Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File:                     0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier:          g8nFROFrLfXYCz6lJvDf1fVtkS/+TugIjQiYGadKjzI=
Subject key identifier:   3A:F4:B6:E8:BD:A1:64:F5:ED:8D:67:A3:B5:F6:4E:93:0A:0D:4E:71
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer:       /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial:       01962FAB0DEAFD275DD617201BED17DF9C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number:          08EE
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: z8tA2yJE++jtp7sB+Vjgbf5ZPn/SiIql3O2lRvkIsmc=)
                          2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0d:ea:fd:27:5d:d6:17:20:1b:ed:17:df:9c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=3af4b6e8bda164f5ed8d67a3b5f64e930a0d4e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:a8:51:f2:73:4f:ce:05:b3:ce:be:bb:35:
                    d8:95:a8:55:55:69:f6:10:0c:ad:b2:d0:2d:dc:04:
                    cf:ae:34:fe:2c:a8:b5:53:69:d1:57:e8:4d:be:be:
                    e9:d5:34:44:41:15:3e:b9:ad:ff:d7:c4:64:77:2e:
                    50:0e:54:06:cc:c5:03:44:7a:4f:52:4c:7a:3c:63:
                    a3:31:bf:75:dc:f0:36:3a:e6:d5:bd:6a:d1:0f:4c:
                    0d:2a:5b:2c:fc:36:7a:d5:45:a7:58:73:1f:e0:52:
                    ba:ec:29:18:67:f6:f9:09:a9:73:7c:3d:9e:8e:78:
                    b9:0d:4f:cd:f2:bd:38:db:bd:0f:5f:cd:3e:6e:13:
                    1e:b9:c2:d1:73:2e:d7:6a:39:d8:4b:0b:b5:dd:06:
                    8b:49:1b:ce:62:95:a9:da:37:fa:d2:c8:d7:fb:01:
                    9e:8e:5b:53:99:b9:8f:9b:be:49:0b:d0:af:30:48:
                    04:64:ed:26:ff:a0:f0:e6:bc:18:40:f7:54:e7:2b:
                    d9:e9:05:02:fd:a3:95:e0:95:52:36:3d:bd:c8:f9:
                    21:8a:b6:5d:da:15:d5:02:29:0c:92:e6:b6:e4:d5:
                    30:45:ee:df:14:7c:da:0b:cf:46:51:e1:83:87:c1:
                    dd:d9:81:63:0c:f3:ed:52:e8:e0:27:c3:e3:33:7a:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F4:B6:E8:BD:A1:64:F5:ED:8D:67:A3:B5:F6:4E:93:0A:0D:4E:71
            X509v3 Authority Key Identifier:
                keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:26:e7:06:45:0d:f7:eb:c3:81:04:dd:6d:f2:78:6f:51:fd:
         e5:5c:47:8e:78:82:b9:31:67:f2:62:e9:ac:81:28:10:fc:d0:
         fc:08:0d:04:7e:63:2e:0e:29:e9:6c:c0:bc:62:dc:59:b2:d4:
         fe:dc:6d:50:6c:9d:80:75:58:68:ba:71:8b:4d:b9:7b:61:57:
         72:94:fe:fe:44:ba:d6:ad:37:2a:6c:b6:6b:d8:c4:d8:e3:4c:
         8b:d9:53:15:f7:28:ae:9f:5a:bc:18:78:bb:c0:23:fa:05:0a:
         6b:b0:78:94:f7:00:ca:10:ee:a4:91:82:08:0c:48:10:33:50:
         79:c1:8d:16:a3:e1:ff:be:3e:2a:52:df:0e:52:39:8d:23:bb:
         08:9c:8d:70:3c:20:25:64:e3:4e:28:3f:56:00:0b:86:35:c5:
         1f:50:ee:1f:e7:b7:9d:cf:dc:8a:e1:d9:6b:54:41:60:f3:69:
         b9:8b:87:db:33:61:17:f9:6b:13:65:0e:a7:9f:60:40:59:dc:
         97:99:50:3b:90:9f:1f:6f:e6:3a:d8:04:9c:76:96:21:67:a8:
         71:94:cd:b0:61:69:2a:f2:c1:c2:1c:b9:e9:cd:67:e3:cd:24:
         3b:0c:0f:60:2c:8e:23:8d:27:86:50:59:bd:e6:99:9e:f3:cb:
         03:00:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----