Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File:                     a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier:          wkQ5RH3VEMPqgKp4/424xmX6yk0/dhcmcj++YNrw2D4=
Subject key identifier:   45:B6:A8:06:DC:47:EA:64:4C:E8:C9:71:33:CD:1D:D5:7B:1E:2D:C8
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer:       /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial:       01962E6208D4DC5E582F3498790CA15AE565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number:          01E2
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: sAkDDxDFeKgfiVmgvhvg9pMgB9+njzloV14rHqZkX9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:08:d4:dc:5e:58:2f:34:98:79:0c:a1:5a:e5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=45b6a806dc47ea644ce8c97133cd1dd57b1e2dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:b3:8e:05:ee:8e:99:b1:cd:61:0e:1a:e0:
                    e0:0b:31:cb:ae:25:21:72:e8:3d:ef:5b:15:2a:4e:
                    c6:8f:6d:bc:42:be:08:26:5e:21:cd:18:2e:87:cf:
                    7e:d7:ac:7f:94:ae:bc:4c:ce:b9:d9:74:72:57:e5:
                    86:d7:35:c0:fe:11:2a:6d:de:31:b5:ab:a8:ff:b1:
                    9a:57:7a:d5:ec:fa:19:05:d0:90:0c:61:52:9e:3b:
                    18:0b:3b:18:6a:8f:d2:c9:04:cc:f4:45:0b:61:fb:
                    f9:bf:b6:4b:b0:5e:94:8c:37:ee:32:d1:7d:63:7f:
                    8e:95:2c:3f:91:de:e0:d9:06:ce:c3:ac:29:d1:4c:
                    51:1d:aa:81:83:53:33:c5:5e:02:7c:db:64:5c:0e:
                    0d:a2:eb:ba:6a:15:65:43:c1:a4:3a:18:ef:e4:a9:
                    11:93:a2:f3:a9:24:67:14:2c:a7:bc:6d:4c:b5:33:
                    d0:a0:1f:67:75:2b:f5:80:1b:9d:f7:d4:44:f6:8a:
                    3c:3b:34:6d:f9:86:26:ba:10:ba:37:c8:0f:70:c2:
                    62:2b:94:45:5a:ee:8f:bf:9a:b6:11:66:bd:18:09:
                    55:17:79:05:97:fa:22:6b:12:18:5a:71:33:f4:62:
                    93:e3:3f:f2:13:7d:04:7e:63:da:34:ae:d7:11:f6:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:A8:06:DC:47:EA:64:4C:E8:C9:71:33:CD:1D:D5:7B:1E:2D:C8
            X509v3 Authority Key Identifier:
                keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:39:99:c7:a5:21:0c:8c:47:5b:4e:4f:ed:29:fd:2d:9e:
         af:37:20:5e:ac:0c:9f:f0:05:84:b8:ff:42:33:12:23:9d:9b:
         80:2d:f5:7e:ce:01:32:32:57:c3:b3:80:f5:80:fd:90:06:60:
         c4:24:a2:25:db:99:a3:3a:5c:44:7f:67:9d:bc:02:c0:fd:a5:
         e5:b5:c6:c7:53:90:cd:68:fc:3f:44:85:6a:e6:96:69:d5:2b:
         18:f8:18:9f:81:81:c5:03:af:7f:77:a4:d5:57:bf:f6:27:fc:
         52:f2:57:0a:79:04:91:38:6e:c1:a1:2a:52:37:30:0a:e4:b7:
         2b:89:34:a3:87:62:28:54:4c:64:ed:fb:f6:b8:b7:a8:04:43:
         24:2f:86:6c:71:09:cd:ec:cc:73:c3:5a:0e:07:3a:ca:61:ca:
         99:e5:b3:a3:0d:88:43:17:46:5f:a3:ba:c4:74:cd:fb:a8:e2:
         55:23:db:b0:48:72:fd:22:d7:cd:b1:fe:e1:e8:d8:a8:d9:b5:
         a6:2a:70:7a:c3:b1:dc:1d:81:78:6b:c1:1f:a5:d2:90:ef:50:
         31:23:04:18:21:ad:31:9d:03:c4:26:14:c0:3b:26:a6:8b:72:
         f5:4e:94:45:34:14:00:f3:90:06:c8:c7:71:05:4b:4d:c3:f5:
         d3:98:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----