Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File:                     A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier:          HS6ix8u4WOMOdaTZC5ua98VMdNCgSaNad3/3RJWo4KU=
Subject key identifier:   B9:34:AC:3D:0C:79:58:3A:71:52:2B:02:90:11:89:BE:4E:99:84:DE
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer:       /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial:       01962F3D56A7519FC0D9AC02A6C442EA2643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number:          05D7
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: kKA7wD1lAmaLsZKtvHcu8GQvAS0oYxVJGQ+xoNajG/Y=)
                          2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:a7:51:9f:c0:d9:ac:02:a6:c4:42:ea:26:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=b934ac3d0c79583a71522b02901189be4e9984de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:6f:70:83:90:1e:30:61:67:17:c5:ee:58:
                    01:1f:5f:1a:8d:a8:34:19:ee:78:e6:44:a2:e2:f7:
                    2d:7d:de:6c:46:e6:a0:d1:3b:4e:94:07:04:58:ae:
                    8c:2c:b9:7c:c5:25:f6:9f:ca:5c:72:e1:44:bf:4d:
                    cd:cc:9a:42:f7:c0:6a:e7:d6:67:93:98:a9:32:ec:
                    e3:79:d5:71:82:44:d4:b1:18:8f:ae:e8:bd:24:b3:
                    8d:49:a7:88:48:31:31:54:66:de:c6:ba:55:ac:b7:
                    39:ce:ac:05:18:8c:08:ab:11:1b:c4:ed:b2:36:4a:
                    d7:54:e0:65:57:4d:3f:cb:79:ff:d1:0e:be:92:8d:
                    b6:0d:de:15:e5:50:f1:c8:ab:0f:8e:da:af:a4:7b:
                    46:dc:32:b3:34:69:7c:fd:44:8b:40:9a:b3:ea:19:
                    e4:3d:e6:78:d1:41:a6:23:e1:66:5f:bc:4d:bc:6d:
                    9d:69:16:29:ca:cc:af:5d:0c:c3:0f:19:03:a7:18:
                    5b:8a:02:c4:fb:23:24:88:cc:53:6f:17:97:8b:f9:
                    fe:6c:4d:2d:16:59:9e:ab:58:5a:d1:14:ae:3d:f6:
                    1a:a2:c9:35:68:a5:ca:5e:70:ab:9e:1f:93:8e:06:
                    9d:d9:05:82:3c:da:15:a6:63:33:af:ea:f7:fa:86:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:34:AC:3D:0C:79:58:3A:71:52:2B:02:90:11:89:BE:4E:99:84:DE
            X509v3 Authority Key Identifier:
                keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:32:4d:e2:e2:00:91:a8:ee:5c:bc:7e:25:72:d1:6f:e4:
         ca:6e:1e:16:88:75:03:4b:4e:c5:f3:d1:a2:44:15:22:ac:6e:
         29:9a:1f:e9:56:d1:85:c6:d6:12:9d:5a:6c:9a:be:82:4c:c3:
         70:d1:e9:8c:2d:54:4b:30:79:e4:9c:91:cf:8c:87:32:4e:6a:
         0f:b9:89:3a:da:53:03:f6:81:72:50:b3:ce:80:00:cf:d7:91:
         ed:c4:57:86:c7:b3:a2:cc:d7:0c:32:9e:a6:bf:3b:b0:6f:a7:
         7b:92:52:48:b2:50:df:0d:d1:8e:10:b8:3c:ef:dc:72:02:80:
         b3:15:00:37:62:0b:2d:be:f9:29:6d:db:fd:41:8e:17:cd:19:
         7a:47:d2:0d:44:25:80:0c:da:5b:96:17:77:0b:d3:23:71:1b:
         b1:21:33:24:2e:70:19:5e:b3:05:e2:74:86:fe:01:a4:b1:82:
         b8:dd:e2:e8:59:4b:44:5e:2b:67:36:74:a2:18:de:e9:2e:a6:
         29:61:7a:38:8a:4c:02:d8:ba:8f:db:ae:97:45:3b:59:b6:e9:
         5c:ff:ec:e0:b9:ba:fd:df:33:cd:13:95:96:32:f2:f5:ea:15:
         a4:2d:96:16:a6:ba:3a:97:1e:c8:83:79:96:66:61:9c:03:97:
         40:02:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----