Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          RytOxjE2XbwubFD5hSszC70jnhQkAZ4TsT1Blh6CT6E=
Subject key identifier:   21:2F:3B:E1:57:4A:85:76:73:C3:64:59:9F:A7:D7:54:0D:FB:7F:72
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       0194BBCE0220129775F2054753C60673163C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          0E25
Signing time:             Fri 31 Jan 2025 10:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:27 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: jlrj/LCEsgNWmY6YfKTl+N8iYxIyKvrHSVdj7eagVDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:02:20:12:97:75:f2:05:47:53:c6:06:73:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Jan 31 10:00:27 2025 GMT
            Not After : Feb  1 10:00:27 2025 GMT
        Subject: CN=212f3be1574a857673c364599fa7d7540dfb7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:f9:5f:19:42:51:79:e2:0a:18:36:2b:44:
                    aa:f6:0f:50:3b:31:f9:92:6c:12:6a:2d:9d:26:f1:
                    25:10:cd:29:5f:be:cb:74:5b:25:11:b1:fa:bd:6b:
                    98:43:e9:fc:20:d6:dc:74:c4:c7:26:02:2e:57:7a:
                    14:e7:11:9f:8b:e6:1f:27:cf:52:ad:c0:0a:f5:07:
                    8a:65:1d:21:61:4f:f4:bc:f4:f4:e1:92:c7:95:e5:
                    8f:19:d0:47:fb:0c:0e:e4:d9:77:ad:29:96:05:8f:
                    f9:4d:f9:99:84:54:ab:44:ea:29:53:a4:30:62:eb:
                    a4:5e:20:50:89:31:ca:be:b9:f0:14:1d:ff:e1:60:
                    07:c4:b6:b6:4e:07:72:81:9f:93:4d:09:b2:1a:6b:
                    a4:7f:38:3b:a4:15:2a:a0:9c:d2:37:8e:7b:a5:74:
                    7e:32:61:2b:81:7c:c1:a4:8e:e7:d2:48:44:77:d4:
                    b1:94:dd:8e:37:a0:55:fc:5a:04:6b:f2:fb:ef:c6:
                    ab:fc:78:59:87:93:fc:f0:98:19:8a:6b:b4:49:e4:
                    17:f9:e5:04:f5:10:81:fa:92:f2:cf:f8:20:cc:1a:
                    1d:d5:b7:3b:19:da:eb:68:da:40:59:f8:55:f1:47:
                    60:6a:99:48:45:11:f4:b7:0e:ef:95:d1:90:ad:5a:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:3B:E1:57:4A:85:76:73:C3:64:59:9F:A7:D7:54:0D:FB:7F:72
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:69:94:fa:ca:6c:ac:13:27:06:b5:4d:1d:b5:0d:d3:fe:
         f8:4d:5a:7a:5a:b7:4a:85:95:ac:fa:0e:b7:e8:80:c1:cd:cf:
         d7:4d:25:77:1a:83:18:60:eb:73:25:03:54:b3:b0:59:c6:70:
         7f:7e:6f:fb:a2:9c:bd:c0:b6:fc:3d:c0:d3:f8:19:0b:a3:21:
         84:3d:81:48:e0:52:50:f1:94:7c:b8:32:04:b4:4f:ac:7c:02:
         7b:12:1f:eb:df:f1:73:3e:ae:55:35:ab:72:28:91:49:74:8c:
         c7:a6:c6:80:59:75:c8:16:35:c6:c8:d3:bf:b4:95:fd:09:8e:
         9a:ea:bc:94:53:96:77:71:7f:f6:7f:2e:14:bd:bd:65:df:6e:
         f8:97:7e:f3:4c:b0:27:8b:bd:28:c9:81:b0:f0:b0:ad:c1:e4:
         f4:67:df:34:b4:17:ec:81:48:92:7b:95:ee:28:00:9e:05:37:
         2a:76:0a:3b:4f:e2:ef:5d:27:22:2b:82:38:e7:36:1e:b7:31:
         9b:d0:4f:fc:88:0b:19:8a:91:d5:15:84:ed:04:e9:38:d4:da:
         1e:7a:f0:54:2d:8b:d4:9e:c9:2a:48:7d:6a:56:ea:a2:f4:58:
         37:df:e0:a1:1e:e6:bc:d2:c3:49:3f:ae:10:b2:4d:e7:38:40:
         7f:75:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:56 2025 by rpki-client