Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File:                     bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier:          IzBy3DNvonEPrPfVT27m0lQs9Fn1cf5YU/QCoBw4A1U=
Subject key identifier:   92:DB:8C:08:3D:D1:C2:70:EC:FF:E3:B4:97:12:95:CE:19:CF:DC:6E
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer:       /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial:       01962F06A7AC1729F82292CD956B08FC3A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number:          102D
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: DQPbaM1wj/gTDswd+dJo5vmsq6ZfIrjkIDhBfvE0qzg=)
                          2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:ac:17:29:f8:22:92:cd:95:6b:08:fc:3a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=92db8c083dd1c270ecffe3b4971295ce19cfdc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:18:94:bf:73:ca:04:6e:54:b2:34:83:e5:
                    fa:b5:34:23:d0:dc:64:d4:9a:35:17:a4:7c:b8:3d:
                    c8:d8:fb:40:d7:0a:07:a4:92:f2:80:08:86:66:80:
                    16:57:90:3a:72:78:7b:7c:8a:41:ee:39:5c:38:0a:
                    4d:a9:76:3f:0b:56:4b:9e:ed:fe:4a:37:65:9d:bd:
                    65:d5:d4:e5:91:9f:78:bd:e3:fe:c3:b2:ce:bb:7c:
                    2b:43:e8:5c:89:a5:f9:80:b5:19:cc:7e:e5:05:96:
                    c7:63:58:0a:82:9e:1d:80:5b:19:8d:57:15:f8:22:
                    f4:bf:e5:9d:3b:9e:fa:f8:27:3f:2a:ea:c5:70:96:
                    9b:79:fc:5d:12:a9:0a:d2:d8:da:f3:23:9a:1d:b2:
                    b3:7a:49:ca:56:e4:16:c7:5a:ac:86:7c:73:9d:d3:
                    82:10:8e:88:c0:40:ad:2a:d5:7a:c2:8a:71:44:42:
                    e8:5b:b6:c3:f6:db:71:d6:c2:45:17:02:1d:e9:38:
                    f8:61:52:d1:62:74:b1:8f:a0:43:d7:4f:99:2e:31:
                    f9:da:fd:2b:83:dc:99:17:d0:17:e3:80:a7:56:5c:
                    20:31:b9:2e:a8:20:2f:f5:fb:44:f7:ff:84:ef:0f:
                    e3:72:1f:79:67:58:6c:54:58:89:36:f5:c7:b5:f7:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DB:8C:08:3D:D1:C2:70:EC:FF:E3:B4:97:12:95:CE:19:CF:DC:6E
            X509v3 Authority Key Identifier:
                keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:13:8f:10:b0:0a:d7:12:11:d7:37:54:cf:ca:b8:8c:56:
         38:6e:e2:1a:5e:05:fb:50:93:03:de:a6:84:66:d7:b9:9a:98:
         b0:cd:96:66:22:6c:cb:b4:68:75:7c:d8:d9:40:80:cc:e1:af:
         34:58:35:ce:67:37:50:da:00:e7:82:96:b3:79:f2:91:4f:ec:
         2a:8e:8b:05:03:ad:a1:b7:90:27:89:e9:ca:f0:e6:c0:45:65:
         c8:e8:04:c6:69:52:ad:12:3d:7a:b2:46:52:68:a4:2a:13:63:
         16:d8:71:b1:da:de:eb:6e:53:c5:00:4c:88:b7:7f:e3:43:70:
         51:a2:72:c1:a4:12:e3:7d:d2:26:ef:24:23:30:d2:6c:67:1a:
         a7:52:61:2e:d7:35:e3:83:da:68:1d:52:8f:ef:d0:91:c7:39:
         11:6c:75:61:98:67:d9:b3:9d:8a:4d:53:dd:ed:f0:6a:14:9e:
         99:e5:c8:f1:38:0b:5c:6c:13:f9:5d:59:a4:ad:22:be:f9:1e:
         c7:ee:d6:1e:b8:00:0c:99:e1:7b:f1:93:a4:20:80:e6:20:58:
         a6:e5:45:c4:fb:a8:5a:b3:ce:69:c7:26:b6:00:91:2d:72:b7:
         e1:b8:80:9f:ab:43:6d:5d:9a:5e:b6:e9:0c:e0:0e:ef:8a:19:
         a7:b9:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----