Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File:                     Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier:          XOUXfD7PnQpBvHrzMahBEBOVcg42OGF+LlY6J03jXEc=
Subject key identifier:   5A:71:04:8C:09:BB:F6:6B:9D:F6:3A:9F:9E:70:6D:83:DB:57:A7:CD
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer:       /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial:       01962E2B15EAC2BA5FB2FD9186C78669B8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: u91rxKQXpPh6n0oTlJxKj/3G9jQApCc0lvl7mQO05xI=)
                          2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
                          3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:ea:c2:ba:5f:b2:fd:91:86:c7:86:69:b8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=5a71048c09bbf66b9df63a9f9e706d83db57a7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:f2:22:31:07:40:f2:3b:d2:39:11:d1:0b:
                    5f:b4:7b:d9:d6:c8:ff:89:62:59:e9:d7:ba:0f:ff:
                    2c:a3:ed:a0:fd:91:a3:7b:a1:f9:ec:b1:08:50:50:
                    be:5b:2f:38:2f:7b:14:6a:35:e2:c2:b9:15:e2:43:
                    8c:79:e2:df:25:26:b1:bc:ed:84:29:4f:6f:26:c4:
                    53:72:b1:40:00:bf:a5:03:75:a7:9f:7d:84:ca:db:
                    03:39:d7:ce:b4:b7:5e:3c:fe:d9:60:1b:6b:32:83:
                    41:0f:de:a5:12:93:4c:97:d9:a9:78:b4:15:26:be:
                    4c:69:b0:d5:51:c8:db:2a:7c:78:2a:b6:2e:af:99:
                    cc:e1:84:34:98:77:b5:4d:4d:1d:c1:fa:c7:41:b9:
                    c6:9e:55:14:3f:03:d5:b8:55:a7:53:71:bc:d6:e4:
                    67:41:7d:aa:e2:3d:ed:31:06:26:8b:54:83:a0:41:
                    ff:c2:c4:e1:5f:08:40:7d:8b:3a:aa:89:02:e3:12:
                    03:85:58:b7:e2:59:95:09:5f:a1:66:b8:ac:8a:fd:
                    17:18:2e:68:82:d0:b7:24:b8:3c:59:0e:56:ea:28:
                    ec:08:ad:a0:8c:ac:51:8d:4e:d7:87:e1:31:91:55:
                    59:b6:dc:97:70:32:0b:03:1c:08:84:22:d6:83:d9:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:04:8C:09:BB:F6:6B:9D:F6:3A:9F:9E:70:6D:83:DB:57:A7:CD
            X509v3 Authority Key Identifier:
                keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:f0:d9:8d:4f:c5:88:8e:87:42:b0:aa:15:cf:6d:f6:53:
         1f:72:49:61:75:45:5f:1e:17:7f:ee:a5:c0:64:9d:5e:fa:d5:
         5b:92:ac:d6:9c:e7:69:02:35:be:85:fc:d1:a2:8a:f2:13:fa:
         b1:fc:f2:78:c4:21:86:19:d7:77:0b:4d:aa:15:e0:df:2f:a1:
         ba:90:fe:28:f6:e9:9d:c1:e6:a5:d4:1d:7b:ea:07:2d:28:b9:
         08:e6:cc:34:c8:33:52:8a:01:46:11:b9:f8:5b:90:59:e1:49:
         6d:7c:c8:2a:0b:c4:ce:51:ac:2d:6a:a1:bf:28:65:6b:ec:6e:
         c1:f5:b3:82:a6:de:39:a4:99:af:fa:0e:6f:87:6c:12:84:8b:
         43:64:52:db:bc:31:a1:fb:1f:db:3c:55:e1:a2:d5:28:40:c1:
         4f:f4:b5:15:1c:2b:2b:60:7a:f6:ee:c1:f4:d8:47:3a:28:52:
         29:a6:b1:30:d2:83:4b:cd:6a:16:24:ae:d0:f7:d0:2e:9c:44:
         cd:c4:ed:8b:b7:d7:17:bd:09:c9:df:1f:84:61:c2:75:b5:a3:
         97:7b:35:89:78:97:24:5a:d0:7f:cd:56:a1:c5:b7:da:21:e3:
         07:01:a2:d0:8c:1a:ba:26:19:97:4f:ce:d3:5d:ba:57:7f:a5:
         96:55:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----