Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File:                     xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier:          7/+p1TvTCklUj4iofRi9UtLWn3CPjVDGgbO2KCFyGvg=
Subject key identifier:   90:89:71:DB:AE:84:9B:35:73:2E:48:DC:2E:57:9D:A1:E0:CD:6F:81
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer:       /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial:       01962E997EC90D786A4020BB39B2F349EAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
                          2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: ImAS7cC9OZxev6WUoLJdMD0SnsBuXF2NtT/CKFbB+7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7e:c9:0d:78:6a:40:20:bb:39:b2:f3:49:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=908971dbae849b35732e48dc2e579da1e0cd6f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:f3:2f:cb:f5:21:dc:4d:49:96:40:b5:05:
                    df:f9:69:6e:bd:a9:76:f6:ac:0d:81:fa:9d:01:cf:
                    41:89:d5:06:0d:5f:e6:71:88:ec:10:48:d6:c4:75:
                    04:17:74:82:e5:b1:21:ea:e5:72:bb:ed:bd:49:da:
                    eb:7d:4e:8d:31:eb:d4:d1:ee:99:3a:89:dc:eb:b9:
                    67:e0:80:c6:aa:4d:9e:3a:35:4e:95:5e:91:bd:5a:
                    4a:d5:37:a6:7f:6c:75:44:7b:f1:0e:b9:01:7e:27:
                    f2:7e:14:4d:9f:eb:da:b7:23:84:75:c2:2b:d0:94:
                    f0:2c:fe:75:69:aa:38:0f:8b:49:e0:d0:3f:86:14:
                    89:0c:d9:87:70:15:33:14:03:7d:5a:bc:66:d9:10:
                    27:76:d1:ee:ef:b8:14:50:bf:e1:16:90:0e:cf:53:
                    8f:4f:0a:14:33:0b:23:2e:8e:08:e2:69:a0:0d:a2:
                    ba:0e:44:c9:f5:41:02:5c:42:5c:06:7a:23:99:bb:
                    97:d4:fa:00:6a:53:74:52:0e:c9:c0:8f:ae:96:d8:
                    33:55:90:b2:3c:5a:73:c0:6e:a8:0e:34:4c:34:51:
                    e6:35:4f:24:0b:84:7d:8f:65:b5:33:e6:2f:4e:77:
                    fb:10:2a:8b:a6:d6:71:72:2d:56:87:22:28:aa:be:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:71:DB:AE:84:9B:35:73:2E:48:DC:2E:57:9D:A1:E0:CD:6F:81
            X509v3 Authority Key Identifier:
                keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:cf:b3:ab:17:4c:c8:45:6e:e4:1d:5c:72:ca:90:69:2a:
         59:5c:c7:7c:b6:62:ec:1b:39:ce:4b:64:ef:55:e5:32:03:fd:
         e3:2d:cf:a0:18:3b:61:cc:df:9f:be:49:f5:09:61:fe:e2:b9:
         ca:b8:4b:08:80:1d:84:07:2b:2d:11:aa:2a:cd:90:2e:ad:79:
         41:b0:97:7c:94:7c:41:9c:5b:d2:fa:91:e4:94:43:a7:6f:7a:
         81:c8:d0:bc:45:ef:80:e1:3a:92:ab:dd:94:5e:da:f0:15:95:
         81:34:49:48:96:06:3d:35:cb:cf:19:1b:2a:94:72:d1:59:fc:
         bc:7a:78:5b:f9:f2:77:ad:1a:0f:a6:b7:89:c6:e4:6d:aa:64:
         0d:cb:a3:2e:e1:da:fd:21:e5:6d:81:2b:e4:85:bd:76:bc:4f:
         4c:a1:54:32:f8:31:94:2a:69:6c:02:0b:6f:4c:be:21:c3:c3:
         11:f3:71:be:58:f6:74:8c:20:55:cb:54:60:ac:8b:24:b5:f3:
         fc:54:e3:f7:05:f6:63:8c:63:09:6a:77:92:72:5a:00:df:ba:
         c0:1e:b9:b9:d3:8c:8a:ee:90:92:aa:c5:e5:12:ed:f8:20:76:
         87:8e:92:aa:5f:a0:3f:a1:54:b3:e0:60:bb:3d:09:b0:8e:c3:
         d5:15:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----