Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File:                     0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier:          HL6HnrOAx2Y8qqgTccRj++5YHX6VzwivCkdG/Td2DJU=
Subject key identifier:   6F:28:6C:16:8C:D6:12:2A:3E:80:83:40:F8:ED:6D:82:F3:17:92:67
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer:       /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial:       01962E2B4CC27C2125880D01BDE83D86378F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number:          0B69
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: iO/V08DX1NSEMnHi+3fjFaB8vQgWkqpK+pb+OvhB1Fc=)
                          2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
                          3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4c:c2:7c:21:25:88:0d:01:bd:e8:3d:86:37:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=6f286c168cd6122a3e808340f8ed6d82f3179267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:7f:5b:e9:f2:4c:84:3b:ab:38:24:97:1a:
                    dd:8b:13:78:bb:72:81:b4:5a:99:f8:6b:11:17:01:
                    58:e0:86:52:f7:43:e7:fb:d5:c8:fc:fd:b0:e1:9c:
                    35:7b:e2:09:99:0d:ab:10:9e:df:71:4b:7c:38:0c:
                    17:f5:4f:d4:3b:90:48:f6:b0:75:1b:92:32:b6:8a:
                    86:3d:37:cb:f7:5f:01:bb:5c:b4:41:3a:d6:88:ea:
                    bd:d5:46:1c:55:b8:b4:9e:56:2d:6f:52:5b:40:30:
                    4b:15:c0:77:ff:ea:89:c0:69:ef:e4:6d:9e:2d:16:
                    0e:e7:f1:17:d8:a4:9e:59:0e:37:3c:4d:0d:04:bb:
                    4b:31:69:c4:e0:50:3b:2e:3f:7b:82:e7:49:33:2d:
                    52:94:d0:45:7c:69:ea:0d:89:38:82:a9:f5:e5:92:
                    77:f9:41:cd:8d:ba:28:ba:6a:f8:5a:e7:d9:ee:33:
                    96:f6:db:87:0c:19:95:63:1d:eb:f3:6c:6e:fc:b4:
                    a4:09:67:d3:ca:f1:1e:8c:2f:c0:4a:94:21:13:46:
                    e1:72:a8:94:f3:2c:6f:bb:8e:89:fa:aa:de:10:27:
                    f2:9a:df:56:4c:ad:cd:10:cd:30:c9:10:eb:d8:de:
                    09:90:4e:26:0e:96:46:64:e2:44:21:36:2f:50:93:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:6C:16:8C:D6:12:2A:3E:80:83:40:F8:ED:6D:82:F3:17:92:67
            X509v3 Authority Key Identifier:
                keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:48:cc:76:ad:49:1a:d9:c7:aa:52:74:97:ad:8f:1e:54:2c:
         13:9b:18:ef:e6:1c:a1:ec:35:fe:9c:17:09:14:c3:3d:81:7e:
         b6:4f:46:b1:36:d0:be:3c:05:95:84:18:1a:83:5a:00:c0:06:
         46:58:d9:fb:03:dc:a4:f9:82:c0:7d:7b:71:8b:65:df:6a:2a:
         81:5d:4d:43:b1:34:75:fc:d7:c2:9d:6c:af:be:f2:d1:6b:24:
         bd:ad:25:19:13:fb:54:6c:af:00:c0:d9:03:77:39:9a:67:94:
         fe:b1:fc:4a:cc:6f:b9:87:ce:28:44:f6:c3:81:5b:14:48:98:
         61:a7:fc:ba:a1:d5:e3:94:43:1d:b8:13:a9:ce:ac:d2:c8:0d:
         5a:76:5a:b3:01:5f:d5:6d:3b:26:41:11:11:09:d5:4b:87:e0:
         5b:8c:22:a0:bb:12:d8:1d:3f:83:e1:5b:ef:cd:7e:6f:27:46:
         d2:40:f0:53:b4:4c:a8:3d:8c:37:94:24:b2:d7:ce:a9:a1:c7:
         95:14:43:5c:40:0e:22:42:d0:a9:9e:7e:99:6d:00:ce:87:b8:
         a9:9f:3c:87:db:3c:74:98:00:c5:66:e1:c9:41:45:29:11:70:
         9a:f0:a5:ff:4f:2f:11:00:0b:29:66:95:3b:e6:82:d0:5f:de:
         a6:45:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----