Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          tegTwAyDmqD8e+wgllDerD/+yqRwbEMK6axdXN3ep4s=
Subject key identifier:   83:E8:DD:B7:0B:F8:F0:DE:76:50:71:60:45:F1:DB:F3:9A:93:93:AC
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       01962F74EB3BC191BDF12C2CFA878B522F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          1236
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
                          2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: R9UJ2nzKs7NMPYUi6StBbZ4e7WMnL12AenjLPp1AWD8=)
                          3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
                          4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:3b:c1:91:bd:f1:2c:2c:fa:87:8b:52:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=83e8ddb70bf8f0de7650716045f1dbf39a9393ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:b1:a2:8a:bc:51:0d:68:0b:18:a2:14:6e:
                    55:6b:57:20:22:3e:f4:98:c1:18:e2:79:ec:49:f3:
                    5a:d6:fb:56:58:59:ac:ea:06:60:ce:31:76:26:5b:
                    5c:25:ba:21:ee:db:9e:62:85:b2:d3:37:a4:b0:56:
                    b4:4e:bf:a4:36:07:77:8e:f2:98:6d:1b:7c:aa:ff:
                    95:53:55:ea:97:f7:f3:73:3b:4f:d7:58:2e:f4:d5:
                    33:8f:34:80:3a:38:ed:6a:e3:12:b7:29:11:2b:31:
                    37:bb:67:06:f1:a6:30:13:20:1b:86:cd:36:37:7a:
                    cf:04:63:bc:9f:99:b8:59:4d:39:9b:70:78:21:90:
                    0c:a5:0f:bc:3d:f0:bb:81:99:3a:1c:e6:87:9a:36:
                    b0:f2:71:4b:c1:7d:d0:0d:64:5f:fc:33:79:7b:f6:
                    44:86:a9:53:34:62:ba:82:63:ed:cd:10:10:6d:97:
                    72:07:19:5a:19:cd:aa:e4:86:89:e2:11:0a:5e:76:
                    cb:aa:da:36:19:81:ed:38:bc:53:9e:eb:77:71:91:
                    89:7d:80:3f:36:40:8c:53:96:85:cd:39:6b:b8:cb:
                    9d:ec:ff:13:dd:30:c0:75:7c:df:11:ff:21:42:7f:
                    00:e9:47:76:d7:60:12:77:95:79:7d:2f:f7:e8:6e:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:DD:B7:0B:F8:F0:DE:76:50:71:60:45:F1:DB:F3:9A:93:93:AC
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3c:95:a9:49:99:5c:3a:aa:66:57:40:56:18:4e:9e:bf:ef:
         e8:81:67:a6:6a:ac:89:6c:e9:d3:b3:2d:74:d1:62:14:c2:17:
         ad:eb:2b:4a:b9:02:77:80:c9:a0:d3:25:43:9d:c3:3e:8d:f0:
         d9:17:8a:29:26:54:f6:52:4a:fb:bc:8f:95:94:d2:e9:31:e9:
         b8:7d:68:95:40:cb:65:9a:bd:b1:8a:af:e9:db:e2:f7:e3:2c:
         5a:af:39:0c:17:cb:4d:67:df:6e:17:7c:b7:ac:82:0c:69:90:
         d6:c5:7a:12:b3:65:52:0e:65:e8:21:a4:d8:11:f8:33:41:91:
         71:96:a4:b9:27:27:44:f4:62:c8:e8:08:f5:e5:e7:36:a3:46:
         0e:13:b0:0e:8c:88:43:68:01:57:7e:a0:7f:aa:8d:2c:55:12:
         49:3b:96:39:69:59:79:ba:be:08:87:12:f2:40:aa:7e:6d:06:
         d3:77:67:32:22:71:1c:50:ed:c4:b3:61:f6:84:6c:12:c6:9a:
         30:03:5f:14:6c:a0:d9:8b:c8:70:76:d9:d0:c2:fc:b1:6f:e6:
         9f:a6:0c:8b:01:af:ea:a8:1f:4d:ac:ff:19:28:42:d1:dc:90:
         f6:c8:ad:f5:cf:a2:a2:5a:b3:2f:2e:1f:8f:2d:03:71:82:46:
         6b:cb:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----