Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
File:                     6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft (raw, json)
Hash identifier:          dpr+grivNNdbStSs3ZuVSJjxesCc+3wt/76HuaVBqSE=
Subject key identifier:   D4:B6:35:4B:E9:D6:BE:38:B1:35:D1:AE:D9:63:3F:CC:66:AC:A8:98
Authority key identifier: EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
Certificate issuer:       /CN=eadf80048d2032ec224364a773fe81d23fa914e0
Certificate serial:       01962F0640D49C9D57C0BA26B142A8529880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: 4SEG_Ka9SsxVgfqJ8rFxskdB8YM.roa (hash: miw1wyF1xISaDKZpbc8ZdU1Lhb432CZTgpXO4KMVEZA=)
                          2: 6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl (hash: eVJoJW4C7x+Tt73uBqqI12C1GesL9ZGOjB1VpliWcIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:d4:9c:9d:57:c0:ba:26:b1:42:a8:52:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eadf80048d2032ec224364a773fe81d23fa914e0
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=d4b6354be9d6be38b135d1aed9633fcc66aca898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:ca:54:1e:19:84:71:9a:4d:fc:f9:e1:2a:
                    5d:8f:16:2e:34:a3:46:5d:a1:eb:0e:8a:e7:06:05:
                    8a:d5:8a:fe:13:d9:27:a2:26:ec:46:5a:38:f3:30:
                    8d:2c:44:1a:19:6f:2f:17:f3:f6:c2:af:00:16:bf:
                    00:2e:26:23:2f:7c:41:36:25:17:9e:c0:84:ea:40:
                    45:ce:ac:91:33:1c:99:17:fc:11:14:76:19:83:be:
                    39:3a:f0:7e:5f:78:90:93:89:57:df:d4:ff:5e:89:
                    70:05:44:c7:31:a5:de:9e:44:d8:f3:df:98:f7:0c:
                    1c:f5:9e:44:27:48:19:23:64:fe:eb:29:49:57:a2:
                    87:50:fc:5c:33:8a:7d:91:11:4d:a9:a0:82:4e:ed:
                    3c:6b:e6:2b:9f:1a:93:f2:27:86:f2:26:56:0f:e5:
                    43:74:e7:c9:06:80:6c:69:98:91:05:a1:67:fb:63:
                    2c:2d:8b:35:8c:d0:03:4f:3f:70:08:53:ff:ba:b0:
                    2e:ee:8a:31:71:03:70:a9:f4:7d:32:55:05:59:0c:
                    02:3d:b9:47:db:d5:26:60:e7:73:a7:69:6d:ad:3c:
                    45:a8:49:f8:98:9c:f0:d6:f9:e6:c6:4b:71:7a:ec:
                    00:39:e1:96:ed:15:6e:1a:19:d3:84:95:9b:69:3d:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:35:4B:E9:D6:BE:38:B1:35:D1:AE:D9:63:3F:CC:66:AC:A8:98
            X509v3 Authority Key Identifier:
                keyid:EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:a4:2d:04:e5:0e:4b:19:4c:5d:b8:cf:5a:f7:e2:c8:bd:
         8b:b8:97:4e:26:1a:84:85:0b:03:5b:2c:9e:d4:e1:58:74:3c:
         87:c0:44:25:04:c9:c1:24:2f:51:d8:b1:99:00:c2:70:8d:55:
         dd:a5:d4:6c:5c:37:cf:a4:30:60:07:66:36:4f:57:8b:f0:2d:
         39:e2:95:0d:26:a2:66:fc:5f:fe:5f:ec:b9:83:46:9d:b3:59:
         2a:51:f0:82:4c:eb:0d:6b:e8:bd:4a:3b:73:ab:8c:8c:01:e2:
         9f:31:f6:ee:99:9c:ea:e9:69:70:81:47:a3:ca:c3:48:32:3d:
         25:d1:16:6f:dd:91:04:db:bd:bf:7f:f3:ed:15:12:7d:c8:b1:
         29:31:ef:de:97:6b:a2:a5:64:53:8e:2f:46:23:89:5e:89:b5:
         ae:c2:b9:d6:00:4a:6b:96:85:d1:e2:84:be:7e:34:86:28:09:
         ee:0f:4a:1c:ce:7b:0d:35:3c:5d:49:aa:50:f4:e8:4a:fb:10:
         20:c2:da:e8:b6:ed:ca:4d:31:07:3e:e1:f5:ea:f3:d4:42:a2:
         5a:aa:95:6e:f0:ff:f8:2c:0f:61:6e:14:19:e7:ff:d6:51:df:
         8f:a3:24:dd:0c:94:77:d7:cb:d8:5f:40:d3:dd:e1:0c:a1:74:
         66:7a:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----