Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File:                     bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier:          QtPEQQ+jUB8Fa896lj5wPuo0yk4E23BkRupVqmKRNDU=
Subject key identifier:   D1:C9:A3:57:22:5D:9D:65:FC:5B:58:34:00:5C:EE:2F:4D:FB:AC:60
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer:       /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial:       01962ECF7758AD530BA494914D2527613E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number:          0ABC
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: kS+X2O4zyamfqFzk2bC1qfOWx/5csg1XSNuKb4HpbnE=)
                          2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:58:ad:53:0b:a4:94:91:4d:25:27:61:3e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=d1c9a357225d9d65fc5b5834005cee2f4dfbac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:84:23:70:72:36:76:54:e1:f9:35:5d:82:
                    71:1c:73:5f:1d:ad:6e:95:43:12:86:80:11:0b:0f:
                    ad:be:43:b8:57:0e:59:09:b4:53:e8:85:1b:6c:cf:
                    92:11:24:b0:4c:2b:82:5f:a1:5f:a7:47:85:c4:b1:
                    67:95:6e:4f:ed:13:93:93:01:24:a0:ea:68:c1:74:
                    2d:af:3a:71:67:04:f9:fc:89:f4:76:17:30:ef:01:
                    18:ee:6e:6e:a1:91:9e:40:4b:6d:26:0d:10:4f:f9:
                    97:5a:f9:e2:86:b7:ec:b8:6f:fb:4c:02:a3:04:1d:
                    ab:6c:73:8e:ea:9e:e6:6e:7e:e3:77:c8:98:35:4e:
                    a1:95:69:07:22:21:1e:cb:aa:c0:40:d0:c9:97:4a:
                    59:51:50:5e:41:d0:16:66:bd:c7:c5:cc:16:cc:81:
                    51:8b:6b:f3:89:f3:a1:66:f0:97:b8:8d:b6:1c:ea:
                    cc:1e:a2:48:24:89:9e:03:41:45:9b:a4:18:75:49:
                    81:8d:5c:07:a3:3d:1b:4b:01:3d:b6:ec:3e:6f:4d:
                    8e:62:7b:d4:5c:22:81:12:b3:95:c1:d7:10:4f:5c:
                    49:5a:37:16:6e:2a:34:08:47:cc:e1:62:45:0d:c5:
                    a0:4b:60:bb:7a:bc:d8:b6:3b:67:b9:46:79:47:49:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:A3:57:22:5D:9D:65:FC:5B:58:34:00:5C:EE:2F:4D:FB:AC:60
            X509v3 Authority Key Identifier:
                keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:26:86:5b:10:29:25:1e:3f:71:cf:e2:64:df:49:9e:35:
         25:18:a2:31:cf:c6:21:eb:4d:00:cc:45:18:16:23:da:0e:17:
         a8:25:2c:8a:b9:53:7c:23:2f:4b:7d:56:d3:8b:ad:29:d5:bb:
         20:19:a2:5a:8f:d8:e0:9c:03:f4:85:6f:13:f9:96:98:e0:1f:
         bc:4f:d0:45:b7:72:f3:22:8f:df:3b:b8:7e:82:4d:ab:95:0a:
         0e:2d:c5:df:36:77:19:b9:86:a1:85:a3:ff:30:25:82:6f:a0:
         96:bd:f1:7e:7e:b5:b0:00:d0:21:78:00:a2:5b:b0:3b:cb:8f:
         96:dc:70:c1:ea:09:9e:2f:87:60:47:56:17:31:68:1c:3d:23:
         af:6e:4f:87:b9:eb:8d:85:77:ac:e3:f2:38:4b:b8:d5:2b:81:
         f0:69:f5:7e:37:30:fd:a5:09:9c:c6:59:08:25:25:9c:56:f8:
         04:bf:4a:02:2a:da:34:00:bd:ff:09:8f:f1:c3:16:9e:9a:97:
         2e:3b:c3:88:0b:35:3d:1f:a0:e9:8a:f8:29:81:bf:0c:74:81:
         3a:26:f0:25:1d:b6:5c:ec:33:9a:c4:ad:74:34:f9:2d:21:e6:
         37:71:a6:b8:25:74:c0:c3:7c:11:22:92:1b:01:e5:a9:04:c7:
         af:8e:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----