Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File:                     6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier:          r3XjdQs5ZPe2TqSRgITyxVE5FcARCaX0gnXD9CbZvuM=
Subject key identifier:   D4:2B:12:CE:33:B9:18:20:07:20:CE:DD:D9:A3:9C:42:D8:5B:EE:5F
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer:       /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial:       01962F068DD2B0C4431FC4BCAF39FDF88F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: 0efIkxyHlf7xGeAuJ05CAtd8DYB6Wlxi+acw16AHTyw=)
                          2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:d2:b0:c4:43:1f:c4:bc:af:39:fd:f8:8f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=d42b12ce33b918200720ceddd9a39c42d85bee5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:19:33:c0:ff:a1:f7:71:22:60:56:af:4e:
                    06:5f:7a:fd:11:b7:24:0c:31:7b:c0:18:d6:93:60:
                    23:55:fa:29:2a:d7:0f:70:3f:bf:c9:b1:9e:f7:fc:
                    f0:30:32:e0:00:2c:14:7f:27:6d:f0:0b:af:8b:2e:
                    55:a9:71:15:ea:7b:1a:36:ac:50:39:8c:c9:75:61:
                    f5:be:bf:61:5c:fb:50:96:b1:b3:af:38:da:e5:55:
                    c5:c3:bb:1f:c8:5c:f0:fc:e7:3d:94:1d:9a:95:09:
                    fd:81:e0:e1:a4:3b:75:1e:af:cd:dc:f2:fd:79:f3:
                    af:5c:f9:ec:2a:ae:32:b6:8c:3a:10:1a:ec:e9:51:
                    9c:b4:32:98:c3:b8:a9:8a:cf:dd:fe:ca:41:11:79:
                    bf:16:4c:bd:b3:12:05:65:de:42:3e:d0:22:8f:85:
                    24:58:e6:c6:e3:25:a6:c0:1a:f4:28:a7:5b:a4:6e:
                    f2:10:e9:7c:9e:6f:af:a8:b0:58:02:67:3d:75:f9:
                    cc:e8:c6:6b:e6:fe:da:ed:61:fd:5c:a1:77:3a:f2:
                    fc:72:f5:e8:8a:77:fa:af:5b:7b:09:5f:1a:7d:e6:
                    b7:cf:98:94:b1:ba:0b:d9:f4:45:cd:ea:af:5e:81:
                    b7:8f:e0:a2:34:38:75:1d:e1:f9:d3:fb:5d:a0:e8:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2B:12:CE:33:B9:18:20:07:20:CE:DD:D9:A3:9C:42:D8:5B:EE:5F
            X509v3 Authority Key Identifier:
                keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:bd:a4:d4:b1:79:4a:5e:a2:4a:4e:46:08:7d:ea:e1:00:
         b7:2f:8b:eb:7b:60:18:c3:64:3a:86:9a:91:9f:0e:9a:21:e0:
         63:26:00:47:4e:31:0f:65:10:2c:a1:39:61:d6:3c:ba:9b:fd:
         3b:7b:73:42:d2:37:0f:eb:ad:2e:23:68:ff:1f:5c:75:59:7f:
         d9:2f:5f:fd:cc:84:78:22:a9:55:eb:52:b3:50:4e:a3:b8:ab:
         2e:4b:3c:12:5d:f1:45:a6:89:bd:81:8a:d0:21:2f:35:a6:e5:
         ac:e2:4c:e2:b1:d0:b1:39:ca:f1:7e:25:b9:7d:2d:58:99:0d:
         e8:84:f9:6b:98:d8:21:d0:e3:37:02:bf:6b:80:7c:bb:98:12:
         8d:a9:f5:5d:49:70:5d:07:14:70:f4:a0:08:6c:41:99:ca:da:
         13:bb:8d:68:0b:11:5b:f1:91:ca:24:eb:e9:ee:f9:48:51:56:
         57:ee:49:9f:d9:69:11:4b:2f:75:64:39:db:ed:f3:5e:2a:21:
         1b:7f:b8:e1:39:4c:4b:87:d0:b0:a0:02:94:cb:1b:a8:7e:52:
         7b:b5:22:4f:32:f9:36:7b:07:6e:b1:ac:e2:08:86:2c:05:fe:
         3a:4a:ac:1e:fd:40:08:8a:8c:a4:f2:84:ce:5b:af:36:c0:80:
         fd:88:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----