Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          cUJ8NqwrdDZsqwH9xtKwQqPIWIi2eHBGmEs8MuAYPto=
Subject key identifier:   83:1E:D9:59:FE:3D:0D:7E:F6:3E:69:47:B9:08:C4:10:36:B5:52:74
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       01962E987CF3C0614C55FFC9D4BD995F595B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          055B
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: isRpXL7azZN4zLIX0tNzOrZwntUYKcXUx0j2b9VOosA=)
                          2: q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa (hash: cfokvWEVeqwKPxGczy1eXytgUST2AAuJ7ts04BX5rq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:f3:c0:61:4c:55:ff:c9:d4:bd:99:5f:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=831ed959fe3d0d7ef63e6947b908c41036b55274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:ed:2a:41:0e:dc:88:8e:ab:be:b4:42:c0:
                    7c:ff:5a:b5:a2:d8:d9:b9:a0:1c:ad:54:33:3c:f7:
                    80:3c:79:2d:e4:4f:2e:93:49:cf:b7:6e:33:95:16:
                    3e:25:d5:49:4e:de:68:48:7a:a5:e6:45:11:12:ec:
                    5e:0b:2d:73:3b:1f:f3:42:f1:08:a1:a2:20:f3:24:
                    98:7f:58:12:c9:ce:37:08:8e:8f:7c:47:37:e9:ba:
                    f5:2d:ac:34:b1:36:03:7b:0a:65:07:b8:d3:0a:77:
                    71:da:93:d7:97:5f:01:11:a2:65:07:6a:41:6a:78:
                    f8:ff:5d:1e:79:d7:d2:4c:fc:90:54:3c:77:81:19:
                    4f:31:12:e8:ef:81:b0:e1:b0:df:74:f4:c1:e1:6b:
                    38:81:12:dd:51:59:9a:92:8e:6d:8d:e1:c1:26:b6:
                    b7:36:b0:68:4b:2a:5a:1a:8f:96:7f:45:8b:73:34:
                    25:ca:29:0b:7e:95:fb:13:8f:58:e4:34:2e:ed:25:
                    60:53:19:c6:76:33:0c:89:28:23:ab:9f:f9:ce:c8:
                    c2:a4:87:6d:99:c3:47:46:93:12:52:d0:d5:79:98:
                    e7:c0:f3:60:60:72:23:53:d6:4b:a9:d5:0b:b6:97:
                    80:ce:94:1c:73:fe:62:42:f7:37:81:23:f5:c2:e2:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1E:D9:59:FE:3D:0D:7E:F6:3E:69:47:B9:08:C4:10:36:B5:52:74
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:ab:86:4e:f0:7d:58:e1:a9:27:32:5f:d7:c3:fd:d3:8c:
         88:91:97:85:41:95:47:7c:43:d9:85:cb:33:a2:ec:01:05:ac:
         ba:36:42:55:8a:01:a1:de:2d:82:ba:9f:2f:f5:0a:a2:9b:80:
         9b:4a:b3:dd:1a:ad:bb:57:a1:98:ff:21:c6:0b:e4:ed:54:89:
         d8:89:79:45:75:9e:42:d0:bb:a8:4d:3b:cf:d1:cd:71:7c:ab:
         54:18:c7:54:a2:5c:b5:db:de:c0:d7:f8:20:9e:7e:6d:ac:9f:
         cd:17:b5:da:3b:1d:74:42:95:54:bd:85:e5:f6:b4:20:95:60:
         c1:a9:35:52:11:bc:11:81:c2:07:c0:57:9f:c4:cd:f7:a0:db:
         4b:e5:56:03:a3:1d:4a:6e:d1:df:2b:eb:40:da:3d:1d:61:0a:
         e8:f5:d7:19:fc:59:7d:e5:a7:2f:3a:64:8e:32:14:91:44:ca:
         f3:60:4d:26:85:da:43:a1:60:a6:73:36:bf:77:32:d8:7e:3b:
         aa:d1:b4:d1:4c:11:c2:21:0c:cb:96:1c:44:51:a9:cb:04:18:
         27:81:52:38:31:ff:26:f7:af:82:62:33:5b:5f:ac:6a:77:32:
         54:2a:2e:c8:0e:1b:9f:f4:40:b3:ff:b4:20:eb:5d:d2:26:76:
         43:9f:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----