Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          KxpHhPMCmA6N8AEiUpSsCFnhS7fbMxMBRNq4br1qxFc=
Subject key identifier:   E4:F2:DD:DE:26:9F:52:FE:FA:DD:54:3C:51:62:E0:5E:4D:6B:D9:95
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       01962DF3F9179E62A7CB85CB682576869D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          03C1
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: 1iU+CqMtUde32lydsVhRJG143FwNLCrCp8AxmwA3Cyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:17:9e:62:a7:cb:85:cb:68:25:76:86:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=e4f2ddde269f52fefadd543c5162e05e4d6bd995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:a7:34:88:8d:43:74:5e:20:02:a8:9b:87:
                    fa:5e:71:7f:3f:47:13:17:45:d1:c7:3b:fa:f7:f0:
                    81:b8:18:5e:1d:ef:14:37:d1:05:1a:87:1d:13:a6:
                    b7:46:3a:86:89:07:66:35:2d:b0:22:bd:cb:19:0c:
                    6a:37:aa:9e:d8:68:95:1d:98:7a:e2:bd:f3:93:65:
                    1a:f2:c3:8a:0e:49:66:6e:7f:d4:26:77:9b:8e:3b:
                    d4:d9:bd:e8:80:ba:f7:e3:16:ee:49:6c:a8:c4:c7:
                    3b:a0:d4:bb:a2:13:5a:d2:03:52:94:41:f6:5f:78:
                    62:58:30:30:7a:b0:58:f2:59:bb:68:1c:ad:55:04:
                    8a:ec:98:0e:76:fd:6a:e1:67:9e:fa:04:03:36:41:
                    38:cf:82:d3:37:bb:a7:e9:69:c2:0e:18:75:11:f1:
                    7b:ee:17:8a:b1:3d:e5:47:b6:38:f6:7f:4d:6d:64:
                    83:cf:07:dd:87:22:97:be:32:0a:18:03:62:3d:41:
                    b4:c7:83:54:df:9c:34:ab:6d:8d:4e:f2:08:1c:52:
                    41:4e:35:94:a7:66:c9:08:d5:9a:db:c1:e2:fe:22:
                    5c:3b:6e:e7:8a:80:5c:ad:ae:70:e3:52:b3:31:40:
                    cc:97:20:a5:4a:b2:8e:32:3b:ad:a9:2f:97:91:63:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F2:DD:DE:26:9F:52:FE:FA:DD:54:3C:51:62:E0:5E:4D:6B:D9:95
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:f5:bd:0f:03:58:82:c2:cc:fb:6c:4a:81:4a:09:9d:41:
         bd:bd:a5:ac:da:be:5c:f1:28:d3:6f:59:a4:c8:59:a1:25:c1:
         8a:e1:6c:d2:db:15:10:9f:67:f0:2d:fb:24:4d:ab:5a:42:59:
         0c:b5:cb:2e:ff:35:ba:48:0f:b4:ca:e0:b2:54:7a:3b:ae:c6:
         1a:32:47:bc:ed:2d:9d:21:a0:af:36:65:ae:a3:95:96:83:41:
         08:4e:20:dd:6a:60:b6:a2:c5:56:8d:4d:0a:5a:23:cf:52:32:
         2f:8e:38:02:ea:89:38:9a:a3:07:7f:cb:69:c8:43:da:bc:48:
         ac:2e:c1:6b:4e:08:e8:c6:6a:39:79:fd:cf:f5:c8:1d:9b:5c:
         9e:0e:5b:e4:47:66:9b:04:74:1d:4c:f6:37:37:3b:b9:71:64:
         b4:b4:93:f7:d4:58:84:43:0f:a1:25:31:79:40:de:85:fd:94:
         58:49:46:c8:04:1c:b3:d7:3a:6b:96:c4:a0:b8:aa:64:e7:69:
         7f:6f:05:3b:62:a1:89:3d:1d:6c:c4:f7:4b:c8:df:2b:47:55:
         ee:e7:2c:73:1c:f7:6a:bd:06:47:f6:3a:c5:52:ca:b6:12:a0:
         5b:c5:c3:41:f6:a3:1e:58:da:65:17:0e:fd:9a:7f:01:43:ea:
         97:33:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----