Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          RTglnwdbQwJzYV5nB+8wyTItIvBdeA7skUmB2egTR7s=
Subject key identifier:   EC:6F:34:8A:A9:D8:8D:A7:7E:92:5A:63:A2:0A:51:A6:F1:63:B3:6A
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       01962E9891BB1BC854C1DAB50AB6001CAA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 01fkuJti8QauFp9Qcedtywj/Q9ctZ5FRGmtmQPMSd/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:bb:1b:c8:54:c1:da:b5:0a:b6:00:1c:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=ec6f348aa9d88da77e925a63a20a51a6f163b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:ee:fd:90:c7:de:b3:87:be:1c:89:cb:84:
                    36:4e:a8:42:20:d2:9b:87:2b:5f:6d:69:71:89:d7:
                    d4:27:a2:64:e3:1e:4a:43:8f:a2:98:79:86:da:27:
                    e3:4d:39:87:16:2e:d8:e2:8b:e3:47:ab:3a:09:43:
                    95:58:31:d1:d2:cb:c0:84:2c:b6:1d:f5:ae:4c:ef:
                    8d:88:fa:89:8a:5d:56:ed:dc:62:d6:89:0f:63:fd:
                    43:84:38:e5:e7:02:8a:cb:7c:46:72:91:6c:ce:61:
                    ce:67:c5:49:cb:6b:34:2d:5b:ae:59:8a:b8:9b:65:
                    54:86:b1:f4:07:f4:ec:e7:a5:3c:e9:96:e5:71:d5:
                    97:11:4d:6b:ce:9b:f3:2d:de:0b:ba:29:6e:cb:63:
                    88:76:92:06:4e:67:a0:36:ea:95:14:8e:c2:70:88:
                    e7:52:9b:35:8e:ff:03:a2:4b:f3:fb:91:f0:33:ed:
                    05:7a:7c:9f:23:aa:d8:65:fc:e3:88:0f:76:67:a7:
                    a9:9e:46:b1:bd:22:85:85:76:7f:94:5e:14:69:aa:
                    17:8e:ba:03:21:82:13:cb:a6:ff:18:cd:79:7d:64:
                    2c:54:8d:3e:8d:6d:e3:de:49:8b:3c:61:b5:eb:75:
                    f6:26:92:8d:8d:1b:3b:ba:69:fa:87:75:ee:58:1d:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:34:8A:A9:D8:8D:A7:7E:92:5A:63:A2:0A:51:A6:F1:63:B3:6A
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:d7:c5:3e:8b:75:9f:72:70:b8:19:6a:97:29:e6:a4:90:
         b7:87:cb:bd:fe:f4:09:4f:96:0d:38:9b:2f:e7:ce:ff:16:45:
         cc:e9:69:05:98:f6:8b:ae:b0:6d:77:a3:83:84:ab:de:20:46:
         47:61:ec:03:47:e0:c0:15:0b:0b:88:5a:0c:75:fb:6b:9c:7a:
         3f:20:e7:62:25:a7:eb:b5:2f:00:1a:ce:3d:c6:71:e4:18:aa:
         ce:3f:e1:d2:a6:f5:15:a4:61:29:2e:6b:2d:2b:67:4d:6b:69:
         6c:2d:a4:e7:27:06:ac:40:73:6e:7b:17:89:36:3a:a6:c6:a8:
         a8:51:38:57:b0:37:3c:b1:eb:98:e8:c1:01:38:18:8a:7c:2c:
         ed:f6:66:cc:29:03:36:5f:2c:7b:6f:ca:34:85:66:4c:c7:d5:
         9b:0f:9e:7b:65:3f:d9:51:06:31:3a:38:58:e8:b4:de:e3:80:
         99:f2:46:7d:11:c8:84:e3:dc:c3:6d:78:5c:f1:21:04:78:ef:
         42:75:f9:93:e3:7d:49:11:bc:9c:c8:4d:ad:73:78:13:18:57:
         57:6c:0b:c7:0c:29:25:ee:91:ee:c8:63:c6:0e:7e:5f:9d:ae:
         68:9c:c4:47:00:b3:40:e3:3e:04:fa:df:55:f6:93:82:72:c8:
         cc:80:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----