Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          lApUlOt/V0d7DbFwD8C3x0tWaCDu9+1YzFE8ZXEpNzY=
Subject key identifier:   1E:63:0C:9D:D1:58:D8:6A:6D:C1:88:6D:C6:14:2D:E0:AF:65:AD:A2
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       01962E988374EDEDD6420C8E8234002C6728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: kWwz1fdJHBweo8Xy1I69PFXnoMNg8znwixzQcoGhXrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:83:74:ed:ed:d6:42:0c:8e:82:34:00:2c:67:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=1e630c9dd158d86a6dc1886dc6142de0af65ada2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:4f:5e:0d:f1:2e:06:6e:24:0c:d6:4e:df:
                    91:a3:14:40:49:85:09:3f:21:c0:25:31:c3:27:b4:
                    c8:05:1f:bc:16:06:76:04:d6:cb:c8:1c:59:fd:00:
                    77:67:0c:0a:20:43:aa:08:67:a8:4b:cf:69:be:be:
                    69:48:8b:0f:62:de:2f:37:8c:64:0a:96:5c:29:45:
                    24:4a:25:ee:9d:e6:09:36:7b:63:ec:79:9d:bf:da:
                    dd:40:2e:6c:a7:d6:a0:66:d8:63:2a:80:29:37:65:
                    8c:97:dc:30:06:0c:b2:ea:29:ab:00:97:ed:27:3e:
                    1e:45:13:0d:88:e5:67:c6:88:ae:9e:68:06:6d:c1:
                    f4:1e:e1:b1:7a:f6:82:13:8c:64:a5:21:4a:60:12:
                    86:34:30:83:a9:db:31:b3:b1:4c:27:0e:4d:d4:ea:
                    c4:f3:f7:2c:f5:b1:9a:4a:d3:27:d7:91:89:33:d0:
                    6e:b3:fb:c3:8e:e9:6f:9c:ad:93:8f:ce:5e:f6:2d:
                    e0:83:5d:76:52:f3:0d:a5:86:11:6d:5e:ef:fb:8b:
                    9e:68:e2:18:2a:b3:e3:a3:58:8d:59:41:83:2e:85:
                    7c:8d:99:29:cc:ca:2c:b9:c9:00:b6:f7:ca:36:37:
                    44:9c:70:16:1e:b5:f8:be:fb:0c:4f:42:1e:6c:49:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:0C:9D:D1:58:D8:6A:6D:C1:88:6D:C6:14:2D:E0:AF:65:AD:A2
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:0e:11:7b:c0:7d:00:56:5a:77:29:86:b0:4c:c4:86:69:
         c5:67:0a:61:dd:90:e4:21:99:59:9f:26:30:87:dd:b5:77:71:
         9b:0c:bf:be:09:6e:9c:39:86:c6:91:ce:78:b1:58:ba:9d:1a:
         59:1c:f8:ca:dc:fb:94:6a:0d:f3:74:78:2e:2d:7a:5d:49:f3:
         d1:c8:1a:92:6d:c9:9b:0b:9d:a5:1e:50:2f:02:22:16:40:61:
         ed:8e:2e:d0:e9:e4:a1:5f:9b:b8:1b:42:24:d1:b6:47:30:d6:
         c7:64:23:18:ba:42:14:f7:48:06:2d:02:dc:d4:dd:a1:5b:ac:
         df:c3:72:63:3b:9a:f5:08:06:3c:b3:4f:40:df:0e:bb:7c:1e:
         c3:fc:93:a4:ed:9d:12:04:e4:4a:56:6b:44:6e:ba:41:62:36:
         cd:dc:b2:5d:94:ac:9b:0c:bb:23:e3:66:5c:46:dd:0d:42:06:
         53:79:13:1b:b0:54:9b:7f:3f:f6:50:95:8a:40:ab:21:a4:1f:
         3f:2a:07:11:4f:66:91:84:81:bf:22:b2:0e:de:57:d5:17:e8:
         bc:fd:ed:ba:36:9d:c5:01:97:c7:b4:2b:38:81:87:d6:9f:ca:
         b3:b2:c3:af:b9:0c:39:a7:7d:b5:6f:9b:38:16:cc:dd:a5:cf:
         68:0c:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----