Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File:                     bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier:          0LE/3d6PAWhYZCnqc5HeCZ2JJ4TTeYA/LEcFbDLwDZ8=
Subject key identifier:   60:82:85:2A:0D:02:4F:AF:A6:F2:C7:8D:C1:9F:B0:E6:88:FA:95:CE
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer:       /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial:       01962FAB4557826A22779D84AE626FC9FC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
                          2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: fusvqFLFJK5XhutAu6mdwe3k+FvzAM948gzqZZN+o9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:57:82:6a:22:77:9d:84:ae:62:6f:c9:fc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=6082852a0d024fafa6f2c78dc19fb0e688fa95ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:e9:87:c5:6b:59:47:cb:38:e5:11:ac:09:
                    c2:4b:0b:1b:0d:1c:17:0f:58:4f:da:7f:e8:ce:be:
                    f6:c6:53:5c:67:40:b8:43:42:a5:fc:77:a2:9e:a9:
                    84:6b:2e:ab:30:38:41:56:c2:45:9b:a3:f2:22:c2:
                    ee:79:8a:b1:cc:71:dd:6d:51:53:ce:98:fc:64:33:
                    0a:df:e2:10:7d:0f:a4:a8:45:e2:24:2c:ca:b7:f0:
                    24:63:97:5f:20:ae:00:d2:02:19:88:51:56:b5:2c:
                    a3:50:96:88:93:bb:f2:35:1c:08:71:a0:7d:7d:ec:
                    f2:0f:41:17:19:34:d1:75:d9:9e:70:a1:3a:dc:f3:
                    93:20:af:43:72:02:d3:03:8b:37:e2:9f:c1:16:1a:
                    47:3e:9a:59:55:06:47:99:21:47:47:bc:74:4e:6e:
                    d4:b7:9e:57:75:eb:94:bf:d6:86:b1:0d:aa:89:c5:
                    3c:de:19:90:e3:2f:68:40:f0:13:a7:89:47:8b:8a:
                    03:20:7d:38:7f:62:bf:ca:70:ce:f2:90:ca:17:2e:
                    44:fa:74:26:f2:65:a5:3a:a2:08:d8:23:ea:70:6b:
                    01:dc:7e:1d:3e:55:ed:16:ae:03:88:3a:e6:06:80:
                    83:7a:50:1f:9b:b8:95:8a:0c:e6:6f:32:70:87:a1:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:85:2A:0D:02:4F:AF:A6:F2:C7:8D:C1:9F:B0:E6:88:FA:95:CE
            X509v3 Authority Key Identifier:
                keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:3f:b3:41:41:91:37:68:e4:30:73:8b:b1:c5:2c:7b:97:
         02:1c:06:e6:be:84:55:d4:ad:89:ad:05:c1:ac:47:2b:4b:41:
         9c:75:6a:84:51:89:1e:5f:76:1b:59:87:d1:42:a1:e7:70:26:
         46:2c:5d:9b:c2:be:81:1f:3c:84:a8:84:9f:5d:97:66:20:fe:
         84:f3:a4:cf:c8:0f:75:60:ea:3f:d0:a8:0e:04:e5:f1:56:1c:
         13:a5:33:83:4c:fa:91:19:77:f5:bd:c8:d8:59:23:60:2f:ea:
         88:02:ff:76:54:ad:a9:3f:ab:2d:b4:17:dd:f2:6d:28:0c:be:
         96:d2:76:43:1b:0c:e1:c1:bb:db:56:b1:bf:29:54:a9:99:db:
         0a:d1:aa:26:9d:b1:e4:eb:f9:fa:2f:fb:4d:b3:df:f4:26:3e:
         4a:b6:6e:ff:ac:d9:f9:36:b2:e6:21:4b:0f:a4:79:5a:c6:1c:
         47:00:8b:c6:05:b4:f6:9e:83:10:3a:74:a9:97:a7:da:23:e0:
         57:b9:af:a4:4c:ac:79:e1:80:2c:53:df:38:33:2f:f8:92:3b:
         d9:25:c2:74:93:41:84:6e:9c:24:0b:8c:c1:89:d1:2f:f0:de:
         4d:89:91:39:88:2e:39:e2:99:24:f7:77:28:c7:93:a9:99:a9:
         91:62:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----