Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          XLh3mt5uyCazJUCsNCtmJAdDcokJ1cZdN7jFvddEPO0=
Subject key identifier:   E6:23:8D:59:49:67:7A:CE:E6:49:7E:B1:7F:C6:13:B3:8E:8F:41:2D
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       01962E2AF03D2D58B9C7DAB5826C972DE2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: /iA9TgEcW8ydi+qEemohyPBfkYyV6EEJhLROpxXr0XM=)
                          2: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
                          3: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          4: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          5: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          6: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          7: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
                          8: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:3d:2d:58:b9:c7:da:b5:82:6c:97:2d:e2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=e6238d5949677acee6497eb17fc613b38e8f412d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:48:e8:d1:50:81:d9:84:7f:48:05:48:41:
                    c3:9d:45:85:f3:9e:bf:fe:40:90:6b:d4:f5:61:67:
                    d6:a8:77:ef:9c:5e:f5:05:98:22:db:87:b5:61:6e:
                    43:a3:72:52:73:7a:ec:64:8c:1c:a1:37:ae:b1:57:
                    92:88:8c:6e:5b:db:6a:4b:90:a2:20:bc:4c:6c:9c:
                    4b:0d:1a:64:f9:38:1c:b6:dd:20:43:2e:98:e7:de:
                    b8:e4:c9:dc:d2:ce:29:40:ed:03:0e:a4:1f:c6:52:
                    d6:72:5e:1b:d6:86:2e:26:cc:d1:5c:62:55:32:9b:
                    34:9f:63:04:25:22:fc:ae:b5:cd:a8:26:c2:96:a9:
                    68:1b:5c:c2:2b:50:a7:0f:04:22:f0:ad:4d:9e:5d:
                    e3:ca:43:b2:5d:7a:fc:60:ba:43:6f:26:52:ca:f0:
                    b4:21:84:bf:4c:b7:7e:73:41:ec:1c:a8:b0:5b:78:
                    79:b0:b7:6e:7b:56:21:ca:ec:62:2b:11:53:5e:bc:
                    2c:18:2a:10:29:ac:b8:e1:0a:65:4f:dd:4c:cb:73:
                    9a:46:67:17:2a:00:80:ce:aa:7b:9e:7d:06:40:19:
                    04:b3:be:71:ed:87:59:97:f5:51:68:8d:e2:5d:ed:
                    84:be:31:2a:97:ef:39:21:a5:df:2e:0f:94:6f:04:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:8D:59:49:67:7A:CE:E6:49:7E:B1:7F:C6:13:B3:8E:8F:41:2D
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c6:72:32:bf:83:f2:ea:64:33:e0:28:d7:f2:48:16:26:6f:
         41:24:b1:aa:fe:2d:18:b1:df:68:55:ee:aa:e7:8d:75:30:c1:
         fb:57:c7:46:b8:85:b3:06:10:81:5c:4c:71:02:3b:99:88:1b:
         d1:f8:0d:ed:ff:59:64:ca:8f:30:59:f0:99:42:c5:b2:e1:24:
         38:25:d1:e6:e1:56:21:1f:44:48:a8:b4:d1:cf:4a:ea:ce:23:
         66:4c:0e:ca:d1:8a:0d:2e:08:16:c5:7a:99:e1:b9:07:f2:38:
         91:2b:f6:f4:db:56:fb:31:2e:59:ca:37:41:63:9f:39:00:ae:
         03:3c:2b:ff:fe:bf:19:ce:25:9a:8f:33:ef:43:f8:82:31:ec:
         61:ba:b5:0a:6c:e3:3e:99:05:db:5b:68:d7:7b:41:61:1d:9d:
         15:72:51:a9:c0:81:7e:c0:a5:4c:fc:50:4d:89:96:2b:4d:5e:
         9e:77:e1:7c:ce:12:5f:ff:bf:8b:c6:4a:9f:e8:67:fd:63:b2:
         4c:7c:98:9e:e9:4c:77:0f:db:7b:bb:5a:2d:0a:c3:a4:b5:fc:
         3a:b8:71:66:6e:c1:c5:e9:4a:f6:86:ef:a0:f3:e6:10:c9:53:
         4d:b0:1a:f7:d1:38:7a:e5:88:65:9d:59:1d:7e:f9:55:e6:ac:
         1b:25:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----