Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          +jq1F5X3L2R3Lr54M6J7mpR5HbJP5ZCeSXvkd8vKBQk=
Subject key identifier:   1D:29:8F:9E:98:BB:50:23:BD:53:B1:AF:08:08:6B:3C:D4:AE:D4:DE
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       01962F06EE3006C6D02C55C034980132FAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          1063
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: 43VjGKauz2Q0FQWWzLfb2qWO+0tSAp6iOPOX6e6+CqA=)
                          2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ee:30:06:c6:d0:2c:55:c0:34:98:01:32:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=1d298f9e98bb5023bd53b1af08086b3cd4aed4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:2f:11:80:66:3c:0c:bc:f8:e4:ce:81:ca:
                    5b:63:85:ae:f1:7c:d1:1f:cb:c9:7d:08:27:39:c5:
                    87:10:24:6f:94:a4:1f:af:5d:b4:cb:c1:ea:23:82:
                    b8:50:e9:31:f1:8d:7e:29:6c:d4:bc:43:0f:c2:78:
                    42:86:04:a1:ac:1b:7e:05:bc:eb:fb:a5:b5:29:6d:
                    b9:2b:b5:a7:bb:36:2e:d9:cd:bd:5e:3d:81:34:b3:
                    12:0b:71:f6:67:80:13:68:b3:94:2f:76:89:c2:5e:
                    7e:d7:b2:6f:0f:a0:8d:ea:51:cd:0d:26:9e:2c:3c:
                    fc:af:b3:2d:51:7d:6e:5f:88:3b:4f:64:ca:42:75:
                    54:2d:28:e2:99:5f:4a:d3:92:4a:44:e5:ac:1a:34:
                    86:62:71:aa:6a:42:f9:c6:89:7e:e3:4c:2b:86:ec:
                    57:b0:4f:e1:ae:ff:ea:3c:3c:cf:38:93:c1:6c:53:
                    43:db:db:a8:02:3a:73:c1:bc:2c:f8:2f:0d:2a:ea:
                    d8:dd:82:4e:53:95:65:0a:12:bb:25:e0:99:08:5a:
                    75:43:88:20:24:03:87:6e:ec:1d:d8:29:61:60:ad:
                    4c:ae:e9:7e:6f:2d:12:15:e4:21:f2:e6:d3:ee:59:
                    9f:bb:50:32:cf:48:f9:9f:25:56:83:69:6d:8d:c5:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:8F:9E:98:BB:50:23:BD:53:B1:AF:08:08:6B:3C:D4:AE:D4:DE
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:67:af:df:43:ed:ca:de:89:fe:82:8c:00:63:49:d9:34:39:
         ae:20:66:7e:69:bf:bf:ad:bf:1f:33:ae:a2:e4:a9:56:36:e3:
         f1:50:e5:84:52:cb:b1:f1:c5:8d:4d:fd:a1:b5:8e:d6:03:40:
         27:16:a7:85:53:11:01:74:15:ae:c3:0c:e0:bb:46:20:c9:e3:
         f6:bc:8f:9e:7d:44:34:e1:e9:44:31:df:f2:2f:b5:48:7a:43:
         26:4d:23:78:4c:29:a3:96:47:42:85:99:1f:b0:9c:8f:5c:3d:
         b8:ed:cc:d4:a8:5a:f2:90:60:d8:49:fc:fd:c4:8b:80:8b:2d:
         a2:82:47:93:1d:b6:d5:64:79:38:28:d2:e9:50:42:67:ab:ff:
         cb:cd:c3:a9:09:9e:76:f9:c8:2b:65:b6:a9:98:5b:4a:9c:d5:
         96:a2:ff:0f:2d:1f:03:f2:2a:38:7a:73:21:c9:f0:c6:c4:e8:
         9b:4d:c6:c5:f7:0d:0d:9a:52:5e:ab:bc:de:4b:36:f2:a4:26:
         2e:70:41:5d:f2:aa:08:b0:0a:ad:83:d7:49:b4:40:89:76:17:
         e1:0a:d1:91:dd:fd:f7:70:88:86:41:b0:b8:31:8c:41:ae:9d:
         02:61:52:53:c2:fa:2c:60:f8:79:a3:8f:fa:ea:a8:c8:5c:ca:
         ee:6b:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----