Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
File:                     6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json)
Hash identifier:          DXrHy02DPQumJtpnOY3x+nX/HS4LR56ub5CWFgyDfIk=
Subject key identifier:   A5:D2:BB:C3:5B:5C:76:48:D8:CF:71:B8:DB:B1:AB:85:FC:D2:35:65
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Certificate issuer:       /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial:       01962E61D75B16CA5FF18535EBE53CF673B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
Manifest number:          1252
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: jEb7TArc/DOLIZAO16MlYoMht9j78F2lZlBYFKEQYQg=)
                          2: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (hash: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:5b:16:ca:5f:f1:85:35:eb:e5:3c:f6:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=a5d2bbc35b5c7648d8cf71b8dbb1ab85fcd23565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:7e:09:41:e1:cf:f2:fa:7d:10:b5:48:12:
                    af:d3:eb:86:7f:59:c3:2b:42:b4:81:91:c2:6a:3c:
                    5a:de:b2:00:39:7b:89:50:e7:e3:68:db:65:18:bf:
                    0e:70:50:33:bd:ab:16:ed:ef:24:d4:bf:29:7e:af:
                    2b:95:c7:30:be:da:69:11:73:f1:05:79:92:8e:61:
                    d6:03:08:30:e9:58:83:2c:8a:4b:37:1b:7e:da:f4:
                    62:06:6e:20:06:09:08:d6:b4:60:ae:cd:7a:3e:7d:
                    22:81:cb:c7:87:97:ca:f7:1d:f5:14:63:37:37:0c:
                    ee:ad:f6:c7:dc:25:ed:b6:e4:e8:2c:e1:67:e8:8b:
                    d9:2d:25:cf:4d:cb:f4:f3:5a:c6:61:fc:35:48:61:
                    7b:20:39:a0:a0:38:f0:1a:ff:a4:38:a9:35:97:e8:
                    be:f7:23:e4:a6:4b:53:d1:69:31:51:6a:9a:a2:12:
                    95:79:5d:4d:9b:e4:9c:a4:60:f0:7b:ec:0f:a2:7e:
                    61:98:92:5b:1b:b5:ed:b4:d1:77:5f:0b:f0:85:e2:
                    38:94:92:ec:81:a2:1f:98:b0:30:ad:d9:a2:6e:1c:
                    3d:5b:96:e8:d3:a4:bd:cf:45:93:9d:f6:62:db:48:
                    4f:50:cc:33:39:ca:d0:5d:88:2c:68:94:7c:d6:3d:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:BB:C3:5B:5C:76:48:D8:CF:71:B8:DB:B1:AB:85:FC:D2:35:65
            X509v3 Authority Key Identifier:
                keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:41:db:e0:8e:30:2c:f3:21:f7:a5:17:db:27:42:ac:ca:95:
         6d:78:56:80:ad:70:ce:76:6c:00:8e:72:58:14:96:e7:13:cd:
         12:96:44:6a:6d:42:ea:48:67:81:0f:8e:94:60:60:52:76:1f:
         45:54:59:55:71:5c:36:d0:1d:21:fa:b0:60:1f:f8:dd:3b:13:
         d5:b7:dc:60:bf:1b:49:43:82:c5:d3:1e:0f:c0:ca:51:38:40:
         2c:c5:b1:4d:0d:bb:7a:55:da:bf:7b:b0:40:14:0c:f9:80:26:
         81:43:f8:00:db:0c:28:35:03:c9:33:a0:d8:07:cd:c5:12:61:
         3b:ae:f6:a5:67:a7:18:eb:ef:ac:3f:3b:63:c7:5a:83:4f:a1:
         2d:ee:66:59:42:a8:d6:87:c6:67:f7:c2:d2:9f:18:11:cf:bd:
         15:cc:b3:31:44:f7:69:f9:ea:02:2f:20:40:48:a1:72:ce:e8:
         c9:3e:b3:bb:06:05:47:bc:d4:01:bd:10:3a:35:60:65:24:b2:
         5d:9a:c1:53:17:01:79:9c:d4:49:47:fb:ea:f3:f2:5b:73:2c:
         d6:8d:9b:a3:67:6c:a9:6a:1e:a6:5f:1a:e2:76:c7:ea:b8:de:
         7f:11:f4:59:17:8f:1a:48:7d:97:4c:38:7a:d8:be:a6:1a:91:
         d2:c2:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----