Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File:                     pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier:          cDPHgOauX9FLy1fAj45kv06VpbfuWvlKPNRFn2x+HVQ=
Subject key identifier:   6E:C0:C2:BD:AA:D6:2F:96:2A:37:4F:E4:F2:B4:87:BC:F0:6E:27:C1
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer:       /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial:       01962ECFCC6CA63B268198B69FD77A0949DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
                          2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: 1eFRqaYWjFT4CbXBb4S4DteTZ1UJIo+fk8hPjB06LM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:6c:a6:3b:26:81:98:b6:9f:d7:7a:09:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=6ec0c2bdaad62f962a374fe4f2b487bcf06e27c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:e0:fe:7e:c6:98:d6:34:e8:fa:41:ab:6f:
                    98:63:85:a6:7c:75:37:03:75:15:d3:2d:5f:8f:52:
                    df:20:81:76:66:7b:a6:5a:f4:8a:fe:fd:7c:50:23:
                    85:b1:00:02:40:b1:65:ba:70:05:4f:15:bd:fe:b2:
                    0c:6f:6b:a0:e2:78:43:07:23:a7:05:50:35:ad:25:
                    d3:4c:9b:af:3b:b8:4e:81:5e:1c:48:f1:37:a0:22:
                    ee:3e:84:c0:df:b5:39:7d:5c:1f:0d:e4:29:33:97:
                    6c:2a:57:1b:cd:1c:4d:ed:e0:ef:ba:bf:8e:97:72:
                    3f:3f:1d:8c:75:b3:18:bc:3d:37:d6:fc:ae:ff:57:
                    9c:b7:27:a2:c5:ff:0e:3c:6b:3a:5b:28:31:54:07:
                    cb:f5:a8:95:47:d3:1a:87:2d:b4:64:05:fa:09:eb:
                    c7:e4:7f:34:a3:2f:7a:3d:2f:d6:c4:7b:ba:ab:9a:
                    0f:91:6e:01:80:8c:67:43:60:23:05:54:33:97:1c:
                    29:e1:98:0c:eb:83:8d:61:a6:bb:84:ff:22:cf:e5:
                    6f:42:b2:8e:23:12:23:83:d2:1f:47:94:34:da:23:
                    a9:96:64:fb:08:4c:2f:24:db:30:f0:cb:85:a3:1c:
                    46:bb:5a:e7:d7:a8:a3:34:ba:dd:71:a6:1c:e4:1b:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C0:C2:BD:AA:D6:2F:96:2A:37:4F:E4:F2:B4:87:BC:F0:6E:27:C1
            X509v3 Authority Key Identifier:
                keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:61:88:6c:18:af:4c:4a:04:0c:a2:8e:9a:ca:66:28:5b:cd:
         96:52:79:e8:e9:0c:37:db:75:67:bc:c6:6a:7e:ff:6f:d0:5e:
         37:5f:19:6a:fc:54:f9:95:3e:f7:cc:09:0d:25:91:76:7f:cc:
         76:95:1a:79:1a:f6:06:c9:9c:1a:9a:1f:89:2e:0c:c7:82:68:
         c1:d8:4f:69:23:ad:3a:21:78:66:49:d5:ba:4f:9f:3b:8c:82:
         ff:bb:6d:99:c7:e1:9a:05:42:39:a2:d0:8d:f6:d2:e8:c3:2a:
         82:f4:21:69:52:c7:8d:f8:12:ec:ce:07:70:66:e5:6b:de:93:
         d5:73:b3:d5:4a:0e:da:4e:07:9d:72:13:c2:08:04:47:5b:c2:
         43:97:0b:50:5c:a9:e6:f9:be:0a:ad:e2:53:39:ec:d2:b3:be:
         f9:08:cf:ba:dd:f2:a5:36:e8:5b:d0:35:45:09:4c:e8:0b:01:
         02:43:d0:24:bf:33:a2:cd:35:2f:7c:6c:5a:70:79:7a:87:c8:
         16:72:ac:33:71:66:e3:49:63:b5:76:8e:03:bd:1b:41:f5:ea:
         f1:15:a9:86:ff:59:4d:86:65:9a:b8:29:16:a4:13:45:82:c5:
         23:3b:e0:57:f6:a0:08:55:4c:13:75:a7:d0:4e:7e:6f:c1:50:
         26:6b:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----