Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          CrQ+yRZbnSJsP57Da4j5fdRzIxGrtOQ5L1fMS1wObc8=
Subject key identifier:   BC:D6:64:02:60:EF:E4:68:D9:77:F3:94:3A:96:9F:53:F7:4A:EE:DD
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       01962E619CCE689C29A3854A293ABDFFB0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          09D1
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: XfUj0NpAr8OmMu0Qp42SEdZHPO7UaQV1i0udhLhYbW8=)
                          2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
                          3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9c:ce:68:9c:29:a3:85:4a:29:3a:bd:ff:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=bcd6640260efe468d977f3943a969f53f74aeedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:47:86:f0:56:d2:d9:f4:8e:86:3c:a1:48:
                    e8:69:7a:68:36:01:08:5d:57:d5:d8:58:09:d9:5c:
                    1a:be:d4:1c:96:a0:e3:1b:8c:6e:85:d3:96:3f:eb:
                    75:4d:72:99:4d:bf:82:10:b8:33:43:68:40:44:a1:
                    9c:23:89:54:4e:43:d9:ef:0a:25:f5:9e:e9:9e:c9:
                    1d:33:c4:27:d7:a5:88:3b:02:24:ea:26:ae:2e:a5:
                    8d:00:0f:c7:90:cd:3f:8c:d1:01:92:ac:68:3a:3e:
                    49:06:d1:16:e7:70:45:f2:5c:85:fd:02:06:b0:03:
                    5f:8c:ce:84:93:fa:0a:e8:f8:5f:0c:92:91:40:f5:
                    99:1a:2c:67:6b:ce:92:0b:62:58:8a:34:50:04:4f:
                    78:6b:ce:4f:37:78:bf:ba:1f:d6:d5:37:ae:a4:23:
                    37:48:61:f5:e9:55:55:86:02:50:0d:26:14:4f:88:
                    ec:ee:03:5e:28:9a:6b:72:9d:b1:4b:b9:aa:1a:ec:
                    8e:91:2d:c2:ed:8d:5f:e4:af:83:d8:51:c5:46:43:
                    bd:3b:93:29:fb:73:d8:d8:b6:14:5a:a1:58:91:ca:
                    d3:c3:f5:d0:db:6b:0e:fe:63:f5:ae:54:27:09:a7:
                    01:6e:18:7e:be:35:93:1f:59:2f:a0:02:b0:77:56:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:64:02:60:EF:E4:68:D9:77:F3:94:3A:96:9F:53:F7:4A:EE:DD
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:34:1b:cf:85:3a:42:85:ac:dc:3e:54:61:cb:d8:aa:f0:9c:
         4b:31:14:f4:24:24:27:71:51:8f:52:f1:ee:5d:ad:cb:62:f2:
         45:43:d0:3c:78:bf:9e:c1:7c:1e:48:40:6c:30:d3:0d:84:3b:
         14:0c:aa:f9:4e:af:f6:ff:30:54:ab:be:6a:2d:7d:5d:58:c7:
         5b:73:d6:83:48:ff:b6:03:37:8f:c4:be:da:8b:03:4c:2e:7e:
         7f:c5:fd:3e:c0:d3:88:01:2a:20:bf:0d:7c:5b:1e:9a:3d:c1:
         d1:2c:8d:ef:19:e9:00:f9:f3:16:5c:7d:14:7b:b4:34:8b:53:
         7b:25:74:78:43:4f:dd:f8:a3:4c:46:7a:33:fd:61:dc:10:6d:
         d6:cc:4f:68:6f:de:51:93:06:29:d7:f6:32:ed:9a:e0:c6:35:
         ea:0a:3b:50:88:a4:b6:97:09:19:5e:92:1c:0e:69:b1:ba:a0:
         d4:c7:d3:31:27:8e:01:7a:eb:88:66:a9:f2:02:a6:d0:97:0f:
         23:8e:9c:f7:63:3f:27:27:28:1a:16:bd:8b:65:ca:4f:3b:67:
         ab:85:ef:e2:d2:d3:a4:db:36:22:78:f4:bd:e8:78:38:05:e1:
         d8:58:37:7c:2f:31:38:6d:74:d3:7d:08:7a:7a:dd:e7:73:7e:
         b1:06:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----