Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File:                     bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier:          Iq/0089yvBN+zXnxXRnpfPopdxXOZ9b3gs+Rt/ifbEk=
Subject key identifier:   49:1E:E5:59:B7:06:14:64:97:DE:B2:17:7E:27:00:F3:95:05:A0:65
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer:       /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial:       01962E61EE8BA0E0A77D711E12E2533E0D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number:          0657
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
                          2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: TB4tXTWSV46GN2PTKOanmqus4zsO7S7vH8oeqBGa5Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ee:8b:a0:e0:a7:7d:71:1e:12:e2:53:3e:0d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=491ee559b706146497deb2177e2700f39505a065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:2b:80:e0:1f:21:d9:fb:97:e6:cc:83:40:
                    03:8a:5b:d0:2f:fe:6d:3f:e1:d9:b2:41:2f:4e:3b:
                    73:66:8b:48:69:a2:4e:f0:2f:8c:74:bb:b6:03:21:
                    ba:46:6a:30:f5:5d:a4:35:b9:2f:36:4b:da:12:15:
                    1c:18:d7:e0:4d:30:23:ec:93:0b:b0:f5:f0:cc:59:
                    9c:dc:0c:cd:93:cd:5f:ac:30:a1:4b:59:85:f1:04:
                    c0:d6:0e:5c:50:bb:f8:c7:a4:af:9c:00:65:b5:4b:
                    74:a3:7b:b6:63:61:55:c9:3b:89:bb:58:ae:7c:c9:
                    00:0a:f6:f9:f2:21:85:bb:ab:8c:f3:ea:08:32:70:
                    f7:38:72:b8:89:07:7c:54:34:26:d2:53:71:59:c6:
                    21:54:5d:82:f8:32:8f:f0:29:54:e6:53:43:e1:e3:
                    9a:39:ad:42:d3:79:ba:7d:c7:2c:81:69:35:17:79:
                    1d:b9:94:a0:d2:85:ee:dc:af:17:8c:ea:29:29:d6:
                    d8:8e:0d:2c:96:82:d7:41:1d:7f:4a:d9:e3:48:9c:
                    cd:20:ab:cf:89:e7:6b:dc:40:cc:ee:e3:63:f2:09:
                    b9:40:7b:14:e5:be:76:b9:95:b9:d8:a2:35:09:12:
                    c5:3d:e9:f7:ac:6b:c3:3c:ef:4c:20:a2:f1:3a:46:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:E5:59:B7:06:14:64:97:DE:B2:17:7E:27:00:F3:95:05:A0:65
            X509v3 Authority Key Identifier:
                keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:1c:ba:40:63:34:c9:11:06:ff:77:8f:ca:05:a3:e4:07:e8:
         0c:e8:9f:8a:1c:d5:f9:13:06:0c:97:b5:33:fc:0c:36:e7:d2:
         27:7a:3e:13:37:c0:2f:ef:67:81:8f:15:b2:a3:cd:5c:c5:ae:
         c6:ed:05:25:2d:87:3b:c9:a3:62:7e:45:c0:62:7f:cd:a5:31:
         56:c4:eb:d8:a5:ed:1f:8c:70:12:37:c2:3d:c6:b7:76:8d:83:
         57:5b:de:fd:e0:de:e3:24:e7:3b:b2:f5:24:28:47:37:46:f7:
         98:28:91:99:40:50:fd:8f:bd:fe:d5:65:35:44:5f:c7:7d:a3:
         9a:29:70:ea:4e:68:55:64:ed:28:3e:49:ee:60:a3:71:22:d6:
         82:6b:39:d1:58:14:e7:d9:19:09:48:cc:a0:f9:9a:ff:37:9c:
         3a:7b:48:f0:91:df:f8:8f:a2:60:6c:dd:dc:cf:60:09:3f:aa:
         7a:90:ba:d1:1b:02:df:78:e4:6a:c5:4c:a1:8d:c0:c9:88:8e:
         59:af:f6:b0:e2:0d:6c:dc:6c:f6:ae:59:49:ce:f5:89:52:37:
         cf:2c:70:e8:bd:25:36:8f:cf:85:13:79:a8:05:bd:0a:e2:60:
         21:50:af:f6:2a:67:1f:c0:90:a0:68:fe:1b:34:3c:da:55:d0:
         cf:c0:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----