Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File:                     Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier:          pbQM554Y4o6UJ896KJRetQMHs67vdQJjhJX0jUCldzI=
Subject key identifier:   CE:C3:F8:A5:76:E5:70:8C:E8:9F:13:48:F7:1C:5D:6F:77:7D:61:17
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer:       /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial:       01962E9883A0355996CDD3C63887D64662A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number:          01EF
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: jH/UGcoCHvFQuAszxLUeFAv74iGLMBTRXLXvsbC6C3s=)
                          2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
                          3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:83:a0:35:59:96:cd:d3:c6:38:87:d6:46:62:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=cec3f8a576e5708ce89f1348f71c5d6f777d6117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:1b:13:f3:09:0c:7f:56:32:8f:f8:0f:57:
                    d5:bd:93:89:19:1d:db:39:a8:83:05:1b:a3:26:23:
                    e3:cf:6e:a3:9e:33:56:f3:7b:80:8e:a6:8d:e6:57:
                    ec:cd:71:2b:a6:a2:59:e1:d3:c6:1b:9e:fb:f3:57:
                    e9:66:8a:62:4f:61:bb:fe:0a:68:8b:f6:0f:c1:86:
                    ba:d8:a4:0b:e3:da:d3:0a:3c:c3:3a:e0:8b:8c:b9:
                    55:c2:d5:a8:4a:db:06:96:34:96:d5:4a:f1:93:63:
                    25:c8:f3:8e:30:4e:04:d5:e8:42:c8:41:c1:45:c2:
                    5c:ab:12:1a:91:ce:aa:4c:66:3f:4c:d9:9b:cc:5c:
                    09:72:72:71:1e:d8:ef:1e:3b:9c:ba:ac:93:eb:10:
                    ca:1e:34:7b:3b:c3:20:f2:53:f8:92:55:4a:6c:4b:
                    ba:e9:65:b5:66:9f:f7:97:96:60:13:b2:4a:eb:99:
                    2d:14:ed:13:ec:17:6a:e2:bc:0a:b5:02:1e:f0:65:
                    3d:a8:c6:5b:d8:fc:a3:e5:ad:57:15:3e:88:c2:e4:
                    3f:f4:f0:f0:ef:15:23:5d:97:20:e6:5b:a6:3c:99:
                    92:fe:ba:05:71:52:ac:66:77:52:be:70:27:50:71:
                    99:da:c3:56:fb:06:3f:71:28:11:50:c7:13:34:9c:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:F8:A5:76:E5:70:8C:E8:9F:13:48:F7:1C:5D:6F:77:7D:61:17
            X509v3 Authority Key Identifier:
                keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:54:b9:51:af:50:90:1e:7a:80:11:6b:b6:f2:83:ec:16:
         90:e2:07:2e:69:8f:af:95:fa:d4:ee:15:51:04:10:95:88:7a:
         ed:db:f6:c7:53:f1:37:b3:36:9f:2b:64:ad:55:d8:fa:93:33:
         c9:02:ec:ce:99:ef:ed:90:b5:43:ff:94:50:a7:9c:e2:83:c1:
         ff:9b:94:1b:aa:12:14:69:41:21:c6:fc:14:fa:e0:a3:cc:87:
         13:cf:4f:00:2f:f5:f0:20:b5:34:a9:bd:35:45:55:0b:63:f4:
         1e:0f:dc:9d:83:27:5f:79:7f:89:d6:0d:38:c4:ad:7e:20:49:
         45:19:3e:0b:c2:7e:7d:b0:50:8c:ab:d0:da:b3:01:38:56:0a:
         01:74:b8:f0:43:ce:35:fc:be:1d:ca:7a:c2:55:cf:b5:c1:2f:
         de:c6:5a:ab:61:21:a9:b0:c5:37:43:03:6b:f1:ad:3b:50:c3:
         83:50:6d:da:5d:19:eb:e9:1a:fa:f1:ee:cc:2c:a4:f7:7b:6f:
         49:9b:1b:a0:ae:67:a7:d3:b9:66:5f:21:d4:d0:ef:ba:06:ea:
         18:bf:3b:bb:a8:c2:d1:b9:e1:7e:1d:06:8c:b4:3c:02:49:c6:
         d0:2c:0e:de:80:01:6e:09:81:59:24:ad:4f:80:bd:95:47:01:
         59:db:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----