Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          0VL/rN7x7JWn1rg0erYDkYZFgCNmEz0VdOsz3dLX7xs=
Subject key identifier:   06:EA:A6:7C:88:3C:5D:9B:63:CE:74:B5:19:AC:BF:53:B5:82:BF:6D
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       01962F74891AEFB6B7D32988B110FDB563B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: j1CGzx8piPeHSc96vYjVf85oTG/k99aSHrHUdqxZLtk=)
                          2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:1a:ef:b6:b7:d3:29:88:b1:10:fd:b5:63:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=06eaa67c883c5d9b63ce74b519acbf53b582bf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:1f:70:81:09:6b:35:84:43:ae:f8:81:1a:
                    b2:7a:ad:c5:11:f9:dd:72:01:02:af:43:ca:4d:62:
                    0f:34:f4:8e:16:3c:a6:eb:cd:3c:dc:f8:fe:b8:fa:
                    d7:ce:cd:14:a1:10:24:a4:e4:9f:68:f2:e9:a7:30:
                    55:0b:9a:ea:20:97:1d:46:0c:37:ba:f4:df:02:6b:
                    d3:e7:b9:e9:5a:6b:35:b5:cf:41:c1:c3:ef:d3:80:
                    0f:30:c5:1b:77:59:97:3f:41:d9:16:f5:1b:ce:e8:
                    cd:ac:77:c0:23:68:98:c1:92:d2:94:ac:a4:3a:e3:
                    49:24:7f:6d:5e:36:d8:e1:21:3f:63:e8:bb:e0:06:
                    03:bc:71:b5:41:13:42:e5:f1:fc:27:44:83:58:e9:
                    c0:36:18:49:ab:db:35:87:e1:21:00:3a:9c:16:b9:
                    76:90:9f:e3:f1:3b:9c:eb:8b:b7:24:81:54:4d:9e:
                    a4:6a:4e:ae:9b:ba:8a:80:13:e2:fb:57:4b:87:a3:
                    79:58:a0:10:a1:55:74:1f:5b:b0:0f:ca:ba:45:be:
                    4c:03:76:d9:e7:81:d5:b5:4d:0a:c5:66:c1:ed:2e:
                    ed:24:99:9c:47:13:0a:de:09:01:0d:5d:e9:c4:93:
                    04:06:35:50:f9:08:bd:31:1d:79:51:81:37:5d:e4:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:A6:7C:88:3C:5D:9B:63:CE:74:B5:19:AC:BF:53:B5:82:BF:6D
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:07:d8:9b:4b:0b:d1:86:aa:c0:46:a8:87:40:de:91:3c:
         63:d2:59:c9:93:ed:4d:3d:34:ab:2c:67:61:9c:e8:b7:78:0e:
         a7:ed:89:a7:06:55:db:25:5a:20:cc:27:cc:ef:cf:e4:76:f3:
         d2:3e:19:4e:41:2e:12:3e:f0:7a:ea:6b:a0:b9:42:84:51:f4:
         aa:f5:02:bc:4d:4c:4b:46:d7:22:fd:f8:90:3b:e0:8c:62:b4:
         68:7f:8a:df:f1:7f:2e:82:3d:dd:03:27:56:3c:82:76:5f:8e:
         0d:ad:aa:e3:88:0b:93:7c:75:ae:8a:fe:94:61:50:3e:ee:3b:
         26:36:24:0f:95:65:bc:83:28:10:a7:d0:9b:7f:c1:4e:4a:c0:
         98:67:9d:ca:dd:e0:e8:06:01:f6:01:fa:3c:63:30:d6:ea:50:
         ee:06:44:44:dd:b3:c8:65:c5:88:9f:60:ad:ae:ff:64:98:f6:
         69:99:11:d9:9c:02:b3:88:0d:4d:07:a9:89:2c:04:b2:2c:44:
         14:71:39:4f:80:94:34:0e:e8:4b:2c:12:8b:59:d4:92:2f:06:
         b3:88:40:e2:2e:04:8b:49:4a:bf:7c:b7:74:2d:bf:14:11:46:
         d0:25:78:96:ab:25:e2:71:b6:61:a2:30:b3:3b:33:53:77:c7:
         47:ef:6f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIka77a30ymIsRD9tWO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh
MDVkZDAwHhcNMjUwNDEzMTQwMTI4WhcNMjUwNDE0MTQwMTI4WjAzMTEwLwYDVQQD
EygwNmVhYTY3Yzg4M2M1ZDliNjNjZTc0YjUxOWFjYmY1M2I1ODJiZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonsfcIEJazWEQ674gRqyeq3FEfnd
cgECr0PKTWIPNPSOFjym68083Pj+uPrXzs0UoRAkpOSfaPLppzBVC5rqIJcdRgw3
uvTfAmvT57npWms1tc9BwcPv04APMMUbd1mXP0HZFvUbzujNrHfAI2iYwZLSlKyk
OuNJJH9tXjbY4SE/Y+i74AYDvHG1QRNC5fH8J0SDWOnANhhJq9s1h+EhADqcFrl2
kJ/j8Tuc64u3JIFUTZ6kak6um7qKgBPi+1dLh6N5WKAQoVV0H1uwD8q6Rb5MA3bZ
54HVtU0KxWbB7S7tJJmcRxMK3gkBDV3pxJMEBjVQ+Qi9MR15UYE3XeRjDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbqpnyIPF2bY850tRmsv1O1gr9tMB8GA1UdIwQY
MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt
MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1
LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZkH2JtL
C9GGqsBGqIdA3pE8Y9JZyZPtTT00qyxnYZzot3gOp+2JpwZV2yVaIMwnzO/P5Hbz
0j4ZTkEuEj7weuproLlChFH0qvUCvE1MS0bXIv34kDvgjGK0aH+K3/F/LoI93QMn
VjyCdl+ODa2q44gLk3x1ror+lGFQPu47JjYkD5VlvIMoEKfQm3/BTkrAmGedyt3g
6AYB9gH6PGMw1upQ7gZERN2zyGXFiJ9gra7/ZJj2aZkR2ZwCs4gNTQepiSwEsixE
FHE5T4CUNA7oSywSi1nUki8Gs4hA4i4Ei0lKv3y3dC2/FBFG0CV4lqsl4nG2YaIw
szszU3fHR+9vOQ==
-----END CERTIFICATE-----