Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          KN/izvIoCjIZjmESrjzrs+AhFdbFsHiGCsv0bGtcVkk=
Subject key identifier:   DE:63:E1:4C:B8:2A:BA:2F:C9:09:B2:E3:53:2A:67:45:B6:3A:71:52
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       01962F746C4510C1920D557C047553739044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          0C3B
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: ahHZf/vq3xuiGv+IKeGpjmRicUE31nU8mXwJUxMpe80=)
                          2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6c:45:10:c1:92:0d:55:7c:04:75:53:73:90:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=de63e14cb82aba2fc909b2e3532a6745b63a7152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:82:5e:62:33:b1:e7:91:d8:c7:94:c5:98:
                    9b:7c:07:41:eb:4c:20:ca:e8:0a:01:be:84:74:a2:
                    32:98:91:af:ab:43:e4:f4:6f:4e:5a:41:e9:80:cc:
                    45:10:b8:a2:0f:37:c4:f5:7c:1b:55:d6:25:22:f0:
                    06:b6:b3:84:56:72:2f:97:f3:2a:8e:2b:79:66:88:
                    c7:ba:23:e3:99:80:13:9a:75:5f:01:fd:5e:13:56:
                    51:2b:1a:f7:d3:11:ed:cc:9d:fd:6f:c0:39:94:17:
                    f7:1f:dd:00:15:2f:92:ca:00:83:d4:ed:f9:f1:b2:
                    ea:f9:6e:54:36:8d:91:45:05:23:2a:29:d2:ea:c5:
                    53:07:c6:2b:72:40:df:a8:a2:33:e8:e2:6a:58:33:
                    d7:8e:0e:1b:9a:d5:3b:20:a8:1b:eb:ab:b1:a9:5e:
                    92:6f:ab:c0:00:3a:e5:2c:76:77:0f:cc:ab:41:f1:
                    d2:be:8a:80:ab:48:c7:74:d7:29:80:d9:75:29:83:
                    88:5e:64:13:d2:c4:0f:15:df:54:73:7c:6c:11:47:
                    ec:68:f0:e1:f7:07:95:74:6d:c2:0f:97:0f:dd:2d:
                    99:cb:af:ad:c5:39:00:19:83:2a:ae:1b:91:a3:03:
                    a7:c8:95:ab:fe:84:7b:a7:3c:50:64:45:f9:70:e4:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:E1:4C:B8:2A:BA:2F:C9:09:B2:E3:53:2A:67:45:B6:3A:71:52
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:8d:14:fe:b0:2f:f2:fa:68:19:6c:07:09:fb:06:bc:36:
         4c:c2:c0:33:e0:f1:97:48:9f:8e:66:ba:3f:0c:a8:3d:7e:92:
         74:28:a6:7a:eb:33:50:c9:7a:ee:14:95:95:cf:02:4e:77:f8:
         6b:c7:8a:b7:bc:e4:74:05:c5:64:8e:e0:77:67:ac:c9:20:2b:
         98:0b:c6:3e:96:d6:c3:5b:2b:97:ce:cc:b0:37:b7:a2:ef:76:
         35:44:97:8f:d9:d7:18:33:63:eb:0b:97:e6:27:f7:bb:55:96:
         06:b8:75:87:03:76:5e:3a:f4:04:89:21:a0:fa:3b:a8:cd:54:
         95:72:04:7c:29:ff:8e:7b:68:3b:cb:c5:75:a4:0d:95:fd:dd:
         b9:67:e1:ab:17:38:ac:81:58:6d:b1:c4:58:e6:83:6a:fc:bf:
         c9:12:0d:0b:a4:29:f2:cb:99:86:6b:10:f9:69:aa:bd:cf:9c:
         9e:3f:39:6d:88:40:bd:2f:f5:d1:dc:af:75:01:79:b3:eb:f0:
         c2:7f:98:f4:b3:f2:58:e5:4c:f2:2d:d9:9c:a6:b1:26:ac:43:
         43:30:c1:21:37:a6:84:04:05:16:d0:86:90:00:a8:11:f4:25:
         77:5c:c8:8e:c0:b7:2e:81:a4:33:57:02:70:23:75:a0:c3:83:
         42:9c:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----