Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File:                     apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier:          nTQIS5QmFmbjhjuBsdNl/IhvAVwC2FXlGLbFTEjzaKw=
Subject key identifier:   A3:B7:C1:CC:B6:5F:BF:F4:DE:43:11:34:D6:69:3F:4A:5F:FB:E8:75
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer:       /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial:       01962FAB6F2A02EAAC56458AF5866DE95B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number:          0BB9
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: trfzlVrQIMiwKxxChDQBSOtr61fCJlR5e+rv+6M0fW0=)
                          2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:2a:02:ea:ac:56:45:8a:f5:86:6d:e9:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=a3b7c1ccb65fbff4de431134d6693f4a5ffbe875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:e2:1c:8b:af:06:2c:6f:c5:5e:b4:9d:4e:
                    ca:b6:f7:af:68:02:2c:38:4c:7c:52:9d:b8:8b:10:
                    d6:3b:07:d4:aa:b2:0f:a6:b2:a0:ad:94:02:18:64:
                    37:15:25:b9:a0:20:1c:be:e3:bc:19:47:2f:a8:b9:
                    c8:61:92:3f:fc:a6:41:2e:ed:6f:c1:fe:77:5c:d1:
                    03:cc:36:7d:55:e1:38:e1:c5:7b:32:e5:20:04:6c:
                    37:d9:6b:93:d8:27:6f:4a:a5:8a:1f:63:7c:1e:d0:
                    87:86:65:3c:67:0e:fc:9a:a9:6f:03:4d:2a:b1:08:
                    0c:8d:ad:84:36:8c:40:53:ea:37:84:6b:0f:ab:29:
                    72:79:7a:b5:d1:be:ee:a9:47:a6:bc:1f:50:23:93:
                    f0:21:9a:b0:9f:b0:6b:8a:f8:43:b9:84:bc:61:58:
                    04:c3:d2:93:f7:98:92:77:10:00:a5:7a:3b:39:39:
                    14:22:10:07:d4:53:ee:88:ae:99:5b:36:15:fb:52:
                    8a:40:97:e4:f8:7c:3a:12:b6:87:9e:9c:5a:0d:31:
                    81:ae:69:f8:b9:1d:af:e6:16:6a:7b:de:f4:0c:54:
                    f5:1c:28:bf:2b:27:a8:1d:fd:88:ba:35:6a:e1:05:
                    b0:24:fc:d9:38:d7:5e:e2:42:ef:3d:7f:a2:01:83:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:C1:CC:B6:5F:BF:F4:DE:43:11:34:D6:69:3F:4A:5F:FB:E8:75
            X509v3 Authority Key Identifier:
                keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:10:38:0d:30:50:bb:ff:d1:a2:d9:63:50:2c:b8:6b:8d:5c:
         39:b7:d7:95:c3:f3:fd:28:89:6d:3e:3f:1f:eb:9a:a2:3d:fa:
         6f:32:be:7e:f5:0e:b6:9a:0f:e7:ed:d5:f3:2a:91:ed:b0:ab:
         d5:97:a6:0b:44:4e:13:b1:3c:77:5b:e2:7c:dc:ec:e1:04:e8:
         62:db:28:16:b3:84:bf:f3:07:28:1c:86:d8:b4:1c:bb:77:37:
         e3:73:80:21:54:57:b3:9e:75:1a:2a:e5:a8:f2:63:8b:f8:e0:
         e2:cc:be:b3:92:94:e7:5b:2d:f1:1a:39:89:46:14:8d:e1:87:
         cd:8c:c0:8c:17:49:b5:72:75:94:51:19:a7:f4:ad:db:b5:0e:
         e9:74:6e:b5:af:3f:ac:8c:0c:02:f4:5f:6b:93:2a:16:c0:0a:
         5d:96:c3:ef:60:98:34:f9:2a:88:44:13:8d:49:b5:36:df:08:
         86:9a:c6:75:59:ac:67:98:62:c8:a7:51:a5:29:02:80:f7:f8:
         6e:41:52:f2:49:2a:ab:99:86:81:14:d5:b4:77:6b:e5:23:75:
         82:19:3e:cb:f0:ae:36:cb:ac:4c:5c:5a:49:38:82:44:d6:15:
         66:13:a8:3f:45:46:3b:0d:10:45:82:a5:85:03:71:fb:48:17:
         39:4b:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----