Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          XP3scjYqXoAmyTWFY0EBIUPSLmfs+m8ENFd/VXcAygQ=
Subject key identifier:   26:7B:B8:46:18:00:C8:6E:CA:02:39:DA:DB:CA:AD:2C:3C:FD:C1:F2
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       01962DF3C23389850A83B55A4AEAD2E41474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          0CF8
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: Q8bemJ+fC2lFHiRlJxwrkD2OQCB9cf5AILLZhQnrsKM=)
                          2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c2:33:89:85:0a:83:b5:5a:4a:ea:d2:e4:14:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=267bb8461800c86eca0239dadbcaad2c3cfdc1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:37:4f:59:ec:cb:b5:b8:af:20:17:42:62:
                    47:d5:21:f4:6d:12:59:9f:44:8b:55:8e:0c:4f:f1:
                    c2:35:59:99:86:7e:e7:61:a0:2e:5f:53:8a:30:ec:
                    f5:86:80:ee:a0:37:72:20:6f:d2:4d:57:b4:0b:5e:
                    57:63:1e:f2:22:92:f9:e1:6e:69:50:7e:da:2f:c4:
                    9f:77:c1:4d:04:c1:84:9b:fc:46:83:0d:64:49:7e:
                    6c:c4:19:56:90:a1:72:e7:b0:c5:7d:05:cc:53:e2:
                    a1:e8:34:31:43:7b:a7:e7:13:47:11:c9:87:b0:17:
                    a8:49:6e:45:17:c9:e2:45:9a:d6:70:83:9f:3a:ec:
                    7c:69:6e:c7:59:f2:85:83:25:04:45:27:23:f2:90:
                    51:06:98:cb:d3:f8:b3:fb:e8:35:52:0b:9b:ad:e1:
                    f1:d3:b5:30:29:5e:38:eb:dd:27:76:b7:47:d7:fc:
                    4c:f6:5c:ae:f1:d2:a0:fc:75:c5:29:46:5f:8e:37:
                    60:14:06:81:ef:13:81:40:b1:18:78:22:89:54:d3:
                    47:17:31:a5:de:09:8d:a2:1f:b3:c4:f1:a2:02:d1:
                    a2:b9:7a:4a:65:c9:38:8c:7a:ff:48:14:4f:14:ec:
                    f9:c7:71:4d:58:56:b7:7d:bd:70:55:c5:18:1f:98:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:B8:46:18:00:C8:6E:CA:02:39:DA:DB:CA:AD:2C:3C:FD:C1:F2
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:70:2c:ec:5f:e9:7b:ac:0a:35:96:44:a8:7b:bd:4d:f5:
         e1:8d:0c:8d:d5:c5:62:7a:53:fe:40:00:3e:7f:f7:21:ab:67:
         e8:b9:a1:fd:08:a1:87:fb:c1:a9:ab:86:e7:0f:9c:ba:d7:83:
         68:0f:d7:be:60:d6:ef:f2:ff:db:2d:fb:24:36:5d:79:8a:34:
         35:3b:1f:85:05:5e:3b:ad:21:c7:ab:c0:80:fa:ef:be:4b:99:
         80:b6:37:f0:05:8b:ae:6b:3d:ba:77:82:b4:78:05:27:a1:20:
         83:c3:a8:a1:79:64:85:c1:26:ee:64:ab:bc:2c:ea:55:7e:cd:
         78:6b:70:a7:4a:2b:53:83:d9:60:b0:01:8d:f0:bd:a3:73:31:
         8c:5e:c8:47:04:32:1d:35:19:14:a9:fd:7c:a9:cd:91:e8:33:
         76:e1:03:3a:15:41:82:ed:05:f8:90:6d:09:3a:68:4a:2a:ba:
         22:7a:eb:19:30:73:ef:42:aa:8e:41:a1:24:7b:ff:61:95:cf:
         49:28:d7:c0:fa:42:70:39:ad:56:2c:94:82:0c:88:9a:3d:52:
         2d:ac:99:eb:2c:3d:1a:9e:0b:60:cc:c0:8d:73:c0:53:5e:d6:
         cc:9d:be:b2:1d:d9:11:13:02:8b:ac:76:8d:f1:14:c1:33:9f:
         1a:cb:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----