Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
File:                     6R7yKtqhbVPc9jfFafQTHyYhW5E.mft (raw, json)
Hash identifier:          iZP64f5n9UqJg7/EBfkTviuf5bq1qoThhYM85BJXwGk=
Subject key identifier:   85:3A:01:47:47:2C:6E:14:B1:CC:57:3B:D3:1C:C6:24:B3:7E:5F:63
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Certificate issuer:       /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial:       01962F3DB7A134752CF19F320125E3E5E3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
Manifest number:          0320
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 6R7yKtqhbVPc9jfFafQTHyYhW5E.crl (hash: WJUuP7FZ27F40za9ccde79mIW5pg6waJflaVNnqLb6s=)
                          2: VSiJq_SSetDQ9lJQzDuEfowyqaU.roa (hash: YGFPYJ0TEH8su6DknCQ+b3e3i2s5d5zraYfnCC22FF0=)
                          3: WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa (hash: p1IXSS0dQT7jQoZ+bhqnxR0GfdNISbb4bIxh4ZncPMk=)
                          4: nzxRK0cEa0Q5b6bg41vXqADSLgQ.roa (hash: r0hQk+KsffZwjWrXcUdE/l2HhKGLarRWRSIYMo2t7F0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:a1:34:75:2c:f1:9f:32:01:25:e3:e5:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=853a0147472c6e14b1cc573bd31cc624b37e5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:b0:9f:8e:22:d6:fb:ed:2a:0a:df:64:77:
                    cf:84:5d:87:ea:a8:28:bb:18:16:53:cf:6b:a6:a0:
                    a3:a1:b6:67:00:db:00:73:25:21:62:63:05:70:12:
                    24:47:5e:ed:58:de:f1:e8:a0:d9:d4:82:a2:c6:b9:
                    e8:49:ac:af:5d:73:72:a7:c0:2b:70:24:e7:fb:ea:
                    42:d6:22:03:91:eb:32:0c:1f:09:b1:cc:8e:b8:ac:
                    98:de:8e:4a:72:50:c0:79:f5:00:b3:bb:90:9d:38:
                    e0:f2:ae:55:34:4a:1d:73:5b:a9:af:08:24:5d:68:
                    d7:03:92:fa:92:47:41:c2:36:3c:60:8e:ca:5b:26:
                    c0:2a:e1:c4:e9:95:d4:57:52:c3:51:44:4e:78:9b:
                    6c:02:71:09:e4:e8:6b:70:aa:91:c9:1d:a5:34:ab:
                    35:87:0e:67:80:e7:ce:18:f3:f6:ef:fe:d3:92:4e:
                    46:b6:dc:65:f9:45:be:7e:05:11:7e:4a:6e:fb:b3:
                    00:98:9a:1c:53:06:f2:25:78:bc:ca:95:9b:9b:0b:
                    49:e3:d3:3f:01:80:20:36:73:a2:e0:bc:3c:02:b0:
                    17:b3:ff:a2:eb:d2:67:ec:71:4b:df:94:0a:67:9a:
                    57:d1:e1:d8:fc:2d:0e:90:58:4d:b3:f4:4c:0b:7c:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:01:47:47:2C:6E:14:B1:CC:57:3B:D3:1C:C6:24:B3:7E:5F:63
            X509v3 Authority Key Identifier:
                keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:f5:16:13:b5:09:be:fd:da:89:b0:65:6c:f2:77:4d:06:
         af:de:b6:2d:8e:00:7e:0e:35:d3:59:34:dc:b9:d8:11:d3:e9:
         d7:6c:2a:ed:87:3a:a1:0e:c5:4d:a1:fe:53:78:fd:d7:de:0b:
         b3:eb:ce:bc:56:48:b2:25:fd:67:f3:c6:93:d9:5d:49:4d:1a:
         1a:f2:64:07:e4:34:24:73:b2:a1:2f:e1:4e:f7:e8:8d:84:dd:
         6c:d1:e3:26:e2:a9:d8:e0:42:52:91:fe:95:d4:3c:01:20:84:
         15:58:06:d6:9a:d8:be:9f:6f:1f:72:fa:24:ba:83:6e:69:d7:
         46:f9:ab:a6:28:7d:a1:4a:a3:66:62:39:09:da:8d:ab:31:6f:
         0c:77:7b:30:2c:b1:e6:25:31:6e:86:a0:6f:38:e5:b9:92:cb:
         e1:e7:b8:44:0b:15:bb:0e:80:cd:47:72:82:9f:e7:33:a4:0f:
         1c:5f:02:71:99:9c:2c:d2:3b:d9:13:85:6f:ce:86:e5:3a:22:
         14:94:e2:4f:db:01:84:7f:e9:07:e4:02:bb:a6:75:3b:f8:3d:
         c8:80:bb:37:07:99:69:b5:92:f5:45:db:9e:09:48:ac:71:d6:
         b3:90:36:77:7b:3f:4e:03:53:2c:87:48:87:f8:0d:ad:3c:4d:
         95:08:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----