Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          YfxTWswfuT5wGWaXQkAGb4Q6nRtCn+mZHY8Uda9ypCs=
Subject key identifier:   33:BE:AA:43:D1:B5:52:CC:1B:C3:C9:F3:F2:37:8E:9D:67:DE:63:20
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       01962E2B46FC4030DF2F7693F890A6AA7769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          0444
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: /JHomOrlRywGimqNj0+CwtvdYqZjk8GHXstodwoXpKY=)
                          2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:fc:40:30:df:2f:76:93:f8:90:a6:aa:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=33beaa43d1b552cc1bc3c9f3f2378e9d67de6320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:b5:71:af:2a:81:d4:b1:48:42:86:a5:20:
                    9e:15:ae:56:de:9a:dd:77:6d:cd:41:02:88:6f:a3:
                    b7:76:12:a7:31:e7:2e:13:c4:76:fc:b4:26:b2:a8:
                    84:b4:05:ac:0b:57:ef:6d:e8:93:fd:db:ac:34:16:
                    a7:85:42:d6:64:0d:55:34:92:e1:b8:17:83:35:00:
                    fd:11:2b:57:81:67:58:a4:dd:dd:32:d8:0e:6f:d9:
                    52:e5:0e:21:29:45:11:97:de:06:ed:93:e7:88:30:
                    95:f1:05:49:ba:b8:bf:f9:2e:22:ca:2c:68:b9:49:
                    ab:e1:d8:7d:69:0d:b6:35:e4:2e:25:15:13:ef:6a:
                    09:d0:2d:e2:9f:29:81:5c:4a:46:8d:90:e0:5f:c5:
                    5d:af:27:d2:76:22:f8:9a:3b:c0:6f:62:1e:8d:bf:
                    5d:df:a7:d7:0d:04:47:d6:be:44:68:8a:16:0f:67:
                    98:0d:d5:e8:f2:1d:da:cc:5a:5f:b5:ba:eb:f8:81:
                    e6:f5:f6:5a:da:8f:43:26:81:12:95:e3:4a:fd:2a:
                    a6:13:d8:38:32:62:35:b2:8f:4d:22:c3:dd:1f:cb:
                    f7:72:2a:b3:07:f4:e0:8e:fc:da:8b:c0:1e:c2:61:
                    14:8c:2f:1e:53:f4:83:bd:3e:13:2e:78:4b:37:43:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:AA:43:D1:B5:52:CC:1B:C3:C9:F3:F2:37:8E:9D:67:DE:63:20
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:b1:8b:da:74:5e:d6:26:41:e7:a5:60:6b:0c:e2:f5:2f:
         25:c9:0e:7e:0f:ee:15:65:d7:7d:57:15:c3:1c:2c:dc:38:e8:
         85:27:b8:ee:16:da:3a:44:9b:7e:6c:8a:6b:28:d0:fa:58:4f:
         0b:e2:88:0f:e6:33:b6:08:13:2d:dd:cb:7d:0a:02:b4:4d:3c:
         ac:87:6d:b9:4b:09:12:d2:62:fe:da:25:aa:ba:16:68:4f:b3:
         ca:d0:cc:05:a7:92:be:e3:a6:1c:48:95:65:53:64:04:be:6a:
         36:de:52:64:16:24:fe:93:9d:f2:bd:ec:02:9b:31:2a:bf:d8:
         a6:8c:32:f7:8c:3a:0c:a4:56:46:cd:ef:01:da:a9:75:fb:68:
         ed:20:05:20:33:ea:c4:00:45:04:d4:62:aa:c2:61:1f:dd:b6:
         a3:44:59:1f:20:c9:c0:d1:35:9e:fc:bd:a3:0f:cc:a0:89:be:
         d2:6a:fb:85:90:c2:16:c0:a6:44:d4:38:28:fc:68:80:0e:f4:
         af:1f:52:5b:0a:81:f2:65:46:48:db:5a:da:8f:d3:c3:41:14:
         7b:df:25:1f:b7:bb:69:73:98:62:92:dd:52:69:06:41:66:47:
         2d:2e:20:58:c0:7a:31:5d:13:4a:69:3b:b5:12:9d:c1:df:94:
         c8:e9:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----