Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File:                     6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier:          qv/+xNtzaTGEdLPVXZyM9tIILWjWlijkKHQzVIVFysI=
Subject key identifier:   62:1B:5A:BF:50:EB:CE:85:FA:0F:D2:77:7F:C7:DB:38:E2:41:62:43
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer:       /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial:       01962ECFC462FE1F0D6053C9E4E04D8C9A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number:          0C4B
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: q9K/pUvWqKvUEUsGMv8RLkaLRhnJVeNXDXb3JV8vl3Q=)
                          2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:62:fe:1f:0d:60:53:c9:e4:e0:4d:8c:9a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=621b5abf50ebce85fa0fd2777fc7db38e2416243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:3f:9c:9b:74:cc:13:1b:48:fe:df:2c:cf:
                    0a:b1:88:ad:9c:7b:37:f4:96:eb:6c:bd:97:da:f7:
                    e7:06:35:0f:c2:2b:b0:47:68:18:c3:f7:b6:4c:fd:
                    e0:70:5c:b4:aa:8d:e6:4a:c7:08:fe:cf:0e:3f:e8:
                    c7:bf:f9:f6:31:fa:a9:52:2f:16:00:5d:58:73:ec:
                    34:b9:4f:e3:af:a1:fe:b2:71:98:54:f8:32:3c:05:
                    ef:d6:ef:be:e8:7a:73:0c:6e:69:0d:69:c4:c0:ee:
                    82:a2:c7:5d:d1:c6:68:a9:6b:f3:5e:5a:e1:04:47:
                    86:34:9c:e1:21:a4:06:9c:8a:9d:ad:b9:66:a7:ab:
                    fc:2a:03:bc:91:52:4b:41:4d:21:a1:2e:b0:b7:69:
                    4a:61:9c:1d:62:0b:05:54:dc:b5:6a:84:1d:9f:25:
                    cc:06:4b:e6:16:d8:25:e6:98:f9:27:c1:fa:66:e0:
                    81:fe:e0:78:d0:d6:49:5b:ef:f3:b5:8c:73:58:c5:
                    99:53:6f:32:3d:d8:44:9b:cf:35:67:39:ec:f6:5a:
                    19:37:b5:2b:5d:0d:96:55:b9:8c:27:2e:bd:84:7a:
                    be:d4:f8:a2:c9:26:57:97:a2:3b:95:dd:03:2e:ef:
                    4f:16:cf:42:fa:1b:99:98:d8:29:47:2f:ac:ff:54:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:5A:BF:50:EB:CE:85:FA:0F:D2:77:7F:C7:DB:38:E2:41:62:43
            X509v3 Authority Key Identifier:
                keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:c9:14:d4:89:bd:7a:21:ca:91:86:1b:5b:f2:dd:9c:ce:
         e9:c0:1d:ee:4a:a2:92:18:fc:94:e6:45:17:08:25:f0:80:cd:
         08:96:a1:bb:e0:2f:35:d6:c0:b5:ed:0c:59:40:01:59:b8:c7:
         97:4f:ff:22:e4:19:19:42:4a:ed:ec:f0:1d:7d:a5:27:6b:be:
         0c:68:c9:3b:a3:a7:b6:bc:88:cf:22:88:be:84:5c:8f:f0:2a:
         fe:48:08:80:a8:a2:c7:a9:77:3e:1a:1a:24:2e:9a:bc:4e:82:
         7c:55:07:f3:ba:53:b4:74:f0:0b:be:c8:d1:95:27:d6:63:e2:
         8e:de:97:94:ce:48:1c:35:e7:85:78:37:28:0c:5b:f3:e9:db:
         52:fa:e7:c2:96:03:34:d5:ec:47:14:2c:5e:90:55:2d:30:b2:
         ff:6a:a5:ac:20:34:bb:ea:6f:6d:3a:4e:a3:63:5d:61:15:47:
         17:9a:25:19:a3:4c:55:e2:d9:92:a8:7b:6b:80:78:f3:5d:bb:
         72:11:7c:41:20:50:92:79:e7:0c:2d:23:03:ed:fb:9d:24:1a:
         8c:4a:81:79:a5:ff:4e:39:0a:44:0b:b6:26:a2:6e:38:f7:45:
         12:95:65:6c:59:98:e8:2e:68:ac:65:53:45:69:a0:7c:2f:3f:
         c7:33:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----