Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
File:                     6eTclo7VKTWgTe47Ipwhypv9vX4.mft (raw, json)
Hash identifier:          PPsimUrEWbULVSmiH4yB5sUVn4pEWjULPpnxkPYbcCE=
Subject key identifier:   EC:1D:10:5A:81:0B:D9:87:98:05:3D:7C:4E:6F:D2:9D:30:89:61:C2
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Certificate issuer:       /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial:       01962FAB7465CC7A90A22C36B80A5F387248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 6eTclo7VKTWgTe47Ipwhypv9vX4.crl (hash: Yrv3K64m4GZJCGj/kWxUZLnZmJcdYTC0F7awz9tpumg=)
                          2: ALsU0GmL8xBEdnC3KhGcFcVEzLI.roa (hash: kjJSdr3ASA1w2olBsUagT4Dg4lrINRn84aknrRD9LYQ=)
                          3: dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa (hash: RRTb9hjGX5e3eDXQaXOf0UYAPlQTcjlQylghvEN9gn4=)
                          4: lc03wXBALXEPocpcfjm6P-yAsN0.roa (hash: hU68bUabKrfbjp5BXZ3aDNdEQaqOiciUFeryRAbO9Qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:65:cc:7a:90:a2:2c:36:b8:0a:5f:38:72:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=ec1d105a810bd98798053d7c4e6fd29d308961c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:b2:01:02:59:a3:db:9c:1c:fb:8b:ae:2e:
                    b5:b5:3a:e6:9a:69:07:68:81:48:ce:7b:6b:ac:46:
                    81:6c:c4:ba:9a:0b:d8:9c:6c:85:df:c1:7c:32:97:
                    27:2a:ec:7c:87:ca:07:78:eb:69:45:3b:03:c5:77:
                    a6:08:d4:04:6c:f5:b3:5a:4a:5c:73:60:64:9a:21:
                    24:11:b0:1e:55:89:f8:e0:b0:2a:c6:66:f9:88:70:
                    2e:8a:b9:d3:c0:40:04:ae:77:0c:55:25:a6:c1:35:
                    f9:32:29:f8:68:11:65:44:7f:4c:17:a1:d4:69:50:
                    ab:f5:f1:1a:cf:d3:fc:7e:15:e5:5a:09:e6:71:05:
                    8d:56:d2:89:ec:8d:fe:3d:ba:f5:2e:99:98:ab:fe:
                    4a:c1:31:33:56:37:d5:18:6e:c1:9f:1f:8d:6a:aa:
                    62:50:9f:4a:b9:ea:06:d5:4f:d4:9e:12:7e:ad:e5:
                    87:33:d7:6d:dd:80:d9:c8:12:f9:c2:2e:5a:f4:42:
                    ff:15:c5:2a:22:32:29:62:95:6b:1b:e3:d0:9b:c7:
                    4d:1c:0a:86:d3:9f:18:2f:10:11:a3:1c:37:5a:e7:
                    2f:52:13:8c:42:09:a7:30:41:43:22:d2:9a:89:c6:
                    9d:ab:e1:c4:72:e9:8d:9f:01:00:7c:85:b7:0b:71:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:10:5A:81:0B:D9:87:98:05:3D:7C:4E:6F:D2:9D:30:89:61:C2
            X509v3 Authority Key Identifier:
                keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:c6:f6:bb:1e:bf:a1:2c:97:17:29:97:36:ae:c1:e4:f0:
         dc:ba:e5:15:c6:d2:1d:44:04:a5:99:00:40:ea:14:c5:ae:f2:
         2e:18:7c:e5:13:c5:3c:c4:e1:39:e0:6d:ec:19:d4:1d:20:da:
         d3:8f:b2:2d:41:b4:30:d9:98:9d:84:76:d1:bf:46:a8:ae:63:
         c4:74:44:0d:ad:51:da:e0:15:64:1d:40:36:1c:83:8a:43:a5:
         63:69:8f:4b:fe:06:6c:5f:76:85:d2:86:99:e4:f4:e1:b1:9b:
         44:2f:ff:ef:7a:57:8b:2b:f3:ed:21:a7:ad:49:54:09:f8:08:
         2b:09:ff:7b:32:34:fb:aa:fc:ac:ee:90:12:48:0a:df:99:71:
         75:19:78:47:78:5f:ff:a6:47:8e:28:6d:1f:89:6b:cd:83:ed:
         95:80:bd:1d:d2:62:b0:7f:dc:94:1a:25:27:9e:a1:54:70:24:
         67:68:16:42:b9:47:6d:17:63:5f:e0:66:08:a5:a1:64:75:ca:
         24:9b:5d:8d:4d:85:94:4d:a0:09:15:18:8b:9f:33:8c:7a:18:
         55:b7:58:df:96:1b:ab:1b:a1:dd:e7:d9:c6:72:67:97:5a:a2:
         1a:81:65:75:90:96:9e:5a:00:45:da:49:b4:6d:b8:36:a9:f5:
         99:7c:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----