Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File:                     bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier:          dVvUoXtj1mCszMbCYbidBY9HZsrU9uQSZdEc6l6q1B4=
Subject key identifier:   AE:44:BC:D2:7C:8B:FB:77:AE:38:6B:FC:06:E5:40:44:6B:F8:5C:66
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer:       /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial:       01962F744D55F394F5BC010ED6EBD25600CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number:          0511
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: RsO0LXdS81LK50811m8N/ExC8gSbpSEiJJ9o7UGvVrY=)
                          2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4d:55:f3:94:f5:bc:01:0e:d6:eb:d2:56:00:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=ae44bcd27c8bfb77ae386bfc06e540446bf85c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:83:f5:b0:0a:71:76:43:c0:ba:9b:d9:e4:
                    09:b7:79:a1:a6:fb:72:20:fd:b9:89:68:5d:7c:23:
                    e0:ce:bf:72:32:9d:76:14:f4:11:03:31:8d:24:01:
                    eb:ea:a1:18:d8:15:07:81:c1:5f:1c:ba:4b:f5:72:
                    88:a3:e4:7b:d4:8f:2c:fa:64:58:48:af:3d:a5:5d:
                    cd:4c:9d:2d:97:28:1e:59:f1:05:26:fa:94:be:e1:
                    cf:17:24:39:d2:d8:37:c3:18:2a:c2:f3:0a:87:6b:
                    d1:0b:55:98:7e:19:a2:8b:28:9b:a8:06:9d:51:23:
                    86:ca:ce:a5:c0:a3:cd:8e:4c:fe:c7:1e:07:c0:fe:
                    01:24:2a:67:ad:da:78:b5:e0:3a:e4:6a:f4:b3:10:
                    c0:a6:0d:4b:b9:1d:f1:53:e7:af:30:79:8a:3d:4c:
                    c9:18:2e:fc:6e:17:4b:55:5c:bb:4b:41:6a:55:56:
                    5a:1f:cf:ff:78:0e:ee:72:5e:13:0e:db:e9:f6:a4:
                    83:98:21:62:b7:59:c9:aa:0b:d8:f4:48:35:19:55:
                    0c:ef:a1:10:c9:04:8e:1a:ba:9c:92:57:82:79:21:
                    53:31:75:b4:e6:b3:b5:94:e0:59:97:3e:af:8c:d6:
                    bf:76:02:c1:c7:34:cd:ad:b5:05:e2:ac:94:e9:9d:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:BC:D2:7C:8B:FB:77:AE:38:6B:FC:06:E5:40:44:6B:F8:5C:66
            X509v3 Authority Key Identifier:
                keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:26:93:62:a7:22:38:28:e9:a4:51:0c:c8:93:9d:87:28:
         c0:04:8e:c6:66:40:dd:1f:64:0f:71:43:72:06:32:e0:6d:ad:
         f3:22:7d:2c:10:6b:ef:f8:fb:eb:5c:fc:5d:f0:14:18:b1:9e:
         f4:fc:ee:03:93:bc:9b:6d:de:d8:23:cd:49:0c:6b:b4:0a:82:
         a4:7f:88:2b:27:be:89:29:00:19:51:9e:71:c4:94:56:0c:68:
         29:fc:9a:93:ef:55:72:1c:89:36:d0:cb:90:d6:98:31:cd:5f:
         a2:ce:bf:3f:e7:4d:9b:c4:75:c3:97:e1:a9:6d:13:b9:58:ad:
         58:60:c2:40:f6:00:27:bf:e0:11:76:7b:9e:e9:0a:29:64:0b:
         e6:35:0a:24:e6:ed:c3:8c:99:52:cb:cd:98:b2:92:42:ca:83:
         84:b2:4e:23:81:6f:64:c0:8a:6e:95:18:32:d4:09:99:77:85:
         55:7f:fd:de:2b:98:16:0a:86:d2:77:0d:f1:be:e9:63:4d:82:
         ae:f7:21:37:7a:92:a8:6b:cc:39:38:bc:a9:8d:1c:36:88:79:
         bc:63:d4:95:b6:7b:16:ec:0e:dc:20:90:a0:f1:06:f3:1d:ba:
         85:7d:16:4b:8d:92:7e:9e:a6:69:f2:4a:fc:6a:9e:f3:68:9d:
         8a:77:ef:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdE1V85T1vAEO1uvSVgDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw
NTZmYzgwHhcNMjUwNDEzMTQwMTEzWhcNMjUwNDE0MTQwMTEzWjAzMTEwLwYDVQQD
EyhhZTQ0YmNkMjdjOGJmYjc3YWUzODZiZmMwNmU1NDA0NDZiZjg1YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+D9bAKcXZDwLqb2eQJt3mhpvty
IP25iWhdfCPgzr9yMp12FPQRAzGNJAHr6qEY2BUHgcFfHLpL9XKIo+R71I8s+mRY
SK89pV3NTJ0tlygeWfEFJvqUvuHPFyQ50tg3wxgqwvMKh2vRC1WYfhmiiyibqAad
USOGys6lwKPNjkz+xx4HwP4BJCpnrdp4teA65Gr0sxDApg1LuR3xU+evMHmKPUzJ
GC78bhdLVVy7S0FqVVZaH8//eA7ucl4TDtvp9qSDmCFit1nJqgvY9Eg1GVUM76EQ
yQSOGrqckleCeSFTMXW05rO1lOBZlz6vjNa/dgLBxzTNrbUF4qyU6Z2qzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5EvNJ8i/t3rjhr/AblQERr+FxmMB8GA1UdIwQY
MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt
ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3
LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW8mk2Kn
Ijgo6aRRDMiTnYcowASOxmZA3R9kD3FDcgYy4G2t8yJ9LBBr7/j761z8XfAUGLGe
9PzuA5O8m23e2CPNSQxrtAqCpH+IKye+iSkAGVGeccSUVgxoKfyak+9VchyJNtDL
kNaYMc1fos6/P+dNm8R1w5fhqW0TuVitWGDCQPYAJ7/gEXZ7nukKKWQL5jUKJObt
w4yZUsvNmLKSQsqDhLJOI4FvZMCKbpUYMtQJmXeFVX/93iuYFgqG0ncN8b7pY02C
rvchN3qSqGvMOTi8qY0cNoh5vGPUlbZ7FuwO3CCQoPEG8x26hX0WS42Sfp6mafJK
/Gqe82idinfvfw==
-----END CERTIFICATE-----