Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          XaGZjrsmMwcEjkmbMRMqkAc6WO4sLFp6XCFewQa2As8=
Subject key identifier:   5E:0F:94:91:25:5E:B2:EA:BD:A3:2F:4D:3C:EF:A5:DC:23:15:8F:21
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       01962F3D4249B8180E4D7E3BB9EEAD65440F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          023D
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: VRC+bPoNSi/5BZXSdYkQWsvMfNg3YtYHrLPjKHtlzvs=)
                          2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:49:b8:18:0e:4d:7e:3b:b9:ee:ad:65:44:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=5e0f9491255eb2eabda32f4d3cefa5dc23158f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:28:02:81:d4:61:ab:15:26:6c:c2:42:4c:
                    ef:6f:9a:a0:62:28:8d:14:60:02:69:a1:02:ef:26:
                    48:4a:46:05:1c:e0:13:2b:20:bc:b2:4c:2a:e1:83:
                    27:0f:9e:13:c6:82:83:89:aa:50:26:27:c8:ca:dd:
                    08:13:87:50:32:e9:d9:66:28:e2:e1:48:f0:a4:79:
                    fc:af:31:dd:81:4c:d2:93:5f:21:49:2a:73:79:80:
                    06:d6:a3:48:b9:77:a3:72:00:48:55:6d:38:fa:bc:
                    62:42:09:78:6d:49:78:58:3f:05:70:10:98:cd:c4:
                    eb:d4:f9:df:6f:a0:08:ee:36:9d:06:44:49:39:59:
                    5a:13:57:51:92:b1:a1:b4:7d:58:bb:f4:67:b9:b2:
                    8f:0e:a7:34:57:65:ce:9b:a5:a8:70:b6:7c:da:85:
                    fb:5c:e2:8e:2e:2d:49:c9:06:97:bb:df:58:0c:ac:
                    39:0f:7a:f3:24:64:46:93:3a:70:cd:3f:21:7c:ae:
                    6e:a4:48:e7:2f:b8:8c:57:36:42:38:ee:cb:4f:61:
                    6a:eb:22:02:53:49:57:f2:ca:7b:9a:9b:56:77:85:
                    83:9b:03:2a:5f:a4:56:49:bd:d6:25:9c:01:8e:a1:
                    87:78:60:d2:91:b0:98:de:9c:b7:7e:19:66:01:c6:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:94:91:25:5E:B2:EA:BD:A3:2F:4D:3C:EF:A5:DC:23:15:8F:21
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5e:22:25:f1:0a:8f:14:4a:4d:6e:63:10:04:da:22:a4:9c:
         de:ce:1d:3b:5e:34:e6:91:46:f5:75:d6:79:d8:66:11:ec:50:
         0c:23:04:a1:57:4d:c6:d6:ae:dc:c6:05:d8:43:11:4c:66:db:
         57:0a:3a:cc:01:71:23:68:16:2e:0b:b1:76:a1:cd:2c:05:2d:
         5f:56:93:7c:f5:38:fa:88:47:8e:33:24:85:3c:c7:d1:2f:7b:
         b1:0e:a2:06:35:ff:6e:6a:57:47:ca:f5:e3:2c:ff:47:3e:ac:
         6a:91:ea:78:96:d3:1d:96:b6:35:78:de:c2:18:5a:a3:0f:63:
         54:49:2c:36:0b:c9:a5:67:24:54:3c:a1:82:d9:1a:9c:ab:9d:
         60:7f:98:a2:bf:63:7d:e4:ac:e9:ed:53:42:fd:39:dc:4e:9e:
         b7:3c:9b:f8:e0:51:a0:50:a1:22:ca:96:34:5b:d4:ad:47:3e:
         7d:1c:1f:db:7e:ef:fe:fd:a3:61:15:e1:37:65:ca:4d:74:42:
         8b:39:0e:29:27:8b:e5:3e:53:e8:e2:79:f2:48:4c:01:60:bf:
         95:89:f6:d6:7e:03:e2:83:68:10:0a:2d:74:7c:30:40:74:54:
         0c:d7:ad:d6:87:e1:48:cb:41:8f:bb:29:33:7f:c7:f2:01:36:
         a8:12:cd:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUJJuBgOTX47ue6tZUQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDM5MWQyNDQxNzNmM2UxYWE4MjFkYjc3NDg0YjFhZGE1
MzU1N2YwHhcNMjUwNDEzMTMwMTA1WhcNMjUwNDE0MTMwMTA1WjAzMTEwLwYDVQQD
Eyg1ZTBmOTQ5MTI1NWViMmVhYmRhMzJmNGQzY2VmYTVkYzIzMTU4ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46YoAoHUYasVJmzCQkzvb5qgYiiN
FGACaaEC7yZISkYFHOATKyC8skwq4YMnD54TxoKDiapQJifIyt0IE4dQMunZZiji
4UjwpHn8rzHdgUzSk18hSSpzeYAG1qNIuXejcgBIVW04+rxiQgl4bUl4WD8FcBCY
zcTr1Pnfb6AI7jadBkRJOVlaE1dRkrGhtH1Yu/RnubKPDqc0V2XOm6WocLZ82oX7
XOKOLi1JyQaXu99YDKw5D3rzJGRGkzpwzT8hfK5upEjnL7iMVzZCOO7LT2Fq6yIC
U0lX8sp7mptWd4WDmwMqX6RWSb3WJZwBjqGHeGDSkbCY3py3fhlmAcaHkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4PlJElXrLqvaMvTTzvpdwjFY8hMB8GA1UdIwQY
MBaAFOkDkdJEFz8+Gqgh23dISxraU1V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMt
NDZiZTc5ODcwYmU4LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMtNDZiZTc5ODcwYmU4
LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl4iJfEK
jxRKTW5jEATaIqSc3s4dO1405pFG9XXWedhmEexQDCMEoVdNxtau3MYF2EMRTGbb
Vwo6zAFxI2gWLguxdqHNLAUtX1aTfPU4+ohHjjMkhTzH0S97sQ6iBjX/bmpXR8r1
4yz/Rz6sapHqeJbTHZa2NXjewhhaow9jVEksNgvJpWckVDyhgtkanKudYH+Yor9j
feSs6e1TQv053E6etzyb+OBRoFChIsqWNFvUrUc+fRwf237v/v2jYRXhN2XKTXRC
izkOKSeL5T5T6OJ58khMAWC/lYn21n4D4oNoEAotdHwwQHRUDNet1ofhSMtBj7sp
M3/H8gE2qBLNdw==
-----END CERTIFICATE-----