Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          SNsQBbo/EOpeSdUkzQz1L4dqOJuUaoK4NxWPOP68gok=
Subject key identifier:   79:64:33:93:D5:65:2F:1A:86:F7:F6:0A:F3:A2:4C:93:DA:B8:BC:C9
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       01962E61E32A40EC0723EA009CF7D61E2881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          03DC
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: hA7kn6r280iwdKcyVAw4hQPisPIi6TfPcqpD450uVus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e3:2a:40:ec:07:23:ea:00:9c:f7:d6:1e:28:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=79643393d5652f1a86f7f60af3a24c93dab8bcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:9d:7d:32:f2:3b:3f:03:c9:c8:b7:f2:f0:
                    44:16:e9:33:20:34:c8:a7:57:1a:c5:ad:96:29:8d:
                    50:94:de:7f:9a:c9:39:17:5d:b3:80:69:8b:dc:3e:
                    af:1d:ab:fa:cc:f4:52:73:d1:8f:7a:d3:1e:ad:78:
                    13:8c:a9:7c:28:3f:66:2a:5f:19:0d:ff:e1:ee:bf:
                    9c:c6:90:ce:85:5f:91:27:91:a6:38:b4:14:71:bb:
                    e8:fa:2e:c7:be:ea:b4:66:54:20:d9:9f:44:e3:b7:
                    77:1d:fc:49:ff:5e:1d:bc:59:88:bf:c7:ef:b6:61:
                    17:57:ed:fb:1c:5a:71:26:f3:72:95:fc:33:5c:e1:
                    81:0f:7c:df:8f:07:93:87:0d:76:f1:6e:55:ca:78:
                    a5:c3:b4:67:e1:28:c8:a2:20:8f:b4:c3:69:73:e6:
                    9b:a2:64:21:88:d5:6b:03:3e:15:c6:4c:a4:e4:7e:
                    ad:2b:0a:8e:e5:00:81:78:76:9d:5a:a7:27:d7:39:
                    7a:3f:80:2f:94:b3:37:3e:62:c8:7f:0f:81:38:e2:
                    db:38:4d:e7:9d:ad:96:b7:be:1f:c9:53:d9:35:30:
                    32:06:5a:8b:d6:7b:2b:49:44:c7:56:3a:68:fe:61:
                    f7:f3:7b:cf:33:77:14:63:ae:07:1c:0b:18:ca:ef:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:33:93:D5:65:2F:1A:86:F7:F6:0A:F3:A2:4C:93:DA:B8:BC:C9
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:d9:60:5e:f9:d4:9e:81:34:70:19:db:57:53:38:e6:00:
         17:6c:24:b8:17:e3:de:7d:77:6e:8a:b9:2f:7d:a9:08:2b:bd:
         1b:5b:8a:9b:23:58:cb:bd:11:23:f0:3e:c5:e6:74:33:3e:bd:
         88:e5:b1:07:23:fe:b4:22:60:1f:21:9e:b6:63:f0:55:a9:60:
         08:8c:f8:47:b2:6c:c0:d6:91:0f:d4:d1:28:e3:66:bf:6d:9d:
         ac:a8:5d:01:b0:c9:96:a6:26:5b:dc:ae:f2:d4:f6:ad:04:2e:
         1c:fa:ef:86:7f:1c:58:54:c5:fb:79:7b:10:f3:25:36:fb:ca:
         66:8a:e1:40:70:fc:30:cb:5c:b8:f0:5c:1d:05:9f:f8:e8:27:
         6b:1a:b4:11:45:70:5d:66:b7:ef:42:99:9a:fc:1e:dc:01:f3:
         60:f6:52:ef:cd:98:bf:d8:a8:bd:43:36:93:0d:5c:12:4f:f6:
         20:ba:6f:c5:93:c5:95:c4:94:fa:0b:21:a9:23:b7:19:37:ed:
         a4:c9:cf:53:1c:bb:09:2a:77:24:c8:ea:bd:c7:c3:45:a1:28:
         be:fb:e2:81:74:33:4c:1a:07:44:72:47:e4:db:d7:cd:77:b4:
         af:eb:6d:ab:b4:dd:11:8f:8d:89:da:b8:40:ad:7b:7a:89:71:
         af:47:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----