Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          nMK2JPKc+BvUqmu8ZMdzEOxJuUGRl8x4WLZM820gLvE=
Subject key identifier:   5A:A2:B1:E8:9F:26:9D:56:5E:DC:29:90:B2:2E:37:D5:02:9E:E7:6E
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       01962F06603DFCB6CCD2F47A7A42B9B70979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: 47H8jmPZ9fzvBDYmw6tLenw1KDxJNx2/cWPwSXclFm0=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:3d:fc:b6:cc:d2:f4:7a:7a:42:b9:b7:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=5aa2b1e89f269d565edc2990b22e37d5029ee76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:61:08:de:de:13:3a:89:05:9f:af:cc:cb:
                    b7:30:39:12:81:95:7e:09:f1:3d:92:b2:d9:a7:52:
                    f0:71:9e:e0:58:23:6c:f1:3b:10:50:60:53:e2:f9:
                    c4:5f:9c:f6:c4:5f:e2:52:e7:09:93:41:dd:ea:d0:
                    f8:43:ac:4f:3d:90:24:4f:77:f3:fa:2e:27:6c:d9:
                    98:df:51:bf:65:78:30:3a:92:5e:81:ea:e3:bb:03:
                    7c:32:bd:34:e7:70:68:55:d6:a4:31:49:ef:c0:8c:
                    aa:d1:f9:04:20:7b:22:1a:de:ba:4a:f5:29:43:8f:
                    40:13:df:8f:47:06:a8:01:3a:15:8c:de:12:2a:50:
                    5b:db:a5:4e:bb:cc:a9:ac:18:e0:1d:e3:69:d0:38:
                    12:c2:0c:8b:94:f5:de:5b:d0:81:cd:a5:57:15:4e:
                    0f:72:fd:cb:d1:df:29:00:74:d2:9d:64:41:3e:4f:
                    e4:c4:0a:66:d8:18:84:b5:0a:e6:63:9a:09:b4:83:
                    46:30:78:d0:44:75:6c:a6:f5:b4:de:9e:75:f8:63:
                    27:51:3d:ac:f6:89:b6:f9:54:8e:4b:19:76:17:e7:
                    47:5b:09:f9:55:1e:f7:1f:fb:ab:f1:5b:20:b9:06:
                    fe:a1:64:b8:51:ce:35:0f:c7:1e:c0:64:a3:08:c9:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A2:B1:E8:9F:26:9D:56:5E:DC:29:90:B2:2E:37:D5:02:9E:E7:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:12:96:b5:57:1f:21:4b:5a:da:0a:66:e9:11:01:b3:d6:
         74:38:37:ea:87:3d:f9:a8:e9:96:ce:55:d1:60:e2:55:54:06:
         e8:f6:67:31:97:d5:99:81:31:88:ed:03:62:86:93:b3:22:bd:
         27:34:85:26:8f:46:6d:93:81:88:92:e6:61:10:ec:7f:97:30:
         38:6b:e7:92:75:be:3f:4d:b1:77:b6:9a:d6:32:d7:84:14:ac:
         4b:f0:6c:93:6f:3d:a2:77:ba:22:2a:9b:a6:8c:b7:be:ce:da:
         26:2d:3c:35:0e:fb:59:98:c0:cf:36:a7:b0:0c:0e:e9:3a:7c:
         ca:98:6b:84:91:ab:80:e7:9a:6e:dd:7e:ce:5d:4b:72:6c:09:
         33:2d:1c:a7:ed:56:df:8c:4a:24:89:19:50:86:3f:49:39:bc:
         d4:06:75:f7:02:4e:59:fa:f0:83:fc:c4:d1:f0:d9:5b:51:9d:
         b2:de:3a:31:93:f8:60:29:5e:b1:b6:db:f3:25:26:29:de:e2:
         94:63:6d:ab:d6:d0:9f:4d:3e:d2:68:43:4c:1b:ce:5d:98:33:
         02:49:90:69:1a:86:03:0b:58:26:25:bd:9e:8e:d0:0d:d0:3b:
         fc:74:62:71:76:74:d0:e6:18:71:70:11:d9:f1:20:5b:f6:24:
         5a:0e:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----