Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File:                     blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier:          svrvitsVYGR7bag0L33bHjH0aiDi7yQo/yQNipV/lz8=
Subject key identifier:   8A:E2:24:00:7A:A6:E4:B3:06:54:88:58:1C:94:06:4D:EF:B5:5D:A5
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer:       /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial:       01962F74C4819276B5FF3F535ADDBA757891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number:          061A
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: 50/cqaMw9EJcEgR18V1nBSffcIng2v7+L7GPYiencgs=)
                          2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:81:92:76:b5:ff:3f:53:5a:dd:ba:75:78:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=8ae224007aa6e4b3065488581c94064defb55da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:fe:1c:01:54:7a:97:3e:90:39:52:36:b1:
                    d9:e8:f2:e2:7a:31:aa:5d:d6:48:94:2f:4c:4b:fa:
                    64:21:f9:85:2e:17:91:61:2b:ba:71:59:8d:32:f4:
                    a9:f8:17:a7:21:a1:2c:a4:65:62:1d:b1:14:02:9a:
                    f1:21:39:9f:64:94:e4:c6:ed:8d:7a:f6:99:de:e6:
                    4a:5d:2a:8b:eb:c6:c2:24:ad:b4:a5:83:8e:8d:cf:
                    39:69:d1:ff:7e:2c:7c:e6:fa:63:f2:01:34:f0:26:
                    cf:53:eb:f1:e8:8f:23:e5:2a:7a:36:55:df:2e:67:
                    a9:d3:a7:59:3a:07:96:fb:34:12:e4:aa:d6:90:9d:
                    01:b9:86:6f:22:e1:64:dc:76:1f:2a:b4:48:cb:a5:
                    ef:01:24:8d:9e:8e:91:3a:fb:34:d9:a5:23:05:e5:
                    8d:21:ec:3b:76:d1:3f:08:83:81:f8:c9:c1:56:1b:
                    34:99:5f:9c:0e:56:e8:dd:91:08:83:19:81:9a:c5:
                    ec:da:3d:37:aa:2a:ec:c2:86:08:87:12:49:2b:96:
                    ff:22:30:75:97:a9:d2:1d:83:d5:3d:40:06:be:f3:
                    73:39:d2:8c:04:ce:c8:97:4f:1a:cb:2e:e8:d1:9e:
                    40:a4:53:75:46:8a:ca:2d:16:be:99:3d:16:b0:37:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:24:00:7A:A6:E4:B3:06:54:88:58:1C:94:06:4D:EF:B5:5D:A5
            X509v3 Authority Key Identifier:
                keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:84:68:ab:d1:c4:e9:c5:cc:d2:de:28:52:23:c2:a9:12:98:
         11:32:4d:4b:5d:c1:4e:c3:9c:30:d1:bf:ab:25:76:b6:be:87:
         9d:a4:57:91:ff:ba:f2:57:21:43:ac:65:d0:b3:48:13:5e:6a:
         04:48:2b:93:99:ac:5c:05:e4:2c:8c:a5:0f:d8:06:b8:44:a1:
         57:c6:34:81:b2:b5:aa:1d:5e:44:31:c7:1d:69:cb:24:f2:19:
         3b:c5:76:5a:69:33:2b:b4:98:84:5b:26:f6:fd:15:da:19:d6:
         b4:84:5d:19:c8:1a:42:8b:57:ea:8d:6a:96:e4:35:49:6c:a9:
         57:2a:27:e6:29:22:8e:18:63:ee:84:8d:2d:53:a2:9a:22:9d:
         0f:41:d8:e6:b0:39:5b:2b:50:53:a9:43:74:64:90:77:8e:e4:
         e7:bc:30:60:4e:cc:35:9d:c7:f4:c5:ce:ef:53:22:72:e8:df:
         49:e6:a4:ed:e4:d2:e2:99:87:fb:f8:4a:e5:db:24:aa:52:a6:
         84:36:b3:0c:e5:c3:d0:00:f4:08:c8:2a:db:5c:cd:04:8f:3b:
         bb:41:c3:4f:cd:9a:c7:a2:c6:23:92:6d:80:5b:1a:f1:bc:1b:
         c2:ab:d5:27:36:39:37:8f:10:c0:51:48:e7:0f:5c:f5:da:42:
         72:92:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----