Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File:                     a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier:          uw9ZYXEvn88+rY7/32csRFU3KSyHD0g53/USG4kLQfU=
Subject key identifier:   01:E3:3E:2F:E0:94:7A:EB:E4:24:6C:BD:9D:43:09:85:BC:30:34:ED
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer:       /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial:       01962E990F19FF596AF6D68927E8E2C63D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number:          EF
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: 2U1OJl4EWbssAs0Z1GqjoRzdn+sfPVVbUWP84cVlWkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:19:ff:59:6a:f6:d6:89:27:e8:e2:c6:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=01e33e2fe0947aebe4246cbd9d430985bc3034ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:59:d6:24:da:69:58:58:bb:c1:62:47:9b:
                    e1:32:4d:21:5c:13:c0:62:b7:9e:58:28:e2:85:d3:
                    a6:05:d7:0f:8a:8a:38:2f:7b:6e:e7:dc:90:79:8a:
                    7d:12:ec:06:f1:b3:e6:71:ea:b9:2d:ce:6c:e1:ed:
                    b6:14:2e:ad:79:2d:c0:2d:f6:73:e5:73:38:47:e4:
                    d3:86:dc:ed:8e:6a:e8:ae:5a:94:d9:88:5b:32:f2:
                    3d:42:c7:de:d5:bf:43:0a:f3:14:f5:74:c9:e4:16:
                    3c:bb:e2:b5:71:02:9a:cd:28:06:93:c5:64:3a:76:
                    6e:b8:51:ea:fc:64:b6:bd:36:03:c7:6f:fd:16:13:
                    b4:2c:d1:83:65:1b:73:e2:29:32:95:a5:11:b8:e2:
                    6c:b3:33:df:5b:99:e1:03:ab:54:7a:88:9a:a2:f5:
                    f2:04:ff:ea:cb:71:a5:79:b3:5c:38:43:92:a9:7d:
                    0a:a6:6e:8c:c7:a7:54:51:75:bd:6c:82:e5:13:be:
                    b0:e0:e8:fb:b5:83:62:a9:16:a4:67:b1:8f:82:ed:
                    9c:9c:49:85:1f:11:82:fe:1e:46:84:28:c5:55:50:
                    53:fb:52:4f:6e:e8:d8:e3:a0:2c:e5:01:98:01:cd:
                    96:ca:2a:82:48:27:f7:6e:39:e2:cb:28:83:1d:28:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E3:3E:2F:E0:94:7A:EB:E4:24:6C:BD:9D:43:09:85:BC:30:34:ED
            X509v3 Authority Key Identifier:
                keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:08:81:db:7f:3c:0d:a5:c2:22:32:d3:6a:37:18:2f:72:d7:
         42:32:67:dc:f2:80:e4:61:bc:fe:fd:3c:3f:03:d8:99:06:4a:
         4a:e5:b9:88:e6:e0:9b:77:eb:59:07:d6:22:fb:2f:52:c3:78:
         e3:70:35:d3:44:eb:e4:4a:76:a1:72:a9:05:a7:7a:cc:eb:f3:
         48:4c:5e:70:57:13:6e:c6:0e:ad:32:4e:87:b9:72:ee:01:a4:
         be:bf:8c:6c:32:9e:72:3b:eb:53:c6:77:a8:e6:87:f6:0e:57:
         93:b3:fb:45:1a:17:18:26:cf:75:d9:7e:0d:d5:e1:7b:58:59:
         4f:05:4c:af:6e:cb:04:c7:82:69:a2:05:54:17:68:55:ac:d4:
         71:c1:4d:95:76:f0:e3:91:ef:76:9a:0f:eb:05:de:64:ba:f6:
         12:c7:2c:f8:d3:2b:be:fa:c0:d0:6b:a4:73:dd:e3:79:57:06:
         12:bc:a2:b8:44:11:a0:fd:7f:cb:96:9a:28:6f:3c:93:71:52:
         01:ea:ed:b3:c2:28:9b:fa:f1:58:bf:44:80:ed:1a:cf:ab:0a:
         a8:9a:ae:5a:a1:0e:01:1e:8f:43:94:1b:13:e5:58:af:09:6d:
         56:be:66:5e:7d:7e:37:98:52:a6:90:08:38:3f:9a:7d:8d:3f:
         cf:4d:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----