Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          h6vq2xWWp1CgPtCwE8pAHcEahXH6FKSGzTwd6Y+y8jI=
Subject key identifier:   9A:01:0C:E0:45:B1:1D:A2:0E:AA:79:F3:B8:26:0E:21:25:6B:E8:E3
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       01962E9879B3C74E12488B0E3B797D7A02B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: ztE+sx/FejP3kAeIIXFky0WxxFRib2sA5xaCrsB/OhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:b3:c7:4e:12:48:8b:0e:3b:79:7d:7a:02:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=9a010ce045b11da20eaa79f3b8260e21256be8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:a4:da:b1:33:78:a5:c8:97:cc:ff:4e:40:
                    aa:70:bd:d2:b2:9a:dd:62:19:cf:f8:80:09:e5:f1:
                    e0:77:a9:e7:8b:96:2b:63:37:14:26:d7:04:aa:ab:
                    2a:6e:16:33:f1:3b:73:70:41:e9:c1:bd:20:20:6b:
                    0a:11:0f:15:e2:8b:69:8a:b5:4e:60:02:b8:ec:5e:
                    16:12:2a:48:75:57:94:83:e1:5b:bc:0b:3b:48:a8:
                    7b:d1:f4:b5:b1:5b:e7:a6:52:b7:8d:50:28:db:90:
                    67:6e:8a:93:fd:dd:81:16:c3:7e:62:5c:a7:a4:42:
                    13:4f:dd:27:4d:3c:a9:c4:42:45:30:23:0e:73:d3:
                    d6:47:ac:ad:0f:0d:72:63:7b:a3:fc:31:29:16:87:
                    a1:64:31:58:87:8e:38:4e:00:fd:3b:7d:e8:21:25:
                    0a:a3:3b:e8:bc:a8:26:ef:be:76:55:a9:5f:54:d7:
                    1e:b4:8a:07:b1:cd:80:22:ee:2b:5d:2c:5e:75:8e:
                    2b:f5:57:2b:51:5d:d5:ed:cc:8b:14:79:f1:a0:25:
                    72:cb:d0:41:aa:f1:bf:49:80:dd:37:f9:1b:bf:a5:
                    23:d8:4d:5f:39:75:3c:0c:1d:8a:8a:38:34:84:96:
                    37:aa:1e:21:3e:26:c2:38:8f:47:35:9f:52:84:54:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:0C:E0:45:B1:1D:A2:0E:AA:79:F3:B8:26:0E:21:25:6B:E8:E3
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:fe:20:8e:0b:ed:51:a3:69:29:8a:2c:9a:c6:ac:9d:96:f2:
         fa:ea:8a:d1:65:5d:08:94:e4:a9:70:c3:32:d5:8d:44:b6:d6:
         52:20:6b:2e:43:d3:d8:f0:60:45:9e:28:b2:3d:f3:c2:ae:37:
         2c:e2:9f:c3:b6:09:02:30:1b:c0:70:d2:07:4e:a8:2c:ac:c0:
         52:0d:00:ac:0b:79:28:8c:55:9b:9d:8e:f3:5a:15:cc:b6:f5:
         51:3a:95:9b:a2:a5:cd:4e:0a:61:06:d6:38:46:7e:80:ef:23:
         67:ef:57:b8:4d:f4:11:7c:b5:a9:1e:ee:95:ec:0a:03:67:d3:
         80:a5:9a:fa:43:e8:e6:0a:6a:4e:f6:55:a1:70:0a:03:97:6f:
         61:b3:29:63:ac:d4:68:3c:74:d4:3b:62:af:c8:ef:25:e9:c6:
         16:77:3b:3b:43:8a:bd:34:e7:a9:aa:34:eb:2d:aa:e2:a0:22:
         fc:a2:13:cf:62:b7:e3:d7:38:43:73:bb:ef:49:35:0b:ec:86:
         6c:6a:d6:38:72:98:04:f9:0a:28:9a:fd:b7:dc:38:1b:0a:6c:
         75:cd:43:9b:cd:cb:93:7e:86:1c:9a:8d:b7:76:ce:0d:69:93:
         36:e0:8a:79:e3:ab:17:c5:b8:9a:1a:f9:ae:ad:2c:69:fe:7c:
         20:5b:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----