Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
File:                     6vl4jJlRMNcOrEbAayJmctJdQYU.mft (raw, json)
Hash identifier:          wI1WYFA5ivshCOP0PuLP0fnMxQR3iUov74qoF7SXE3w=
Subject key identifier:   9D:6E:C7:D5:26:88:CB:1C:94:D6:81:FE:C8:A4:59:2C:B8:B8:EA:CE
Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
Certificate issuer:       /CN=eaf9788c995130d70eac46c06b226672d25d4185
Certificate serial:       0195E15A239BBF52B22F4BC1D4610BB0453E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
Manifest number:          0A08
Signing time:             Sat 29 Mar 2025 10:02:15 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:15 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:15 +0000
Files and hashes:         1: 6vl4jJlRMNcOrEbAayJmctJdQYU.crl (hash: BGMPVkIHGYxMwuB36SVGQ1yz1vEcCGWrLLez9JMUZvc=)
                          2: hL__7lcp69gjaM4kDfVqSenQ5T0.roa (hash: rq0h9r9MsJZ2d1oMlgt1f2tP65ZT9bv8lzzUA9F7MmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:5a:23:9b:bf:52:b2:2f:4b:c1:d4:61:0b:b0:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185
        Validity
            Not Before: Mar 29 10:02:15 2025 GMT
            Not After : Mar 30 10:02:15 2025 GMT
        Subject: CN=9d6ec7d52688cb1c94d681fec8a4592cb8b8eace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:be:32:d6:bf:3d:41:d7:fa:6d:10:41:93:
                    cf:24:c0:c9:7b:9f:7b:a5:f2:bc:0f:5f:f2:ab:3c:
                    1a:25:1f:90:eb:a9:8b:a8:c2:b8:79:dd:8d:3b:69:
                    ed:a7:82:2b:73:cc:03:fe:8a:92:d7:c7:bf:70:6b:
                    57:cd:22:a8:e2:db:91:52:9c:9b:3e:cc:68:28:54:
                    3a:ea:c3:b2:d9:84:19:f0:3b:25:bb:5c:61:53:9f:
                    fb:95:05:1a:28:9f:a8:39:17:9b:88:52:30:2f:9e:
                    73:0e:bd:f2:ee:bf:0b:84:50:0f:58:49:8b:a6:ec:
                    34:37:f4:ca:17:84:75:b8:5b:e2:c4:17:12:99:a9:
                    6c:51:7b:06:34:44:4e:ac:83:cb:01:80:8f:30:0a:
                    c5:c6:01:0c:a5:51:8b:e9:28:d8:c4:ea:67:de:db:
                    0b:f8:0d:bd:ee:68:27:7b:2b:96:f6:6f:97:55:8f:
                    5a:35:51:c0:a2:78:d7:29:6f:db:54:ac:82:43:f3:
                    ea:76:5b:88:43:85:29:4b:c8:5a:44:2f:47:d2:eb:
                    33:35:9d:46:27:5d:1f:04:cc:c5:6d:51:54:ab:a3:
                    fe:ed:53:36:a9:dc:f5:4a:e2:0f:4d:2c:6a:30:8e:
                    58:ed:71:1b:b5:cf:bc:7a:d3:07:96:14:e9:84:69:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6E:C7:D5:26:88:CB:1C:94:D6:81:FE:C8:A4:59:2C:B8:B8:EA:CE
            X509v3 Authority Key Identifier:
                keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:b6:f1:d5:a2:20:39:d9:7e:f6:44:d7:90:18:ba:16:34:
         a4:ac:f9:3b:f6:39:42:a8:b1:1b:88:de:22:4d:b9:ac:bc:e2:
         08:9a:8d:4d:63:80:76:0f:fd:db:29:4e:d7:66:60:b0:c6:4b:
         61:b1:a6:47:c7:40:14:64:83:dd:5a:04:d2:a7:69:12:35:a2:
         b0:dc:1b:1a:13:fe:b2:9c:93:b8:43:fb:89:c5:0b:0c:7c:35:
         84:00:d9:7f:96:15:48:59:32:13:3f:dc:1c:6c:9f:16:4d:5a:
         e7:40:4a:81:90:78:25:04:06:6d:25:11:e3:36:a0:bf:0a:bc:
         6f:b6:a0:06:2e:c3:05:0f:62:65:cb:50:e2:d1:13:b7:7f:44:
         0a:88:fb:82:1f:80:24:0d:f7:32:c5:18:b8:29:40:01:7d:a5:
         a8:43:60:4e:1b:b8:8f:30:51:12:3d:1d:65:ba:df:23:3b:f6:
         0b:3a:da:d0:bb:ad:06:50:0a:32:fd:51:7b:30:65:6c:30:43:
         55:23:df:bc:53:ed:20:64:42:4c:9d:c3:4f:c8:a6:15:67:24:
         44:97:ed:b2:30:5c:7e:77:12:8d:d2:d8:e3:ab:d7:e0:5a:9a:
         da:2f:03:6b:4f:bb:a0:98:30:ec:8b:b3:d1:10:97:54:18:07:
         fc:30:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:47 2025 by rpki-client