Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          xalphcOKqwFWstORo86z0TbRBgdVZ7433uc9nAuE2gg=
Subject key identifier:   E7:63:3A:40:F1:E6:E3:00:56:EA:70:74:1A:8E:48:AA:97:97:32:2D
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       01962E99A01AC0D2905B70F65AD3C50E4D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: gzurVDuiwQf7jptDpXh0ZFT0m3gw2yVySVI7NRfeVMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a0:1a:c0:d2:90:5b:70:f6:5a:d3:c5:0e:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=e7633a40f1e6e30056ea70741a8e48aa9797322d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:98:b9:38:ba:65:34:86:48:93:9f:0f:73:
                    d5:bc:e8:b4:15:d0:56:7c:13:39:3c:f5:4e:0f:89:
                    37:a0:37:20:71:88:3c:2a:cd:94:b9:1f:8e:60:55:
                    76:93:4a:a9:ef:1b:99:34:90:b2:29:40:7e:3f:63:
                    bf:f7:74:ee:2b:f5:0a:22:00:2f:00:17:4a:d8:13:
                    7b:8c:4a:54:e7:62:25:0b:cc:c3:90:84:4e:55:c5:
                    00:21:f8:a5:f6:e1:94:15:ed:04:ba:24:26:17:1e:
                    38:15:d7:58:94:4e:6b:28:22:d4:68:b1:43:a8:b0:
                    a8:6e:a6:51:ad:1a:a9:cd:39:c4:5b:07:a0:71:57:
                    45:66:5c:aa:38:af:b2:99:a7:3c:29:1a:0e:4f:53:
                    9d:c6:4e:3b:aa:83:6e:31:18:ad:76:7f:ec:0c:0a:
                    88:74:1a:01:3d:21:ad:70:02:ef:c8:91:12:f0:1c:
                    09:28:06:d6:a8:dc:02:50:95:12:d9:a1:ed:1a:cc:
                    65:38:8d:7c:eb:72:be:89:58:7e:db:29:0c:aa:09:
                    9c:e4:25:bb:45:3a:45:a8:48:14:e1:bf:2e:95:e7:
                    f2:d8:0d:e8:47:02:99:d1:1b:5a:3d:ff:b3:7f:9b:
                    bd:54:e6:2a:04:3e:e1:ca:ef:4f:b4:0c:e7:f9:2b:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:3A:40:F1:E6:E3:00:56:EA:70:74:1A:8E:48:AA:97:97:32:2D
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:78:5a:b3:02:9c:a3:ec:14:2a:86:53:17:df:9b:72:32:c0:
         bb:39:6a:35:19:5a:36:53:c8:02:44:47:26:df:b3:c6:84:d3:
         80:c3:d7:d6:27:07:ff:31:90:f6:b7:c8:f7:21:37:db:b3:51:
         96:8b:bd:99:68:70:e7:e3:37:1a:4b:b7:41:4f:fb:ca:6e:26:
         33:26:13:71:52:b3:2a:2a:1f:1f:58:f8:b2:b4:74:92:5e:1a:
         40:ad:59:f2:a0:35:bf:05:48:5c:3c:17:b6:3d:bf:41:c0:6f:
         f4:7f:27:88:e7:86:b1:43:4d:ad:b5:44:d6:f3:70:97:81:63:
         3d:75:d4:71:d0:dd:45:76:1d:c7:56:69:89:e3:d6:c0:b8:a5:
         28:17:e1:d4:60:f5:8d:8c:70:03:df:f5:c7:3a:9a:97:14:03:
         3c:db:ca:81:52:d2:2e:34:6e:ba:1f:47:da:15:0e:cf:25:c5:
         a5:11:87:cb:28:92:f0:8e:9d:6c:4d:f3:ac:62:0f:7c:84:4f:
         5e:48:e3:21:6c:aa:70:4c:77:f1:1c:b6:64:ce:f6:05:ce:e5:
         ce:13:f7:5e:a4:35:c3:da:ac:d3:63:15:95:46:ee:e5:37:a6:
         a9:ec:11:37:45:b1:72:88:20:67:0e:d8:d7:43:c6:fa:b7:db:
         23:16:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----