Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          2tsMm1/MTDPvzPyWH+def7FytXe34jvVoTidgzRPuC8=
Subject key identifier:   FA:E1:6D:F9:5A:9B:DF:69:B7:45:51:B7:9E:D6:C8:1A:B7:A1:73:37
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       01962E997296E78E603820C528A9880B1623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          09CE
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: E3Mc7h/2eypeQjALdJmUKGYadzqVqbLsY1Qns06ZVnY=)
                          2: gWnW9lnMPM8qZ8END1_wzvVFr0k.roa (hash: c0ARRE6viXKVlOCnUB1u64Fg2irbTI2KZRKH/h8XIAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:72:96:e7:8e:60:38:20:c5:28:a9:88:0b:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=fae16df95a9bdf69b74551b79ed6c81ab7a17337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:8d:87:df:66:f3:a5:87:f4:15:2a:be:f9:
                    ab:ce:4f:b5:7e:92:c0:83:20:d1:97:2f:19:95:55:
                    9e:cd:d5:b3:14:b8:b8:ed:2a:37:d9:61:85:86:55:
                    c7:5f:6b:7a:6b:32:cb:3e:e3:fe:c6:5b:55:63:40:
                    5a:36:3d:f2:6a:b5:05:12:ed:ee:55:a1:b6:60:a7:
                    b1:87:88:7c:96:3c:ed:fa:ab:8f:39:9a:32:6d:9f:
                    a4:b3:81:3f:b8:ec:99:f6:96:17:d5:5e:a2:b6:08:
                    19:94:76:a5:89:2d:17:eb:40:86:5f:5e:ed:5c:c3:
                    9e:db:a3:4e:de:13:3a:2e:c2:d2:f3:13:82:24:9d:
                    ad:2a:a4:8b:07:bd:b1:11:ab:06:e2:c1:18:c1:57:
                    c4:9a:52:e7:1d:d2:38:4b:2b:87:44:2e:08:5d:56:
                    16:fb:81:c4:5b:d7:00:83:64:be:e9:63:dd:16:5a:
                    9a:df:9d:1c:41:8f:b0:cc:27:1f:5c:1b:1c:fa:c3:
                    bb:ca:0c:9a:f5:ee:fd:d5:b0:7a:0e:1e:db:3c:2d:
                    b3:d1:93:56:c1:cc:eb:b3:65:5a:64:b1:94:a4:90:
                    f0:1d:9f:9c:b1:1a:1e:13:60:4a:af:a9:20:9a:9c:
                    cb:51:30:a9:3c:a3:e7:cf:cf:8a:00:2e:67:12:9a:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:6D:F9:5A:9B:DF:69:B7:45:51:B7:9E:D6:C8:1A:B7:A1:73:37
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:42:93:9c:0a:42:06:65:dc:29:54:94:9d:f5:51:29:a0:d4:
         13:1c:d2:73:20:67:0d:9d:84:07:fe:ef:d8:24:41:29:8c:81:
         d5:8f:44:69:02:99:67:5f:cc:3e:4c:d4:8d:90:40:72:de:49:
         40:f3:08:d7:7f:87:36:8d:0c:c7:15:ac:77:56:ff:77:b8:65:
         7e:e8:5b:58:8f:c2:35:e0:58:d6:c6:3f:c4:ad:4b:f0:5b:3f:
         90:b5:93:aa:49:6d:95:04:fa:0c:a5:aa:b9:b4:b6:36:47:4e:
         f0:eb:49:59:57:50:1d:20:f4:29:6b:dd:b7:53:cc:5f:84:1e:
         84:98:56:1e:0f:29:b2:4b:77:dd:f1:5c:71:79:c1:db:23:aa:
         72:b5:91:70:5a:98:4f:bc:1d:c5:a2:65:fe:0f:5b:4c:b0:b1:
         0a:f1:4b:40:2b:c1:79:4f:10:62:b4:7f:b6:00:a5:d2:39:bf:
         e6:f5:ce:42:6a:5e:a3:33:86:b9:cd:7b:f6:ca:66:d7:4c:94:
         f2:db:b1:6d:bc:f8:cc:89:14:d9:4c:6f:db:11:b7:c9:e3:10:
         74:88:4a:42:d2:ef:18:aa:71:30:5c:1a:c6:02:2b:c3:d0:7d:
         18:83:ea:8c:eb:03:5a:a1:25:03:09:ec:f3:da:69:23:54:b4:
         03:e2:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----