Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File:                     pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier:          VqGPw+abWIkcww+gtKbQcqE3TGZnvlcPNN8bQQVLadE=
Subject key identifier:   42:7C:BF:DA:FF:EC:83:15:36:08:F1:24:87:F5:A2:5E:D4:1E:AD:8B
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer:       /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial:       01962E99B38E156E886E8F8B6582AC24E552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: i0bKRX6wrofLfxxpZYPq2Wn6337m+AHfQBZIuGzjdHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:8e:15:6e:88:6e:8f:8b:65:82:ac:24:e5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=427cbfdaffec83153608f12487f5a25ed41ead8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:b7:e1:e7:4a:73:3b:f4:2b:c5:cc:5a:d8:
                    75:22:d3:ca:a6:f1:10:36:f6:ce:3c:c2:c8:87:52:
                    f3:40:7e:ca:97:df:64:73:1e:68:e2:7e:c0:3b:83:
                    b6:8a:03:6f:82:35:4a:e5:a8:bc:b5:6d:3f:b8:76:
                    b7:6a:21:dd:bb:6d:34:ba:3f:65:87:84:1d:38:0f:
                    be:13:4d:11:c0:ae:41:5e:38:67:07:f5:e4:4e:72:
                    55:c3:16:d0:a7:b9:93:12:4c:f7:b1:54:5e:7c:68:
                    df:d6:ad:37:44:af:31:a4:bf:72:9f:e9:5f:a1:5a:
                    48:99:5a:1f:92:59:7d:e3:23:9e:41:b9:1e:9e:f1:
                    59:a5:17:cc:e4:81:01:a4:e9:6f:a3:79:b7:92:e7:
                    41:0a:78:42:c8:2b:20:47:30:62:d3:e1:fd:da:ea:
                    ef:04:f6:2d:64:7d:12:4a:ce:c9:16:90:1f:29:6c:
                    5c:a4:ca:74:d7:33:0a:46:24:15:58:19:92:da:13:
                    9e:48:27:44:2e:1c:d4:a0:f6:da:2f:0d:77:62:31:
                    a7:15:7b:14:56:ae:ad:a0:51:50:d6:b4:ce:dd:5a:
                    f4:c5:48:86:af:5d:19:9c:1e:fa:a6:1d:bb:27:c8:
                    a2:dd:a8:da:d6:64:5a:66:c9:47:3e:5c:29:c3:c0:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:BF:DA:FF:EC:83:15:36:08:F1:24:87:F5:A2:5E:D4:1E:AD:8B
            X509v3 Authority Key Identifier:
                keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:2d:4f:0b:e5:d0:14:12:a4:e0:e6:76:42:35:dc:8c:ab:
         7e:e1:f2:b9:82:4c:d6:b8:95:83:3d:1f:47:f9:9c:15:c7:73:
         a1:47:17:e6:c6:70:59:e1:2f:a0:96:58:de:d8:97:45:b0:7e:
         69:ad:d1:1d:94:b5:87:23:cb:8a:10:22:45:c1:ab:c1:36:94:
         f7:fb:67:50:0f:f8:d6:38:f5:8c:32:ff:c2:61:46:7f:e2:9a:
         81:a6:ad:dd:ce:26:4e:58:24:8e:89:03:7e:7a:6b:5f:14:6f:
         26:32:66:45:56:5c:69:8f:4b:b8:20:5f:e9:a7:7e:91:87:f0:
         3e:7f:69:9a:eb:d9:33:db:e8:bb:be:5b:ec:ce:98:2c:6e:9b:
         41:8a:1d:e5:7c:eb:d7:96:e4:ec:65:86:af:c8:e7:f0:8c:2d:
         fa:71:40:d9:1b:09:ed:82:da:92:01:3a:cf:7e:70:ee:c0:10:
         f7:e6:8d:75:c6:36:b2:fc:77:87:41:fb:a3:24:d5:9f:33:5f:
         ea:a4:87:b0:01:8c:12:cd:19:63:8d:50:85:39:ab:6d:a4:5f:
         34:0d:52:67:cb:be:26:26:bf:62:0b:ec:2c:4c:d0:cb:57:27:
         4b:43:97:ed:dc:93:9c:7f:4f:f8:20:99:d9:9c:9b:c3:f0:d2:
         ed:93:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----