Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File:                     a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier:          Vf36Hw8vd8HwlxjnBlE0WBUVbyCjO7O7TctN9U1aJa8=
Subject key identifier:   8D:6F:15:67:E5:F1:CD:CB:13:61:32:B0:55:84:1E:56:3C:62:32:F8
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer:       /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial:       01962F3D7730FDCDEAFCA25A7F83451A3F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number:          0461
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
                          2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
                          3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: yP8b291MA/aVPiN3Houqb8p70KVwTSx4/ZkGQuFUV0o=)
                          4: fzwNA1AIJZgXIe-eV_4xwZdcqjo.roa (hash: p2w9rtHczUi85IWJpB+w5VC3jS2eJ3WF/0EvWwOAI+Y=)
                          5: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:30:fd:cd:ea:fc:a2:5a:7f:83:45:1a:3f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=8d6f1567e5f1cdcb136132b055841e563c6232f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:70:a0:8c:c3:8b:28:2c:50:6c:02:86:1c:
                    e4:e9:56:0f:55:65:c2:74:b8:9a:e6:33:ce:fb:0c:
                    ae:cd:22:16:0c:3b:f0:1e:de:c5:56:d8:a1:e2:f4:
                    d9:5f:7a:21:0f:9f:2d:9d:30:93:a7:58:b5:2d:31:
                    0f:8f:26:9b:b7:bd:77:14:52:3a:f9:8b:01:d6:bb:
                    f2:24:5a:f0:24:01:f5:c7:51:00:f8:53:8f:5e:91:
                    81:55:79:ee:75:67:1b:71:1a:27:94:dd:d7:18:f0:
                    7d:c7:46:45:c4:45:c1:ea:77:17:b2:89:94:b6:0a:
                    73:5e:7b:b0:8d:46:f0:c8:13:c0:33:92:2c:2c:16:
                    79:f2:ff:24:13:4a:90:2d:da:fa:16:9f:9c:dc:11:
                    a4:fb:26:16:7a:5d:c3:ec:41:27:87:06:10:f3:95:
                    53:64:b2:d0:0a:c0:43:d1:a8:d0:99:fc:e8:ed:77:
                    f0:5c:36:f6:e8:b9:89:31:8d:37:f7:bf:66:1c:91:
                    99:d6:e7:1a:40:e5:ac:40:94:41:4e:13:5e:86:f2:
                    8d:8b:9e:df:d8:17:da:17:83:f5:d0:16:ce:c1:c2:
                    6b:3e:d2:48:74:00:61:97:34:ae:85:20:ce:0d:f3:
                    14:34:70:57:97:74:c3:31:f1:50:31:6a:38:84:24:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6F:15:67:E5:F1:CD:CB:13:61:32:B0:55:84:1E:56:3C:62:32:F8
            X509v3 Authority Key Identifier:
                keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:3b:82:e0:68:8e:bd:90:02:92:81:50:c6:62:78:8d:61:
         f6:8f:4f:ba:a4:7c:9e:79:d0:78:52:2b:ab:c6:c8:95:2e:53:
         c1:65:b3:7e:9e:de:a6:b6:6f:99:1a:2a:64:b6:8e:83:d5:3e:
         29:9d:be:bd:b7:ee:48:6f:7d:2c:04:d4:ce:a4:49:3c:d5:81:
         dd:e6:1f:a9:86:6c:2d:7c:b4:b9:62:90:29:5e:7e:4d:9f:f5:
         45:77:c5:f7:e5:4c:60:06:98:29:04:e0:52:57:1b:64:79:bb:
         75:5a:35:4e:18:c6:2d:12:54:12:21:91:6b:6e:1b:28:8a:97:
         f8:24:fd:f3:9f:5e:f3:d3:9f:b8:2b:d5:26:76:c9:a3:7a:67:
         29:5f:a5:63:dc:dd:07:eb:54:ea:ec:c6:09:b6:1a:68:95:47:
         06:51:19:3e:6a:6e:39:c2:4f:d6:b9:2b:9d:04:e5:d9:4f:fc:
         c5:44:70:a4:14:ca:8d:f6:c1:7a:42:59:26:4b:d3:dc:4e:9f:
         df:fe:5c:77:74:e4:2b:0c:4d:53:fb:94:6f:2b:5b:0a:dd:64:
         0f:be:b3:c5:92:2a:14:0e:05:45:65:07:a2:c6:3c:3b:f5:09:
         b0:43:b4:ae:a5:c6:38:71:5e:ac:11:d1:0c:b4:37:ca:92:d3:
         30:c1:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----