Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File:                     6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier:          FKZQ1E2D53pouZQ1S3OjRRZHJboqLCvDsjMHZtI/+Xw=
Subject key identifier:   69:93:E2:04:74:FF:98:25:F3:D1:C3:32:95:44:A9:5B:C5:10:B5:89
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer:       /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial:       01962FAB88CDC210FA09F43374046E1C486A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number:          0E41
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: c5av7skBBvW6/zN8O1QU9MU+0+G3Dn2QQk4tGicwxrg=)
                          2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:88:cd:c2:10:fa:09:f4:33:74:04:6e:1c:48:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=6993e20474ff9825f3d1c3329544a95bc510b589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:c2:16:46:e5:ee:77:b0:7a:57:14:91:ef:
                    97:9a:a9:c1:1a:19:cc:36:82:e8:d2:bc:ae:0c:9c:
                    ee:38:00:54:cf:22:71:2b:29:14:f7:f1:bb:44:4a:
                    b2:45:2c:7a:e2:bf:79:5f:38:e5:ca:30:bd:5a:34:
                    6f:a7:ba:10:9c:98:13:52:a4:a7:1b:2e:bd:45:ba:
                    7a:d1:40:d2:31:b0:fe:4f:83:a4:40:c0:67:0a:6d:
                    2c:d2:cd:af:48:e8:14:75:e0:3e:70:63:85:bb:f0:
                    98:32:38:71:b4:a9:ea:2c:d1:c1:92:72:5b:0b:9d:
                    0e:63:a0:94:76:54:4a:51:6a:72:1b:5b:41:cc:51:
                    83:49:66:c3:24:32:eb:73:00:c0:09:98:f2:fe:cf:
                    d7:c4:8b:d2:ff:bc:6d:6e:24:7d:26:6e:6c:33:fc:
                    3f:de:af:dc:62:0b:c2:bc:72:cb:b0:29:90:6e:1b:
                    d4:9e:53:ed:94:01:ec:4a:8f:b5:ec:1f:d9:a7:ab:
                    40:04:9e:0f:d1:16:0e:a8:39:7e:59:b9:cc:90:01:
                    12:ff:7d:63:4a:aa:67:87:1a:a7:57:59:7d:e2:74:
                    4a:ff:59:85:85:df:1e:3d:2d:d3:88:d6:79:70:02:
                    42:8f:08:51:08:47:d1:8e:70:51:6f:5d:37:73:b5:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:E2:04:74:FF:98:25:F3:D1:C3:32:95:44:A9:5B:C5:10:B5:89
            X509v3 Authority Key Identifier:
                keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:21:00:9d:47:77:7d:27:48:fb:21:c7:6b:d8:8f:e9:7e:
         27:7d:01:71:c8:d6:7a:62:d2:69:75:ce:4c:b1:cc:08:92:08:
         74:57:4e:18:b4:ff:74:d3:99:d3:c7:94:dc:64:13:da:a0:5c:
         4c:92:8f:11:ae:26:86:40:19:31:16:8f:d0:79:35:95:aa:e8:
         50:1a:b1:5e:db:d0:83:d8:ba:01:f6:cd:d9:a1:3f:85:89:57:
         ab:a0:6c:7f:cb:06:1c:ab:43:4e:10:e1:14:79:6a:ad:d4:0d:
         ba:55:9e:78:f5:08:ab:03:25:f5:8f:2d:f8:6f:e8:66:5b:97:
         61:e0:e2:f8:65:92:eb:27:61:5a:b6:e3:0b:2a:25:22:8c:21:
         86:58:89:cb:3e:72:54:2b:31:27:63:15:e6:a3:a2:56:7e:ab:
         92:4a:df:8d:5b:50:4d:5b:5f:97:37:78:7f:3a:ba:14:bf:10:
         c7:25:82:99:9f:c3:b4:ba:79:65:01:5c:42:3f:5d:c2:08:3d:
         e6:e8:b2:f4:bb:c9:df:d6:f7:30:7b:a0:fa:0c:92:84:3d:2e:
         4a:fe:5d:3e:a5:e7:63:d8:42:5c:03:bb:fb:73:c6:67:67:fa:
         e5:f7:d7:ed:df:eb:ec:4c:13:1a:6b:f3:84:5f:04:4b:a0:22:
         99:7d:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----