Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
File:                     6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft (raw, json)
Hash identifier:          8I3o5/YetwiBQGP0D9AioV+voIGBdL096B+2aOBjYLs=
Subject key identifier:   40:5B:9D:E7:A6:37:D3:08:17:D0:32:3C:C6:CA:E5:33:7B:02:C7:A7
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Certificate issuer:       /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial:       01962E61823C46C4E2F63FB7490BB9103CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
Manifest number:          0712
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl (hash: EnlmNX3LJ7HcwIjaoLymDzjZx3KqSqvWhzP3DOjG5HY=)
                          2: 7thrq7mGs5MtURUKExcq8kim4V8.roa (hash: zvJH/9Gs7ZRpXaAKjn9oIc5UM29oZPs/zM5sABBQxSU=)
                          3: K7teX7JoBFh4y_5H6h0jWSRoFT8.roa (hash: cpnglAjL/IaKx5rfLjNSIVRVdfr+IKSB43GYnZGggq0=)
                          4: RI6viK3s_BlSMIP1Vgb0Pj0MefM.roa (hash: /GgkDE60b7jAzwG85grZIfhbgXYyhzkop2FOS1Z11sg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:82:3c:46:c4:e2:f6:3f:b7:49:0b:b9:10:3c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=405b9de7a637d30817d0323cc6cae5337b02c7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:fd:8e:c9:08:d6:62:a2:77:a6:a6:fc:b1:
                    39:74:b7:d4:e4:8e:50:ca:78:f5:e7:73:f7:79:b5:
                    3f:0f:91:a6:fb:9d:ef:9c:88:87:cf:39:e6:90:c9:
                    48:52:3f:3c:17:f2:fe:52:97:72:cf:c1:f8:0f:72:
                    e2:95:6c:12:e6:42:12:ac:83:37:a0:ea:96:64:05:
                    72:ad:a8:19:82:e2:85:18:f3:97:7f:ca:74:61:c3:
                    9a:85:a9:35:60:b1:7f:b2:85:ea:f9:eb:02:60:75:
                    25:f5:f0:9c:f9:a4:14:a9:dd:ea:94:f2:0f:b0:f1:
                    dc:89:85:f3:41:d1:a0:46:e2:1a:0b:53:56:33:b1:
                    4a:8b:50:52:1c:1f:97:ec:39:13:23:51:78:ef:fa:
                    8d:6f:b6:c1:d2:f9:7e:3c:27:77:b3:f9:83:6a:3a:
                    3b:d8:2e:7a:2f:b2:23:b0:a2:b0:d3:1a:cb:85:25:
                    76:72:40:ef:05:96:ed:d8:df:30:0c:00:fc:37:c4:
                    08:be:f5:01:9b:5e:23:5c:c8:30:bb:06:7d:86:46:
                    08:98:3d:de:95:4a:84:e7:d2:eb:e2:0d:bd:0b:cd:
                    3c:c0:7c:83:a9:bb:24:2d:81:44:ce:6d:fd:68:89:
                    cf:c1:55:68:94:c3:bf:d4:ea:70:97:49:87:ae:f2:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:9D:E7:A6:37:D3:08:17:D0:32:3C:C6:CA:E5:33:7B:02:C7:A7
            X509v3 Authority Key Identifier:
                keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:fd:b9:53:f9:28:4c:57:40:35:ae:78:03:b0:e4:fa:82:
         cc:8e:f4:77:81:75:de:7c:01:d5:da:e0:94:6b:73:8f:24:bc:
         5e:43:f7:f3:7b:98:a8:87:4f:ed:bc:92:fd:71:91:2a:f4:c4:
         b8:2a:ee:83:5b:b3:eb:26:83:d5:dd:90:7d:e3:18:21:46:4c:
         82:80:b1:48:de:98:5d:ad:ec:54:a5:2e:2f:30:02:cf:81:87:
         e0:37:d8:ec:35:c0:1f:a1:60:4f:be:58:a3:b2:2e:ad:8d:81:
         76:20:4b:76:3a:0e:81:e3:2f:91:fa:13:08:47:0f:68:45:bb:
         8a:72:5e:57:f4:aa:e4:9d:af:9c:21:92:a2:95:28:8e:03:a1:
         ae:bd:33:d4:12:71:08:c9:8b:b0:30:8c:57:ac:93:d7:83:88:
         5f:26:d3:e5:3d:c7:99:cd:44:84:01:09:fc:2a:95:38:c2:be:
         c4:19:00:5b:90:f8:dd:5c:92:ef:e7:98:71:4d:39:59:d4:c7:
         61:a9:8a:80:31:d8:2f:59:ce:05:62:72:c1:3d:71:50:99:fe:
         d5:74:1e:31:35:25:7d:fe:96:ed:47:9f:ba:73:5a:98:4e:ab:
         93:c3:f8:9c:12:e2:4a:22:de:36:69:a5:7b:98:cf:60:ea:9c:
         78:52:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----