Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File:                     6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier:          HgYX/SFplXcswTvc+H3uPzD6dWRu0wMA3IQBVwWvr74=
Subject key identifier:   9D:52:10:C4:FB:B2:0D:46:39:71:E6:58:C8:E5:47:3C:AA:42:E6:7A
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer:       /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial:       01962E618B8445FEAF0922E4D0E2A98283E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number:          0139
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: DqoUU5W6Cks+prUjfYmPPaJ4a6cCazBMdkjYCdjKCXU=)
                          2: GxL8fwk7MmwPNTtCp-ZrLwDGehU.roa (hash: lyYJo+TOxOK6xLDSZatPtZ0yRjTCazkuCS6AXT1948U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:84:45:fe:af:09:22:e4:d0:e2:a9:82:83:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=9d5210c4fbb20d463971e658c8e5473caa42e67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:83:e8:fb:f2:58:65:d4:ce:dc:a3:6e:20:
                    b6:75:af:54:18:5e:52:ce:25:06:2c:76:07:f0:9b:
                    27:ca:9c:85:11:47:92:cb:72:db:41:26:30:d7:5a:
                    9c:ea:8e:49:9f:4c:de:39:1d:9f:23:93:df:ef:6d:
                    ab:d3:96:ff:25:89:33:7c:5c:8e:ca:4e:1c:73:ac:
                    db:02:3e:e6:d3:10:5b:74:4f:d8:af:8b:9e:eb:d2:
                    1d:8b:ee:b3:06:27:8a:94:68:7b:04:d9:45:af:b4:
                    6f:25:e3:9e:59:0d:34:2f:82:aa:c0:ae:7c:c8:a6:
                    17:3c:dd:f1:aa:ba:f9:0c:d1:f6:7c:28:c5:a1:41:
                    ae:24:1a:7a:b5:ea:34:cc:ad:2b:5f:d8:05:db:73:
                    82:c5:87:8b:e3:cd:a2:4c:c0:b5:0b:3d:bb:5e:25:
                    99:de:cd:52:0f:c9:cd:35:ef:f9:00:59:34:f9:85:
                    94:21:57:1e:b4:01:22:68:eb:f4:d6:e5:2f:79:c1:
                    26:5b:4e:39:4a:ee:e6:b7:97:3e:fe:ab:5a:25:e2:
                    e1:10:43:f8:75:5b:00:97:75:32:96:c6:03:81:af:
                    cf:c1:6a:fa:b6:81:c3:2e:c0:88:93:38:48:7c:05:
                    b7:c3:8a:81:86:8f:d5:40:aa:da:50:f5:b5:6c:9c:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:10:C4:FB:B2:0D:46:39:71:E6:58:C8:E5:47:3C:AA:42:E6:7A
            X509v3 Authority Key Identifier:
                keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:35:91:91:cc:44:0d:a3:c5:9a:36:eb:cd:95:1f:07:50:60:
         b1:e5:ab:5e:b4:24:9c:b1:11:e3:42:d9:05:66:bc:02:cf:5f:
         39:7e:66:d6:67:8a:33:91:8b:60:ea:f3:0c:68:fd:62:9e:dc:
         c8:15:38:16:85:2d:a8:6b:73:24:f5:62:9e:b4:00:86:98:f6:
         29:5c:f4:88:ad:be:52:05:55:04:43:ee:e4:29:2f:30:ab:99:
         72:32:22:ec:92:83:9a:b0:20:6e:0e:b3:b1:c7:4c:14:98:a9:
         c3:d7:44:50:f6:9c:5f:4e:8b:c5:fe:ac:2f:ce:af:77:64:99:
         9c:87:ca:f4:dd:ab:d5:a9:cf:bd:ce:24:30:b3:da:9c:33:19:
         63:88:1a:c8:50:c8:3b:c6:c8:bd:e3:fa:b9:71:27:98:b7:94:
         91:ee:55:ca:94:17:91:a4:ba:23:8a:2d:62:b0:50:16:4e:eb:
         7b:77:63:89:ff:66:33:0f:a9:0d:0d:cf:97:0a:2b:b5:c2:f6:
         3b:f1:f6:55:a3:9f:35:a2:65:1c:78:61:72:df:38:17:b6:a4:
         c1:d5:7f:51:c7:ef:59:cb:36:06:4c:59:8b:82:7c:7d:fb:c2:
         10:ef:23:e1:6d:47:e6:e1:66:a2:cb:29:8b:c2:63:03:07:8b:
         2b:98:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----