Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File:                     EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier:          pI4lssrMnHJPn8cTIr/NGEKYXxulzVEI+Q1PFqwPHgQ=
Subject key identifier:   9B:11:9D:56:6D:A2:ED:2C:88:C0:26:E8:E6:94:FC:B5:F2:F0:90:59
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer:       /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial:       01962F06562E1D227EBA4FE11E0DA36541E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
                          2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
                          3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: zqnibiY/QaEDRoiKY8nlLRiovzt1z80paCZHijCpbek=)
                          4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
                          5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
                          6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
                          7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
                          8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:56:2e:1d:22:7e:ba:4f:e1:1e:0d:a3:65:41:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=9b119d566da2ed2c88c026e8e694fcb5f2f09059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:85:4e:56:b3:bb:26:69:45:48:17:ce:af:
                    18:1f:52:d9:51:86:04:4f:fd:39:74:1e:98:f9:c6:
                    22:d4:58:ca:8a:20:e6:84:2b:a5:4e:80:aa:4b:e3:
                    bd:54:b0:e8:a1:e4:c1:8e:7c:fd:f4:65:41:c1:29:
                    8f:46:22:7f:a3:72:c0:7a:5a:e3:2e:d7:7e:88:9c:
                    08:0a:1f:34:4f:fe:a5:81:36:58:3a:55:11:89:3a:
                    7e:06:2c:40:1a:fe:5c:53:98:9a:22:98:77:70:c1:
                    25:a4:7f:1d:70:9f:5a:66:89:78:e5:1b:9a:e0:1f:
                    d8:9b:91:ff:6e:b6:11:eb:4e:b6:42:a0:d1:be:08:
                    86:b9:82:2c:05:c4:b3:33:84:ea:fb:e7:90:8f:2a:
                    56:5a:80:1a:05:d8:f8:22:53:d0:ae:f4:f9:88:7a:
                    d1:59:f9:9c:15:af:0c:74:a2:a2:16:a4:b2:ec:8d:
                    a3:26:6a:fd:0c:cb:a2:57:00:81:41:47:4d:1a:19:
                    d8:01:2e:ef:e3:aa:53:9f:31:4f:4d:68:2b:2b:b5:
                    58:a4:36:c1:fb:03:ad:f5:c2:09:6d:81:55:1c:56:
                    6a:35:ea:fc:f6:1f:46:41:13:1b:32:bd:20:56:a7:
                    2e:1c:77:e3:1c:11:3f:d0:67:e4:7a:49:49:32:53:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:11:9D:56:6D:A2:ED:2C:88:C0:26:E8:E6:94:FC:B5:F2:F0:90:59
            X509v3 Authority Key Identifier:
                keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:a6:ef:84:ac:da:71:7a:08:98:7d:c7:d9:37:2b:93:11:
         ef:a6:d1:77:d1:d2:da:27:6a:22:5a:e3:00:e4:5d:17:4e:14:
         fe:34:47:0e:99:a8:f5:b1:76:76:7b:ab:eb:d6:cf:06:37:9d:
         07:f6:4a:bd:5d:c7:0e:18:ed:94:dd:a1:80:d4:2c:a3:7e:dd:
         ae:e7:9b:db:58:f2:d0:c6:64:5e:4c:36:c4:98:cb:c5:e5:a9:
         5b:ba:b0:ec:0b:0e:fe:4b:c5:19:b7:da:50:62:ea:00:38:d6:
         85:47:ea:c3:07:7f:94:ab:4b:dd:dc:1d:af:c1:70:51:a0:e2:
         33:35:e6:16:2b:59:ec:99:80:be:21:4a:25:cc:c0:44:ef:5e:
         bf:ca:51:4d:6a:f5:42:28:ab:03:66:9f:f7:1b:41:9a:78:cd:
         fa:e4:6f:94:54:c3:fd:fb:29:68:27:2a:fe:14:22:b9:67:6c:
         8e:42:7f:e1:8e:4d:70:1c:b1:b4:e8:05:9d:5c:c0:ba:ec:35:
         a2:a4:09:ae:b4:13:1c:44:8f:0c:6e:c9:e0:81:33:46:a9:d6:
         54:e6:7f:b9:57:d5:d3:2b:ee:68:2a:1d:c6:27:cf:8e:be:0e:
         93:7b:2d:63:50:a9:aa:77:65:6d:2e:c2:a5:58:dd:f6:16:ac:
         2a:bb:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----