Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File:                     6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier:          JhrzwSZCV/IgwrfOxdsQyiEWScbEhP9K2O2pKMgowfo=
Subject key identifier:   C5:0C:B6:5E:DB:AB:D0:B8:EA:ED:F4:83:50:72:7D:2E:9A:41:F3:C5
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer:       /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial:       01962E992351E5520986CE72EE0C3F6311E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: mVyAlx1cRadsM6lTuGds5TPfO/GRpb8/AGTu3PKM1Is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:51:e5:52:09:86:ce:72:ee:0c:3f:63:11:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=c50cb65edbabd0b8eaedf48350727d2e9a41f3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:79:2a:2c:be:3b:c4:41:16:1d:59:90:97:
                    19:eb:d3:e3:d7:1e:9a:ad:9b:a7:38:cb:4a:fd:d5:
                    42:b4:b6:0f:f2:1d:cd:58:88:20:28:51:cd:6d:27:
                    22:14:56:21:bf:7f:fb:1f:14:11:4a:ab:0e:19:87:
                    27:82:0e:18:b9:99:46:bf:1a:2c:38:d1:19:69:b1:
                    58:e8:40:fe:6d:40:b4:4e:ad:89:12:eb:ef:8b:1a:
                    da:58:05:08:3c:8d:69:1b:43:19:1e:db:b1:93:dc:
                    0f:02:fb:64:05:68:7c:42:d8:35:21:ed:c5:12:f1:
                    28:62:87:49:37:bd:e7:9b:ff:5a:d4:53:90:27:23:
                    d1:58:01:8e:78:b4:61:ec:74:67:f1:8e:d6:b6:1e:
                    ea:01:dc:eb:9d:c1:c9:3f:7c:36:cc:f4:17:1b:a6:
                    d5:96:79:52:a6:15:86:3c:ed:3c:aa:d2:67:89:56:
                    fa:c7:74:c3:29:a7:1b:37:50:88:c2:90:5c:0e:e5:
                    2a:06:67:bd:9c:93:1e:fe:0f:c7:b1:93:c9:6b:65:
                    08:46:fb:d6:f9:a2:b3:3f:f9:d1:06:92:9e:d1:c1:
                    36:c8:4a:96:8e:d4:c2:f6:f4:ca:5b:66:15:46:0c:
                    3f:7f:5f:9a:ca:dd:85:71:b8:1e:1d:d2:ed:94:03:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:B6:5E:DB:AB:D0:B8:EA:ED:F4:83:50:72:7D:2E:9A:41:F3:C5
            X509v3 Authority Key Identifier:
                keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:55:ef:5e:15:28:04:dd:34:ce:52:0c:8e:d0:4a:54:84:b9:
         4e:f9:75:27:eb:71:97:3b:3f:86:ab:31:c3:f1:a0:e2:ec:6d:
         8d:bd:48:54:2f:60:62:9c:c5:75:9c:14:83:f1:c8:45:39:3b:
         3f:03:d4:2d:c8:fe:bc:65:95:98:d2:e4:07:29:e8:9f:96:b6:
         0b:fa:cb:6d:3e:53:b1:f1:15:38:a3:9c:42:18:35:30:e8:dc:
         01:17:1b:28:c7:f1:d0:7c:31:96:fb:8b:86:ed:dc:90:80:e0:
         cd:0a:81:07:2a:4b:8b:5b:77:e3:56:54:5c:66:eb:00:41:e3:
         06:95:5f:32:d0:13:76:4b:79:08:a7:b3:4f:21:54:82:46:28:
         bf:44:c0:2d:06:a1:26:f3:73:a2:24:54:9a:69:2c:e5:3a:e2:
         8e:a2:9e:0f:3f:82:b5:a8:a4:ac:f2:de:71:6f:4e:c4:22:4c:
         f5:b0:a3:9b:46:c4:2f:34:fc:61:69:e6:63:35:9a:f1:18:d0:
         44:e5:a6:52:31:7a:55:3a:88:f5:09:3e:4b:e9:3f:24:15:b3:
         ba:e5:89:c4:05:b9:db:bb:1e:f2:d2:29:03:91:16:d4:1f:4b:
         6d:41:a0:01:ef:02:c4:ea:58:41:21:f3:b6:0f:ad:12:27:61:
         c3:a3:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----