Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File:                     a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier:          9iISY7ZF6EPRRk9qyGO6bRObp8In3sxPU4PFPTUCV28=
Subject key identifier:   22:6D:9D:A6:54:8C:50:4A:F6:20:AE:61:B6:93:23:6E:DE:8C:BD:46
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer:       /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial:       01962ECFB99C8F8A342B82F89CE5E7BA4143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: XwUhOlgnmVpd3uaL65Mieka34xOK+Zo/25Ax7JHdwG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b9:9c:8f:8a:34:2b:82:f8:9c:e5:e7:ba:41:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=226d9da6548c504af620ae61b693236ede8cbd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:ad:ff:64:6e:3f:55:2d:99:90:ea:3f:85:
                    01:3d:1f:e5:c3:f1:95:0a:2d:b1:d0:eb:a7:00:15:
                    14:11:9b:52:4f:7d:ec:12:09:0b:2a:a7:0e:36:72:
                    11:e0:16:a6:37:12:32:99:d3:9a:73:e2:a3:6f:59:
                    86:bc:48:a1:05:e5:00:d0:93:a0:c5:40:04:c5:1e:
                    1f:03:81:60:b9:5f:ff:a7:cc:61:76:32:ca:d4:41:
                    23:81:d5:cc:36:85:1e:56:b1:78:95:f8:79:7d:c3:
                    44:e0:08:28:fd:14:74:48:36:f6:9c:45:a2:e6:5e:
                    cf:57:e8:3e:77:ba:44:7f:c8:30:dd:69:68:43:e6:
                    b7:96:d9:89:1f:27:6a:a4:d0:a1:65:17:de:f0:31:
                    35:08:ea:f7:90:84:9b:f5:3d:8b:0d:d5:72:19:48:
                    c6:eb:ac:47:03:75:d2:82:28:01:44:63:a1:e3:80:
                    9b:d4:ff:7d:e3:1f:0f:01:1e:0b:23:e6:12:e3:67:
                    b4:67:41:f8:1c:1d:6f:ee:55:46:9d:6c:e4:59:50:
                    ed:9c:e0:b0:02:a5:44:6b:17:4b:1e:53:40:50:63:
                    91:02:05:a7:e9:c2:f9:c2:36:6d:f2:09:76:89:af:
                    94:07:8c:d8:51:bb:a1:9a:d9:4a:46:06:21:e8:a6:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:9D:A6:54:8C:50:4A:F6:20:AE:61:B6:93:23:6E:DE:8C:BD:46
            X509v3 Authority Key Identifier:
                keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:a7:68:56:93:33:97:b1:3a:15:f6:d6:b1:5c:f5:65:88:
         f0:e5:b6:0e:17:f4:41:35:45:2b:9e:7e:fa:4c:69:ab:1f:37:
         46:01:0a:77:f9:ab:5f:b6:0b:03:ad:fe:0e:9e:27:e3:4d:c2:
         d4:0b:da:b3:83:29:de:95:da:fa:d1:94:4c:e4:76:95:b3:e5:
         93:b7:6d:8a:bc:b6:73:ae:d7:bd:e3:6e:9a:82:6d:0e:cb:a6:
         04:f5:e9:72:af:d1:49:79:21:86:3b:5c:34:ba:16:7e:f2:a8:
         6f:69:a8:c5:e7:d8:78:b4:64:95:65:2e:a2:6c:c9:54:93:bd:
         ae:53:bf:36:f5:97:2c:27:22:c8:5b:76:5c:d9:14:68:be:c9:
         79:39:98:1f:56:23:8a:fb:de:d2:d8:d1:06:09:a2:b0:d2:15:
         0f:98:02:79:e2:a5:d6:72:83:a2:71:a2:94:28:e6:71:3d:6c:
         15:8a:fd:8d:5b:bf:7a:4f:83:3d:6d:f5:c6:b7:80:3e:05:ca:
         65:16:8f:08:1f:c6:bd:63:92:01:06:17:a4:c5:cf:2d:65:df:
         4b:2d:86:15:80:ce:80:8b:71:cf:f0:39:6f:a3:ed:54:3d:54:
         98:83:81:21:ab:1f:26:d5:f6:58:92:18:4e:a0:0c:c3:b8:b0:
         58:2a:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----