Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          SIBjGQcd2gMNQHm9YmPRV/8jBYkpfwMJ3KS7R+jnLuM=
Subject key identifier:   93:5F:E6:14:75:83:66:91:59:C0:0E:86:40:38:28:D9:B0:F0:D4:0F
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       01962F74D99B4DAFDB24CA77D1BA8C03C0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          0C21
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: mOhxDsfE/EK8VDjrDqx2ZcQTbPl9eF84rkDMgX8Z24Y=)
                          2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:9b:4d:af:db:24:ca:77:d1:ba:8c:03:c0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=935fe6147583669159c00e86403828d9b0f0d40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:ce:28:40:df:aa:16:2e:e3:17:f6:8d:c7:
                    51:2e:17:1e:4e:84:34:7a:b5:d9:52:70:72:73:08:
                    43:3c:f9:d4:a5:e0:79:31:97:89:b2:11:3a:7e:2c:
                    89:b1:03:cd:63:9f:8b:bf:8e:f6:77:49:7d:de:32:
                    00:f4:1f:79:ac:9c:78:8b:5a:a9:99:8b:74:3a:3d:
                    62:6a:b9:30:03:69:f5:8f:d7:e4:d8:3d:da:f4:99:
                    78:fa:ac:bc:98:dd:d5:a1:cd:0a:4d:e4:82:09:b7:
                    66:ff:78:cf:2e:28:84:c9:c7:bf:e6:6b:76:ae:0c:
                    f2:d7:70:4c:42:89:e2:cd:aa:b9:86:e3:93:3d:47:
                    ae:2a:3e:47:34:0c:50:bb:9f:e4:6e:25:49:d2:e9:
                    02:23:13:ed:2a:c0:c0:88:60:53:a0:3a:cd:4d:6e:
                    55:d1:01:b4:61:aa:21:0d:4f:2b:b8:0e:94:09:f2:
                    94:1c:21:7d:fd:6c:35:17:ff:c5:83:d5:82:ab:7a:
                    76:49:e2:18:43:f4:6b:54:3c:eb:18:80:cf:c1:63:
                    21:41:96:75:87:9c:80:0a:cb:c5:00:55:2c:73:87:
                    1f:e7:7b:b5:d6:74:0a:d7:c9:e2:87:9b:d8:74:d4:
                    ee:ce:ac:4f:e5:b1:11:fd:f1:0a:bb:8f:1d:9f:9e:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:E6:14:75:83:66:91:59:C0:0E:86:40:38:28:D9:B0:F0:D4:0F
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:c5:35:24:38:02:b0:b1:4a:b4:28:0d:8a:4f:be:b4:bf:
         e7:48:d3:2f:34:7b:83:74:8e:82:9a:18:80:62:59:91:4c:3e:
         dc:66:e1:44:c5:f7:f7:5b:a1:32:53:af:ce:16:de:c5:7f:11:
         eb:e6:47:b4:13:05:f6:4c:a6:af:5c:d6:b0:c1:c4:a9:98:5f:
         5c:46:80:6c:07:5b:7f:15:32:8a:a2:4b:a1:32:a1:b2:e4:84:
         86:a1:cb:46:4b:cd:61:33:24:1e:79:e0:d2:3c:e2:75:dd:41:
         8a:04:02:c7:34:a7:0a:d4:cb:92:a3:42:43:cf:74:0e:ea:4b:
         46:30:4f:bd:b4:59:ad:34:ad:a1:70:69:32:1f:56:03:f8:b5:
         47:9f:81:c1:10:d2:60:6f:fb:5a:95:65:4d:99:36:4b:0a:35:
         59:fc:5d:30:63:85:09:60:13:11:60:64:83:b7:8f:dd:be:a4:
         dd:c5:76:de:65:ab:f0:73:d0:18:df:63:85:ed:c9:88:d3:76:
         1e:a0:72:e8:52:df:7f:ea:41:95:79:8e:eb:23:01:ca:70:e0:
         d0:35:1d:f5:01:bd:1b:37:c7:f9:a6:4a:48:ba:f2:ff:ae:aa:
         f2:78:4d:15:3d:af:29:f7:3f:ba:5b:27:73:89:0a:ed:a7:f2:
         ef:06:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----