Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File:                     agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier:          4yvR72U8m2OIPjX+fgS+y4PRX3X1EB1Sv709GNRD8Bs=
Subject key identifier:   03:60:36:A9:7D:FA:3B:B8:11:B2:28:22:F9:D5:C0:00:39:EE:F1:5D
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer:       /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial:       01962F064FFEC6F4A19274CDFE65C5013054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number:          0CA1
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
                          2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
                          3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: 5di1fNM4rdV46lQzsUmByle1atJsYdLL5m71vDuQXU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:fe:c6:f4:a1:92:74:cd:fe:65:c5:01:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=036036a97dfa3bb811b22822f9d5c00039eef15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:da:b4:77:12:40:93:d1:a8:d3:6a:d5:fa:
                    54:0c:37:f1:c8:7c:5b:dc:56:ad:90:6b:29:01:cc:
                    03:a6:bb:d2:02:a6:05:20:69:21:bb:ea:44:ac:ff:
                    78:81:b3:3a:57:32:3e:86:e0:1b:83:5b:64:e4:87:
                    a8:0a:b7:28:82:be:35:f6:ae:7d:31:46:a2:c2:ba:
                    3b:3a:19:a3:dd:0a:a2:b1:75:85:1e:80:5a:d6:19:
                    ba:f3:05:97:cc:9b:8e:7c:0c:25:9e:00:f8:0a:4b:
                    51:2e:d6:61:cb:e4:78:f5:08:52:ce:fd:81:46:95:
                    f9:40:ec:0e:50:fc:62:fb:bb:2d:20:70:79:61:3e:
                    6f:de:03:1d:a8:52:36:3a:80:e3:64:8a:ab:30:1c:
                    df:62:af:bc:0d:82:78:de:4a:f5:f4:2d:a5:dd:73:
                    df:20:61:99:5b:66:b4:9a:2a:a2:4b:eb:15:0c:6b:
                    92:d4:1f:b6:d1:5b:60:57:c2:60:50:1b:5a:b2:d3:
                    ac:b3:ca:83:3e:7e:84:0f:ce:50:3d:17:85:d8:f9:
                    1d:9c:ae:db:ce:54:a9:09:47:2e:18:3d:fb:4c:b2:
                    5c:ad:e6:a9:d3:36:1f:67:87:bc:f5:92:45:a1:ef:
                    14:53:4f:8d:f0:6f:34:cb:3b:56:9e:0a:0d:f5:f3:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:60:36:A9:7D:FA:3B:B8:11:B2:28:22:F9:D5:C0:00:39:EE:F1:5D
            X509v3 Authority Key Identifier:
                keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f0:61:49:8d:ea:9f:6c:cd:07:94:db:0b:a6:01:73:4b:2f:
         cf:5b:aa:c8:9d:64:eb:21:8a:cc:de:51:25:76:80:8f:10:96:
         fd:1a:7e:b2:87:32:c5:b9:03:ac:56:47:f7:84:45:70:66:51:
         b8:d5:84:d4:00:01:a0:d9:d0:5f:d1:46:eb:5a:27:95:6e:8c:
         b5:03:d9:d4:ea:ec:4e:0d:2f:0e:ad:48:13:c5:6b:c6:ec:22:
         44:e7:43:46:d3:1d:3f:3b:2f:64:67:6c:d8:7d:8b:41:17:f4:
         c5:01:c8:94:62:5d:3a:34:90:79:f7:3d:47:05:f2:89:51:18:
         81:05:0b:a9:a0:28:c4:c6:db:1b:b3:9d:91:03:5b:be:80:b7:
         21:87:90:ab:43:2f:f6:10:94:3b:06:b3:df:ac:65:5d:b2:38:
         73:91:c6:20:9e:0b:39:db:9b:52:4e:86:5a:64:35:fa:7b:75:
         e5:a5:90:86:19:7a:e1:2f:7a:e6:6c:ff:fd:f8:f6:f3:a1:b2:
         73:c3:45:6b:44:ae:1a:0f:91:4e:66:1a:08:d4:cc:48:4e:d3:
         b8:e0:f8:6c:06:5e:d5:d8:50:e0:64:f5:03:5a:0d:ce:ef:5d:
         00:6f:b6:df:de:04:22:bb:45:04:0e:aa:60:15:3e:6e:bf:0c:
         78:29:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----