Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File:                     6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier:          EZHMLBAVWOvbZ4bQqv+2P5giHX4ArHKQ3ASOPj/I0q4=
Subject key identifier:   BC:56:7E:53:55:B4:84:BA:9D:72:71:28:39:35:56:9D:2E:70:E2:9B
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer:       /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial:       01962F3D3A54D6B822A69B2B62BF79F6F338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: 1zrSfZ1TfZh6UoGK4HJhLbJCrLAv5HjXfOiUyiZAQ/Q=)
                          2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
                          3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3a:54:d6:b8:22:a6:9b:2b:62:bf:79:f6:f3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=bc567e5355b484ba9d7271283935569d2e70e29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:98:be:3e:02:71:97:1c:d9:d1:8b:ae:6c:
                    81:b9:9f:39:a6:fe:ef:c9:97:18:06:18:72:21:42:
                    57:1c:e5:f2:37:7b:0c:40:78:96:81:75:ff:72:d4:
                    63:47:5d:4c:3d:61:2b:64:1d:2e:6a:03:83:f2:fc:
                    15:d6:4f:8d:e9:b3:bb:f5:9e:53:93:77:82:df:58:
                    34:f1:ad:47:60:1d:48:4d:eb:cc:b9:a1:30:10:2b:
                    c6:25:f5:f2:56:ab:3f:b8:70:75:af:7f:0c:ea:d1:
                    c1:49:66:96:9e:12:34:e6:ca:66:0b:b0:57:cd:52:
                    a6:a1:a7:5f:80:1e:22:bc:53:7a:47:0d:c6:87:ed:
                    ed:6e:6f:5d:0f:1d:e2:33:97:73:9e:bf:4a:db:e1:
                    f2:c8:ef:c6:04:34:e9:e9:d7:74:ee:68:07:df:c0:
                    83:b7:ef:77:2a:2a:be:7f:82:08:e2:4e:fd:c1:70:
                    c5:97:68:9b:f6:c9:5f:b2:42:5b:42:ef:3d:68:b7:
                    3d:05:7c:81:fb:79:3d:a3:1d:6d:e5:99:da:09:86:
                    4d:0e:2d:a3:7f:98:51:4f:8b:97:e5:ee:53:da:c4:
                    59:ed:c9:5f:b4:62:69:87:bc:b6:67:9f:4d:29:f9:
                    2a:3e:17:68:78:bf:28:32:7a:1b:3a:b4:bc:1a:82:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:7E:53:55:B4:84:BA:9D:72:71:28:39:35:56:9D:2E:70:E2:9B
            X509v3 Authority Key Identifier:
                keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:b7:c2:d2:2d:f3:44:85:cb:44:c4:27:45:48:e8:10:44:
         00:19:e2:b4:5e:90:4e:e9:05:c1:85:42:a0:1e:57:97:cc:71:
         32:1e:3b:a0:9b:b8:2a:fb:e5:15:d5:ab:61:ab:3d:d7:52:6d:
         7e:0d:19:0e:61:dc:a4:e1:7b:c8:a2:55:c7:e5:9d:1f:b5:dc:
         0b:33:0a:6d:49:b5:52:ab:52:25:73:28:5d:4d:6b:7b:88:b3:
         7f:7d:15:09:5f:d1:7c:18:5b:b8:4b:f8:f0:03:e7:3c:95:dd:
         9e:ac:87:47:2b:08:c4:9f:1b:11:46:68:04:93:d2:c6:b7:11:
         a3:46:8e:e0:f0:7d:45:e3:b6:84:e0:ac:f2:cf:1d:4a:47:6f:
         9c:6d:7d:8f:84:f7:1a:1d:19:c5:f9:6e:c6:47:2d:87:08:dc:
         bc:5f:c8:e8:91:01:97:21:9b:43:f5:4b:fd:8c:39:59:c4:6f:
         68:5c:27:98:42:0a:93:64:0e:b0:29:0c:37:25:4c:1d:ae:77:
         d8:52:85:95:f0:ac:99:18:46:cb:fa:66:0c:f9:b5:90:26:bf:
         8b:af:f1:7a:7b:2e:14:84:a9:a9:69:82:8c:9a:d0:44:7d:0f:
         cb:0e:2f:80:42:9f:e6:af:b9:83:a3:f4:bd:17:08:bd:2e:4b:
         97:a6:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----