Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File:                     Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier:          eh3wfSrUQAxTfnrEaVTdLIH1OMcCeW8fomXAwPtkyEU=
Subject key identifier:   64:E0:27:9D:E4:CA:97:9E:19:CF:41:02:FC:65:47:BC:F4:97:B1:B5
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer:       /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial:       01962ECFDE9BD75393F8D63E0F6209983078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number:          0BDA
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: E7Zd/ju3aP0CmwJg/VZREvbfVJwi36ITlu7hCePHjdc=)
                          2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
                          3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:9b:d7:53:93:f8:d6:3e:0f:62:09:98:30:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=64e0279de4ca979e19cf4102fc6547bcf497b1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:3f:5c:a0:4e:8c:5b:fc:db:2c:5a:11:95:
                    78:81:6a:8a:1b:68:dd:a9:39:1f:e5:ba:b7:81:db:
                    85:be:3a:b4:15:47:2a:b8:76:4e:cb:ad:bc:0f:fb:
                    b7:da:89:08:33:65:d6:8b:1f:9c:ed:91:19:42:7d:
                    65:38:9c:5d:4b:d5:a8:da:e4:18:86:04:06:66:89:
                    c5:aa:eb:dc:a9:d4:47:20:90:e3:4c:7d:b1:a7:d7:
                    20:1c:7c:cc:cb:51:64:6f:cb:b8:9c:8c:20:d7:3a:
                    6f:73:1d:d6:ae:78:b3:f7:24:b3:8e:6d:17:08:b2:
                    29:ef:29:93:4b:08:4b:c2:5e:db:51:77:44:f9:37:
                    bd:c4:45:84:d4:ea:c5:1f:f9:58:7f:9c:fe:f0:c0:
                    0b:75:4d:6c:99:38:05:0c:82:35:c6:ec:6b:3f:0b:
                    e1:30:f0:76:c6:6c:6e:03:55:53:6d:2c:62:c1:8d:
                    4e:55:74:0a:6c:6d:05:b5:88:25:70:82:4c:cc:49:
                    b8:83:89:ea:c0:44:d3:55:d1:95:7d:49:04:b6:7c:
                    7a:06:0f:a1:94:cd:b9:1b:b0:d9:89:a3:1e:c4:84:
                    63:c4:6e:f1:5f:b4:c2:ef:62:1e:93:a8:d0:cc:1b:
                    8c:52:0c:09:4e:3a:d6:d7:a6:92:38:ab:c7:e8:35:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E0:27:9D:E4:CA:97:9E:19:CF:41:02:FC:65:47:BC:F4:97:B1:B5
            X509v3 Authority Key Identifier:
                keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:00:0e:15:54:b2:00:1c:3d:4c:62:56:cf:10:0a:c0:e7:
         da:5f:83:6b:68:7f:de:48:d8:54:65:ea:ac:23:82:15:7a:97:
         db:59:7e:78:f3:6e:93:45:34:f1:1e:a3:a3:21:f3:a1:88:02:
         6f:e0:01:cd:24:79:ac:0f:0c:c2:6e:de:e5:5f:1c:95:25:c9:
         ab:97:cc:e0:13:a0:d4:cb:e6:03:57:16:e6:ae:01:59:0d:4e:
         ef:f1:90:3c:04:da:53:e7:88:6e:fb:20:ca:1d:44:2b:0f:8e:
         b4:e0:dd:a2:ee:30:3a:ad:8c:91:0c:4a:7b:3f:68:46:f1:01:
         a2:71:fd:e3:04:f8:1e:7d:ee:0a:95:6d:ca:1c:34:f4:6d:d7:
         d6:88:fa:67:5b:d2:00:63:3d:40:11:92:fc:c6:c3:ee:8b:2b:
         39:40:66:54:d8:ec:c1:93:c9:6d:84:be:5e:05:12:fd:48:ec:
         25:71:19:d0:65:13:1f:50:2e:47:a1:b2:f8:9f:bc:1f:ac:54:
         34:03:df:57:80:f9:a5:b9:de:76:1e:ff:57:c2:1a:e4:0e:53:
         e8:1c:cc:75:fd:02:de:4c:b5:2d:c7:ad:5c:d2:2c:ec:f0:55:
         ff:05:70:17:93:07:f5:33:87:06:e3:c8:36:ba:aa:be:69:17:
         bd:44:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----