Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File:                     b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier:          VFYQA4m6JDdYcBB4waYIfqgyueD+o3rVLemMYOuf9Po=
Subject key identifier:   7F:7A:E1:1C:13:66:01:0A:2D:95:F3:72:B4:55:25:B8:44:85:74:23
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer:       /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial:       01962F0719DF1F37F14316E035B7F1F0B318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number:          074F
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: 6C-l-Krcx9diUb3Zftv9sijenyA.roa (hash: 8qEJJSdL4/1lUqWVRQzqlshhqS0031IQa9tDeTSS/GA=)
                          2: PHw1GAOmBnBvGouxlCLHPCg3QCo.roa (hash: M7Tf/O06Ds+1gFag6lHjuDXeoUB2izemcywbR990N8U=)
                          3: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: XDkmF2ssi9LC3kQ1BiLvYznGyqeXxPin4ZwdEMa5d4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:19:df:1f:37:f1:43:16:e0:35:b7:f1:f0:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=7f7ae11c1366010a2d95f372b45525b844857423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:f6:df:07:a9:f5:1b:53:95:04:18:3e:d4:
                    48:ff:90:54:87:f9:c3:01:4b:93:f8:fd:41:7e:96:
                    6d:27:b9:c7:59:63:77:bf:9b:89:5e:e9:bc:06:cc:
                    9e:7a:05:31:df:09:2f:60:a9:24:57:e6:c9:4d:af:
                    02:d4:d5:ce:10:72:8a:22:c6:a2:82:30:2c:5f:fe:
                    d6:bd:58:ac:3c:c7:39:f9:e9:5d:ba:de:81:c4:52:
                    a0:d3:8f:cc:c7:45:44:31:26:b3:17:01:0b:20:19:
                    eb:75:22:21:50:22:33:cb:df:47:b9:eb:d6:ab:57:
                    aa:fc:94:5d:59:e2:3c:24:1b:1a:7c:9b:a5:17:03:
                    f6:85:de:a7:36:1f:93:aa:ef:ca:9c:f7:e0:2b:7c:
                    44:3f:5d:57:d4:77:3f:4a:52:34:0d:68:84:5f:b9:
                    b0:b5:5d:e7:2a:dc:e9:a6:2b:48:d7:ff:e4:75:c8:
                    40:b4:50:6f:ae:46:5b:27:64:b8:83:8c:f1:b8:9f:
                    9b:07:00:06:ab:ac:b4:c9:50:66:13:ea:0d:6a:1f:
                    ae:e5:04:90:54:a1:05:5a:04:dc:47:97:a1:0e:7f:
                    33:44:14:e2:51:0c:6e:81:51:5a:3c:2c:fd:e0:84:
                    18:2a:ee:30:9f:63:bb:23:f6:0a:c1:c2:26:ce:df:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:E1:1C:13:66:01:0A:2D:95:F3:72:B4:55:25:B8:44:85:74:23
            X509v3 Authority Key Identifier:
                keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:17:a2:bd:8e:f5:13:b9:3f:7b:8a:59:d7:21:32:66:e7:
         ac:ac:e4:80:56:e3:a7:fa:df:7c:b8:5f:14:30:58:e2:a9:a7:
         78:50:56:53:f0:fb:1c:f0:51:18:da:f7:13:9e:a1:63:8c:dd:
         6c:a4:e0:64:d5:d2:08:e7:dd:45:06:7d:11:97:30:85:96:14:
         af:7a:3b:1f:05:1d:6c:74:ea:32:57:96:54:f4:be:1c:e5:c2:
         02:d6:25:fd:01:02:a2:47:41:6c:ad:0b:80:84:97:d2:27:03:
         ac:8d:df:7b:aa:75:54:26:2c:62:be:bb:d5:4c:b8:8a:13:22:
         45:5c:ca:6c:d2:53:45:57:fb:a4:2d:11:a8:02:1f:d7:07:53:
         92:ee:a4:2d:2f:8b:98:ce:ab:7a:12:2c:42:28:d6:1b:ea:fb:
         04:91:2a:e5:e3:95:1d:0f:1d:8f:02:70:ce:5a:86:fe:51:0a:
         1f:a9:c5:85:3b:e7:36:1f:72:e3:25:52:fb:05:0f:9f:d3:b6:
         83:95:d2:82:80:f5:72:38:84:4d:7d:96:e5:85:73:8a:aa:92:
         f5:24:a3:95:bf:10:42:5f:aa:6b:6b:ab:86:9b:4d:e9:57:02:
         7c:9b:db:d1:13:41:d1:e2:97:7f:26:37:e6:31:be:94:9a:29:
         c2:ca:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----