Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File:                     bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier:          DHuPUQd9BkOQYl4oKoOX4t8EI2OMU/BNl1kMm1Nz3/s=
Subject key identifier:   FB:92:EE:6B:F7:29:3A:6A:CE:A8:13:86:5A:10:C8:1F:92:76:7E:5F
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer:       /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial:       01962E2B017B680E22249D0EE744D7CF30C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: uFXnIg6XyaBttDUpl4y8CMAWMpXiYyHOcEGurLbgw5s=)
                          2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:7b:68:0e:22:24:9d:0e:e7:44:d7:cf:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=fb92ee6bf7293a6acea813865a10c81f92767e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:74:a8:54:6a:4f:34:28:00:40:86:ad:4a:
                    21:43:06:7a:c7:7a:a1:9a:99:95:3c:36:4b:bb:1a:
                    00:a7:77:51:00:99:60:d9:83:88:70:d9:55:41:7e:
                    dd:55:8d:0f:9c:d0:5a:0f:48:58:aa:ec:60:b6:22:
                    72:00:e1:d2:0f:87:c7:fc:38:9d:4a:f1:d5:5d:4d:
                    72:83:a7:df:cc:ac:34:d0:40:d2:aa:1b:07:ee:33:
                    07:90:d7:b1:e9:4f:c0:78:12:c4:35:5d:c1:89:59:
                    fb:2c:ae:2d:d2:c9:41:e5:5f:15:37:9b:d0:f2:4d:
                    c9:f1:9c:d5:14:3d:fe:cb:ca:16:60:f6:f6:9d:57:
                    de:e9:04:08:2b:37:e1:b8:d0:0c:e2:36:27:be:ed:
                    e3:67:06:28:66:06:3e:dc:37:84:0d:39:e4:51:1d:
                    cc:fb:1b:52:e4:5e:d5:8b:9b:64:a6:19:20:84:ef:
                    0f:b8:be:53:d2:d0:b7:33:48:4c:9f:60:96:2f:33:
                    59:d3:5d:7e:f3:26:c8:0d:2d:b6:62:c0:3b:0d:7c:
                    a4:df:2e:fd:b0:0e:bc:e8:6e:ef:6c:ca:aa:d6:e3:
                    1b:2c:b6:86:c3:17:45:63:df:5f:30:d9:f0:50:e4:
                    33:0e:b3:99:4b:75:4c:8d:c7:7c:e6:3d:1c:50:a1:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:EE:6B:F7:29:3A:6A:CE:A8:13:86:5A:10:C8:1F:92:76:7E:5F
            X509v3 Authority Key Identifier:
                keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:6e:06:8d:47:47:06:6b:b0:ef:dd:60:1f:dc:97:93:13:
         eb:ec:b9:54:1f:04:8d:db:3c:c4:ee:c3:3d:6a:f1:01:f0:cb:
         13:f5:5c:b7:20:ff:cc:f9:d7:c7:1e:e5:ed:ac:52:c4:c5:02:
         54:53:30:18:cd:ec:ff:80:27:8d:6b:72:14:72:7a:cc:30:63:
         6f:99:1f:66:47:dc:37:4f:57:03:c5:07:b9:02:b5:17:87:0c:
         b8:18:08:90:9f:e9:a7:07:11:c2:14:09:59:08:cc:31:c3:02:
         4b:c7:2a:4c:d2:47:f7:ed:2b:a8:a3:27:85:ca:89:d8:11:e9:
         61:1f:fe:c9:68:02:d8:22:e8:31:ac:a6:e7:53:33:f3:24:67:
         72:5a:85:78:ff:30:fa:ba:4d:55:3b:6d:6d:93:c7:85:93:1a:
         fd:2c:00:b6:0e:41:7f:9b:e6:9c:42:68:51:bd:18:38:19:6b:
         2d:72:94:f2:8f:68:80:82:96:45:77:71:c3:ca:2e:fa:e3:79:
         e2:91:40:e9:f0:5e:f4:f3:b2:8a:7e:39:1f:e6:64:2e:2e:d8:
         7a:72:c0:74:5a:44:70:a8:21:97:5c:c9:18:6d:d0:28:c5:7f:
         92:4d:c8:7b:f1:33:05:a7:27:50:81:8c:5f:ab:7b:34:c9:0d:
         2f:56:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----