Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          cxhEY5svVXI19+Uh8AQAH8pckrJVv0gYLS7k4desLLg=
Subject key identifier:   2A:2B:22:0E:39:C4:73:9C:AD:DF:58:95:A5:EF:50:23:F9:DB:49:6F
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       01962ECFD9C429CA2FD088A6B14725D38415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          14AD
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: LDBQd5RT6Xw3GSqxLt6KHfJ7wsmSv+8Ec1QScZbk+j4=)
                          2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:c4:29:ca:2f:d0:88:a6:b1:47:25:d3:84:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=2a2b220e39c4739caddf5895a5ef5023f9db496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:ef:b4:70:24:08:89:03:cc:a7:1c:f3:55:
                    1c:d4:5a:0a:88:84:91:24:bb:18:91:ea:a6:3e:3c:
                    d7:33:f6:37:65:c5:39:75:6c:71:1f:65:88:61:c7:
                    86:ca:33:07:0d:2f:ea:21:83:5e:53:a9:f5:86:fe:
                    97:c2:b4:3e:e8:39:d8:77:f7:d2:5c:9e:33:74:ce:
                    3d:cc:3a:91:ee:97:19:23:6a:62:0b:ac:59:7d:3e:
                    77:51:7e:03:f2:57:e7:a4:68:2e:7e:f1:f1:3a:0d:
                    92:e7:5c:3c:03:56:24:60:fe:31:66:f0:04:bd:b2:
                    aa:d3:02:69:70:03:1f:f6:3d:ad:d4:f4:9a:fd:65:
                    50:af:5c:2d:67:f5:0a:fa:57:38:e7:d7:86:c6:5e:
                    f5:80:12:5d:ad:4d:55:e5:f7:d7:cb:84:b4:39:da:
                    2a:1a:43:97:a7:42:94:a4:79:84:ed:27:be:12:aa:
                    b0:f7:04:45:97:4d:b2:f7:99:02:85:35:03:a2:b0:
                    10:c4:29:da:de:25:a2:7f:22:ae:f9:9d:bf:61:3e:
                    48:ec:0a:32:c8:1d:fe:8a:9b:c0:0b:58:17:9e:4c:
                    91:52:b1:66:c2:3c:be:f2:7b:20:d9:04:58:61:11:
                    23:41:7c:3f:16:53:e8:2f:a1:bc:1c:fd:7c:d0:f5:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2B:22:0E:39:C4:73:9C:AD:DF:58:95:A5:EF:50:23:F9:DB:49:6F
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:43:ad:bf:17:b6:08:04:a1:8b:2f:39:a0:68:03:47:0d:4a:
         27:ff:18:46:48:7e:bb:17:13:02:95:f5:14:96:ff:51:76:f7:
         a0:f5:70:a1:ef:f7:ff:c1:16:49:d3:e0:8e:95:31:a4:ff:67:
         0c:2a:67:00:22:24:8c:37:96:97:b3:35:0c:b5:81:05:83:b5:
         e6:ec:97:2f:a8:61:77:4c:a6:5f:d2:3e:2b:e3:25:4f:5f:52:
         33:42:5d:5b:0f:6b:2f:ab:85:55:4b:2c:f7:fe:82:4e:8d:52:
         68:e8:ee:03:51:22:a1:ea:20:ec:c2:0b:84:2a:ec:7b:5d:fa:
         25:bc:47:cc:54:cc:0d:2d:85:0a:20:96:d0:36:b0:c1:9d:67:
         d5:25:01:37:39:28:09:8b:34:54:b9:dc:ab:9b:6d:b0:54:73:
         a3:c7:ec:ad:57:69:d6:20:2c:29:a9:ba:63:65:08:dd:e2:18:
         6c:de:fa:f6:cc:c8:dd:70:89:62:df:a3:53:17:17:18:bf:fb:
         d9:25:29:28:81:1f:f7:52:24:6a:67:68:ed:70:d5:e8:c3:98:
         ca:61:16:7b:2d:b6:05:fb:39:55:e6:32:01:87:fe:da:b6:17:
         8b:c0:50:7d:85:e6:a9:83:0e:39:33:a9:da:10:ce:da:91:97:
         51:8d:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----