Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          cwymVGeYfCZXaNee9WmiBQJJHuvsVrR6IT2gCFfTor8=
Subject key identifier:   8D:D6:C2:71:29:E6:09:0A:AA:35:55:3A:3C:16:9C:7B:8F:D1:02:E0
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       01962DF41BFAB7C70EB1A423700B760D7074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: rDCvryC7T6uEVgC2FStnXXqXqzU/qzdsakETtCORPwg=)
                          2: f1F0WxdJkw--IIYJ2pRVkM2V08g.roa (hash: PCXGQz19PbylWHQsw2l6MBgGvmv6YISk0m8qSQkolpM=)
                          3: weaxMACIysGRPOx39bRJCpdcHEI.roa (hash: coOLOg3eMCLKMHx7Lq6/lTx44QSsHYUGPWnve3Ptlmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:fa:b7:c7:0e:b1:a4:23:70:0b:76:0d:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=8dd6c27129e6090aaa35553a3c169c7b8fd102e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:ab:04:e1:3f:70:f6:b2:c7:76:05:2b:08:
                    3a:13:c0:53:c6:63:4d:5b:fd:88:e4:70:3f:c8:71:
                    2b:81:48:cd:d7:d2:e3:07:94:1c:7c:13:2f:d9:ce:
                    98:b2:f1:c8:d2:4e:4f:cd:68:de:00:ad:60:98:11:
                    bf:04:ae:e3:74:86:1c:65:3a:f3:2a:f6:54:10:ac:
                    fa:65:d3:75:65:64:00:34:ad:e2:a5:a0:62:0a:b1:
                    08:fb:78:ae:9a:72:3a:b3:1c:86:e6:61:30:20:0e:
                    8c:da:9e:e2:07:83:6d:cf:25:74:a9:54:ca:be:9b:
                    b0:32:94:39:9e:2c:11:ef:f6:d8:2d:49:44:42:17:
                    da:f6:76:5c:a0:24:4c:6e:b2:23:42:01:3b:5c:89:
                    68:a5:98:3e:95:25:20:d7:ef:ba:b7:7f:53:13:66:
                    66:7d:65:1f:63:77:ea:98:84:8d:ee:c9:8b:8f:22:
                    d0:9f:05:de:9a:ab:2a:0c:45:d2:d7:93:6d:18:53:
                    39:08:f4:ad:04:ef:c8:a1:9f:ee:d7:23:33:b1:cb:
                    5c:05:43:34:0f:e9:76:d7:de:12:74:6f:05:e0:c2:
                    35:a6:cc:ec:88:9d:a3:a4:6a:20:0c:62:1a:a0:92:
                    08:c2:0d:71:41:56:b5:00:d6:01:63:df:46:34:ed:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:C2:71:29:E6:09:0A:AA:35:55:3A:3C:16:9C:7B:8F:D1:02:E0
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:20:e4:8f:b8:15:34:65:da:d6:82:fd:2f:d3:c6:ce:38:
         e6:29:97:7a:ac:44:79:27:bc:01:7f:ca:62:0b:bb:af:72:e0:
         ea:ad:62:e3:65:4f:9e:77:61:dd:59:2e:31:ef:01:ef:6d:d3:
         70:56:2e:07:ee:4f:8a:97:9c:4e:29:49:1a:05:70:4a:f4:50:
         18:f3:c1:9d:97:dd:0d:07:0e:e1:37:d7:03:85:ea:86:2a:24:
         13:4c:8f:97:cf:3b:78:6b:6b:06:30:d2:9f:61:5b:ad:a5:bb:
         bf:c5:4e:f9:b5:45:81:ad:72:a5:b4:a5:9c:61:ef:28:66:5f:
         a9:00:6e:57:00:44:a0:3f:d2:cd:98:d0:3a:76:d9:25:cf:0d:
         5c:8f:24:db:83:64:06:ce:e2:e5:11:20:58:23:ad:d8:b1:2f:
         31:6a:a6:15:22:08:aa:ba:81:90:a5:1f:eb:2c:53:64:cb:33:
         21:da:03:3d:a8:63:82:1e:ff:b3:6e:56:0f:ae:e1:b7:75:50:
         da:8a:d6:f7:51:86:41:d9:31:95:2e:c5:b6:35:69:ca:eb:49:
         1e:09:d6:02:be:a8:0d:7d:81:86:40:1d:23:d9:b6:ca:39:d0:
         78:27:e6:90:bb:3d:35:a8:83:24:01:6f:c2:01:ba:ff:9b:95:
         01:33:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----