Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File:                     8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier:          RbzGJ9/vUchbyRFKsliTxzGbk6hAROE8iNsbYiNnBAo=
Subject key identifier:   6C:D1:0D:FD:A9:0C:C1:17:06:FA:21:6D:27:0D:02:20:48:8A:4D:43
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer:       /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial:       01962FAB4DD2777419259F95FED366E24D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number:          0F8E
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=)
                          2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: 8Upf0tfhDIZyuCfbB3n/ldoX3MoyHF2yAAOllB9yAEU=)
                          3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=)
                          4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=)
                          5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=)
                          6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:d2:77:74:19:25:9f:95:fe:d3:66:e2:4d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=6cd10dfda90cc11706fa216d270d0220488a4d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:e0:a0:27:24:b5:2c:9f:68:94:82:54:1f:
                    50:4f:d9:fb:25:53:99:bf:c8:a0:af:17:7d:3d:a1:
                    3f:51:2b:80:f1:3e:ff:98:f1:29:52:24:26:49:a4:
                    8f:98:2c:82:53:2d:36:b4:37:49:85:2e:88:6d:07:
                    8b:0e:78:1c:00:e0:76:96:15:32:66:36:e8:4b:87:
                    d6:a1:28:3f:cd:7f:59:1f:3e:45:2d:41:99:e5:17:
                    48:8e:39:05:b7:b9:80:26:5c:10:9e:9a:de:71:c6:
                    3d:7d:29:61:af:fb:ef:5b:75:b8:8f:d9:15:50:ce:
                    38:8b:ea:7e:aa:d3:82:0e:d3:06:68:a7:38:1f:48:
                    55:d5:c7:60:fe:af:9f:09:9e:f9:5d:8f:5e:ed:ec:
                    c6:5d:9e:e7:fc:05:74:52:48:3e:3b:ba:70:ab:47:
                    44:dc:ce:9b:e7:94:62:6e:9f:13:16:e5:11:f9:95:
                    26:0d:90:68:f2:dc:94:6f:6d:ce:d8:80:23:21:da:
                    59:fc:59:f2:9c:06:61:c1:b0:09:2a:6f:ee:4a:7d:
                    a8:d7:f1:ac:1e:f5:bd:8c:0f:a5:af:55:32:20:0b:
                    9f:2f:f1:2b:ac:d4:47:76:db:c7:09:90:47:11:d8:
                    e8:29:27:e1:f1:21:b3:ca:08:b6:bd:ca:1c:16:30:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:0D:FD:A9:0C:C1:17:06:FA:21:6D:27:0D:02:20:48:8A:4D:43
            X509v3 Authority Key Identifier:
                keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:72:59:27:42:73:86:2f:8f:87:c0:f5:a9:b6:11:fb:9d:
         96:d4:5d:1b:55:7d:81:bb:23:f5:55:3d:86:2c:ae:ed:de:82:
         20:27:ac:42:3a:d3:39:a2:67:b7:df:f4:ca:78:4c:ce:f4:3e:
         d2:9e:f8:05:63:74:62:1e:80:c1:8a:33:52:e8:0c:24:5d:a6:
         c6:e7:8f:65:6b:74:00:69:16:2a:00:45:91:38:18:bb:41:80:
         df:52:25:b4:3a:63:d1:5e:5c:b0:c7:df:9d:60:cf:ba:ba:7c:
         b3:c7:6a:52:af:5e:d9:c6:0b:3e:02:c2:2b:19:bf:c9:5a:b3:
         fd:0f:72:f2:81:02:82:c4:82:9e:77:b5:0c:47:65:7a:ce:08:
         8a:07:be:6d:de:4d:99:36:7b:4a:34:c5:e7:a5:7e:c0:72:b2:
         f7:05:4f:97:73:ef:da:8d:33:03:65:1a:c0:b9:f8:66:58:66:
         f5:10:6c:7f:76:f5:43:d6:05:b1:e7:64:e9:09:0f:51:34:52:
         46:ff:f7:28:31:6d:33:83:c8:76:c3:83:df:96:b7:ee:83:57:
         bb:db:0a:6a:3b:04:cb:e3:b4:e7:55:5d:06:8f:3d:f9:01:76:
         cf:71:20:d5:c5:0a:d9:ff:95:74:9a:ef:f3:13:2d:86:af:92:
         60:44:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----