Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          Ziz89lFTqwr7ydRViSFMB8R5+7/JQw5SmMDts7DzmQI=
Subject key identifier:   E7:20:00:E9:C4:64:3F:45:9F:0D:6D:36:21:44:60:9F:C1:A4:6A:32
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       01962F068E22ED26186F84248A3089036031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: AzpzmPbk/fTN5MD4EN/BuYjMLWfv0gCWCSv7Isx8xJQ=)
                          2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:22:ed:26:18:6f:84:24:8a:30:89:03:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=e72000e9c4643f459f0d6d362144609fc1a46a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:1d:3a:b2:c8:a1:2c:22:b9:91:4d:38:ac:
                    a1:01:7c:f9:79:39:6b:0c:33:cc:e4:77:0f:49:15:
                    e8:6d:4c:d8:bf:01:01:ed:c0:69:63:13:e0:07:7b:
                    1f:0b:2f:be:7f:ae:86:46:f3:e0:95:1c:4f:86:26:
                    49:da:71:b6:63:f7:8f:7e:f1:9d:29:07:c9:d3:f1:
                    eb:fb:af:54:80:b5:17:e9:9d:d3:33:01:1f:06:84:
                    47:80:7e:51:be:e4:f7:55:a9:71:1f:38:fc:d0:bb:
                    2a:0b:0b:eb:3b:97:54:79:84:94:82:97:18:6a:5a:
                    93:95:33:97:e0:27:07:f9:92:3a:4e:31:17:ce:f3:
                    8b:3a:66:12:a0:e1:fb:6d:91:df:46:9f:4c:13:83:
                    fa:89:02:c4:e9:f2:e8:1a:0c:84:13:dd:a6:ee:ce:
                    1c:32:22:2c:bf:e0:05:95:05:a9:06:59:41:0a:a4:
                    8c:d3:65:7e:24:7b:30:d1:de:ec:e9:95:06:e5:89:
                    43:28:f6:7b:0c:e3:46:17:fa:da:eb:01:8b:4c:80:
                    e0:b8:b8:2b:3a:63:6b:8f:b9:05:7f:8f:a3:97:0f:
                    26:f1:2a:56:9c:af:c5:9b:0f:c5:b2:2d:4a:32:58:
                    0b:b0:66:98:0b:37:f8:05:69:d8:b5:14:49:0e:ca:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:20:00:E9:C4:64:3F:45:9F:0D:6D:36:21:44:60:9F:C1:A4:6A:32
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:11:2c:10:23:fc:f5:75:35:a3:6a:d4:8e:01:d9:26:4f:a5:
         ae:c5:6c:c0:01:c2:7c:84:ef:60:fe:ed:cc:21:75:12:77:60:
         d3:72:5a:d2:98:1b:1a:81:7f:2a:49:e1:3a:2c:95:d6:18:85:
         b2:ec:54:af:38:aa:1e:16:63:0e:67:20:64:33:42:1f:94:a7:
         5b:7d:cc:22:37:89:fc:2a:72:1b:2c:0c:f7:d5:22:d1:95:29:
         ff:f2:96:5e:13:b9:84:fe:ec:f3:4d:d1:b0:4e:60:38:73:92:
         82:45:a0:fa:72:cf:10:26:1b:7e:99:a0:84:81:e5:12:34:26:
         4e:4c:14:e0:a2:f2:0f:8c:26:b8:cd:93:59:10:37:5e:43:ad:
         c4:5f:3a:95:aa:3c:a2:45:63:22:e7:a5:1b:42:e3:9d:9b:34:
         9f:98:cc:88:51:0c:3b:99:67:f5:91:bf:c1:e0:f1:29:2e:d1:
         74:b7:a7:06:4c:61:b8:2a:99:60:f9:1e:b9:1f:bf:80:58:dc:
         e0:47:df:eb:38:a4:e9:d1:9d:12:e6:d6:82:6b:86:f0:bb:7f:
         ab:7f:25:cd:eb:b8:fd:0e:54:7e:a7:53:d9:43:14:89:03:f6:
         d3:5f:30:8d:ac:ce:9d:db:e9:85:00:d7:e1:b2:d4:2f:cd:36:
         00:09:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----