Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          qdFQWjTjoh2ekLI0/T5WT1FJSeHy4f42Fc2RTBv6jPY=
Subject key identifier:   5A:7B:BC:E8:0C:80:DB:84:90:61:CE:D2:37:7C:4D:DE:36:B7:F4:D0
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       01962FAB2A97D75322D3870E4135553160E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          0855
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: nrWImTgtFlR1REDPoGgbiuJCM+GH8pZF2OIQnBHoF48=)
                          3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2a:97:d7:53:22:d3:87:0e:41:35:55:31:60:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=5a7bbce80c80db849061ced2377c4dde36b7f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:40:8b:00:87:ac:42:6c:5f:e2:7e:e1:61:
                    32:78:d1:23:69:a2:12:4a:13:58:99:b6:be:5f:d9:
                    28:96:09:c2:e0:99:5c:f4:47:34:82:d1:09:64:fe:
                    d0:3b:06:87:eb:d7:e7:53:69:7c:22:db:50:3e:d4:
                    f7:07:0c:fd:03:fb:c5:e2:0e:f3:09:ca:e0:a9:c9:
                    b5:26:89:54:50:be:59:83:95:e5:db:3c:05:1a:48:
                    90:32:c5:dc:10:ab:28:95:cc:88:0a:68:52:fb:d3:
                    3e:4e:ee:ee:c8:ff:ae:f7:6f:59:e1:aa:c0:ce:a1:
                    d4:d5:09:18:5c:52:0d:13:77:c3:42:1d:4a:f4:81:
                    d4:c2:6d:46:a1:78:9a:77:ec:19:20:29:f8:ca:b4:
                    d8:46:8b:6d:79:e9:d6:2f:03:e8:73:b2:81:c0:29:
                    09:ed:3a:b1:af:90:92:82:43:89:09:35:68:23:7f:
                    76:f8:15:30:12:49:e2:9e:9d:1f:d2:70:15:d4:92:
                    ab:1c:35:28:9a:0d:e0:28:f4:15:a4:10:e2:55:4a:
                    7c:80:73:56:47:68:d1:aa:d3:72:11:6b:07:b6:19:
                    64:b9:8d:2f:84:e3:91:69:48:5f:63:85:5c:44:ce:
                    75:54:4a:31:9b:ac:19:ff:5b:41:8b:ae:fd:99:a6:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:BC:E8:0C:80:DB:84:90:61:CE:D2:37:7C:4D:DE:36:B7:F4:D0
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e2:c9:0a:b3:dd:ea:e3:da:d6:e8:20:d2:96:a0:bc:a4:c5:
         5d:73:0e:2d:00:06:55:d7:76:21:3c:57:62:29:91:ce:a8:1d:
         ba:76:66:5e:dc:d5:89:3a:ab:a9:76:48:68:10:97:f8:80:8a:
         e2:ba:c2:18:82:9b:8d:85:91:94:93:d8:a2:f2:6b:6e:7b:c5:
         53:c0:a3:f9:96:82:76:8e:06:79:0c:a0:06:54:b3:0a:21:0c:
         dc:5c:3d:52:06:74:97:76:80:40:31:18:56:f7:09:d3:86:7c:
         62:8e:2c:fa:6c:14:02:f8:c7:29:ab:16:04:61:48:43:00:5c:
         36:c8:f3:c8:28:ec:8d:15:e8:86:ef:20:19:5a:fb:35:0d:b5:
         26:fa:53:04:19:39:83:33:26:eb:05:22:81:38:2a:58:b1:9c:
         98:52:c8:a8:dd:6a:c0:16:02:55:17:e5:76:da:f4:f9:2f:60:
         a5:71:7b:72:3e:6e:f3:e1:a2:d9:48:b7:6d:62:6f:ed:49:3f:
         fd:ce:3e:23:18:d8:24:76:55:41:a3:11:31:28:f4:1e:f7:a3:
         32:73:04:3c:ac:27:4c:a1:75:6e:ca:dd:59:54:a1:ec:ca:09:
         39:77:11:5f:7a:fc:0c:13:3c:8d:74:4d:d7:28:ec:ca:c0:04:
         cd:4a:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----