:ad:69:28:d7:bc:0f:
         f4:0b:c5:07:03:8c:50:4b:db:35:95:72:f8:7c:18:c0:3e:3d:
         89:2e:28:3e:4f:c2:e7:c6:3e:1e:4d:b5:b9:3d:6c:44:e3:bd:
         96:83:d4:8f:4b:8c:3b:4e:66:e0:13:56:1e:9a:23:35:21:5c:
         de:a3:08:3c:f0:43:49:10:58:38:95:76:3a:99:c1:57:e1:e4:
         08:c2:95:a2:b4:d6:bf:90:33:8c:e1:84:a2:ed:36:56:0f:17:
         23:a0:76:d1:f2:7d:a3:a7:c8:0d:db:33:ce:0f:db:c8:54:28:
         42:8f:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----