Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File:                     612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier:          KcSo05ktweHGW4c4syGJRX7bm4ngyQDsnKPOMls6Ew8=
Subject key identifier:   CF:10:17:F7:D6:98:2F:DD:21:79:76:0C:FE:E0:66:C9:01:FE:8B:F0
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer:       /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial:       01962FAB84DE79FC6DC9AE6FC6035CAC1C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number:          129D
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: ixyNdUVnCriOEnhJvgNPfEu4e2FO3DaVnh3dd+yaSKU=)
                          2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:de:79:fc:6d:c9:ae:6f:c6:03:5c:ac:1c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=cf1017f7d6982fdd2179760cfee066c901fe8bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:31:42:ec:a4:6f:37:eb:c2:c9:98:7b:2e:
                    6d:2a:22:4c:9d:f7:12:c2:0a:ea:92:44:f5:5e:5d:
                    5a:e0:68:bd:52:e1:f4:f5:02:63:63:d8:d1:ec:fe:
                    22:41:15:93:8c:a5:8d:a8:89:e8:f8:78:6e:e7:e0:
                    f8:80:31:9f:2a:8d:20:a0:5d:51:8f:b8:75:0f:d4:
                    ca:bd:4e:18:71:76:99:75:63:74:2a:35:e6:a6:56:
                    ef:f0:49:12:96:b5:07:06:0e:2c:13:3c:a4:e1:bf:
                    a1:da:d6:bd:b3:68:0f:59:e9:45:6c:fd:c2:fb:13:
                    b9:77:74:46:80:d2:1e:ee:3e:b3:85:08:d4:16:e6:
                    11:ce:60:f3:ca:2d:37:4c:94:68:ee:91:d5:d7:9c:
                    4d:cc:82:f5:a0:9b:31:68:f5:f3:b5:3b:2b:39:34:
                    cb:ff:cf:2b:69:2e:3f:f8:60:f6:4c:19:57:b4:29:
                    6a:18:1c:2d:44:c2:b6:34:f8:96:c8:9a:3e:dc:b7:
                    50:c3:65:77:80:20:5c:17:4e:2d:dd:3f:b0:91:a2:
                    29:8c:a0:11:3d:54:64:be:50:78:35:0b:e9:93:38:
                    94:29:cb:19:f4:38:0d:ff:88:95:86:ff:3e:35:87:
                    02:4c:00:b8:77:58:78:80:2d:4d:e1:d3:78:b7:55:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:17:F7:D6:98:2F:DD:21:79:76:0C:FE:E0:66:C9:01:FE:8B:F0
            X509v3 Authority Key Identifier:
                keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:36:d5:7a:3c:07:49:b8:cd:f7:6e:64:16:3b:f2:65:71:
         73:11:02:45:31:5e:44:57:8f:0e:87:75:3c:84:57:0b:6e:0d:
         5d:c3:a5:fb:48:a7:95:58:76:b1:1b:b7:48:81:9d:44:68:82:
         65:76:f3:95:49:00:8b:96:88:98:c7:8d:7b:57:c3:f9:a6:44:
         61:23:3e:2c:78:6b:f7:3a:2b:bc:35:24:8a:90:df:70:c6:b6:
         5a:4d:1f:2e:80:50:f7:ac:5f:51:47:d8:5a:77:8c:06:8b:1b:
         8c:ec:55:1b:f1:f0:52:0a:9c:c0:d8:03:5b:93:bf:0b:7f:bf:
         bd:9a:67:9c:e6:9d:cd:f0:b5:71:7a:49:de:d3:c4:60:ae:c5:
         36:4b:67:ca:e6:98:0a:22:4d:90:d8:d3:54:a3:bc:e5:99:33:
         40:78:3c:4e:23:79:b2:70:b2:cd:9f:53:81:3d:23:18:62:4c:
         90:50:a6:e4:74:e2:c7:8a:83:3a:2e:07:9c:c4:37:50:ab:70:
         54:55:f7:fc:29:88:2d:d3:8f:d3:f2:82:68:3f:63:80:96:a1:
         f5:81:92:bb:14:ee:f4:83:23:b4:b7:2d:56:87:7a:29:c3:63:
         25:db:60:05:73:bc:70:d0:3f:6c:a1:5b:69:80:56:ac:75:56:
         ab:f6:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----