Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File:                     2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier:          xOwYWHMBMH9mrrznPihheAdFuQ2GJ3DWvjRnM/C5RWc=
Subject key identifier:   52:85:72:BB:3A:CC:98:B5:0A:C4:05:48:17:CC:60:5A:26:FA:F8:3D
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer:       /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial:       01962F072ADD3A5EF75C9E9B5A62DFB598D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: BV7eDcFkbvbR4orulxgu0P71rkJFJZlR1MFM2TdXujA=)
                          2: Lr1Je63vs8PyvkKI1_N9un3D4qE.roa (hash: hbRmpQBdQ4b6GdZPWppZ6a4wJHdosMiH1PY+13rdPiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2a:dd:3a:5e:f7:5c:9e:9b:5a:62:df:b5:98:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=528572bb3acc98b50ac4054817cc605a26faf83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:54:55:bd:ba:ed:b0:fd:52:ca:34:89:d7:
                    9d:37:7a:bc:43:be:6c:9b:7d:28:dc:fb:48:02:58:
                    0e:13:43:b1:c2:b7:cc:27:ee:57:6c:06:6e:a5:0d:
                    38:e8:9a:d1:6a:e0:55:86:78:db:7f:98:93:76:30:
                    f7:ab:ef:1a:12:6a:06:88:6e:10:8c:4d:c9:d6:8d:
                    af:48:92:fc:0e:35:c4:24:22:7e:77:4a:7f:91:c7:
                    74:ef:c6:71:1a:2b:34:c7:11:4f:e6:ab:27:92:8d:
                    ec:69:b4:7a:a4:ad:e5:97:d2:65:f7:7f:8e:f5:e1:
                    2f:eb:ed:28:4e:a4:36:ff:70:98:92:cf:59:62:84:
                    fa:4d:c1:b4:e0:29:83:37:57:e4:c7:7d:12:d2:5c:
                    d6:29:64:c8:1b:7f:d8:d6:ca:25:15:c7:01:5c:07:
                    a6:16:cd:dd:f3:79:34:2d:b5:18:7c:bb:b7:15:40:
                    63:2b:42:a7:52:c5:24:dc:db:5c:25:31:1f:3f:1f:
                    b7:c8:0f:bb:e0:c0:3b:30:e5:a3:4a:b4:fc:36:17:
                    d0:cf:4a:d6:c4:86:a8:ca:c7:db:13:bd:a8:b0:9d:
                    33:e5:aa:9f:65:12:89:ae:5c:0c:30:02:18:e2:8c:
                    c5:d2:0d:a7:40:bd:1f:27:9e:b4:26:1f:8e:23:ec:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:72:BB:3A:CC:98:B5:0A:C4:05:48:17:CC:60:5A:26:FA:F8:3D
            X509v3 Authority Key Identifier:
                keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f7:b0:bc:ea:21:61:5c:9c:2d:09:15:7b:5e:d2:53:b8:12:
         ec:c9:7c:d6:da:ad:1d:19:3a:49:96:ae:8c:ad:3c:33:d1:d9:
         48:c2:ef:fb:44:76:86:ed:3f:7c:98:a8:16:b6:3a:0e:da:e6:
         3b:3c:38:fd:82:05:8d:ef:63:20:c5:b7:37:b9:41:49:45:fa:
         6e:d0:ab:5b:eb:2c:2d:53:78:9c:74:34:e3:86:72:bb:22:56:
         c4:cc:f1:97:98:1b:09:33:89:04:03:6f:6c:dd:23:96:4c:e8:
         9e:eb:bc:16:ec:56:4c:73:b6:37:7c:31:98:ce:23:7a:6e:52:
         79:96:48:bb:2b:f2:ed:0e:c9:cb:30:ab:0d:79:ce:71:d0:5b:
         ff:17:53:bb:e4:05:c9:db:ca:dd:70:12:c4:1f:7d:63:33:c6:
         c4:af:ae:af:39:ae:ac:1b:4e:6c:64:25:50:9b:39:6d:08:91:
         9d:08:cf:ce:47:9e:26:99:f9:e2:bc:7b:00:6d:24:fe:d2:27:
         1a:a6:bd:58:96:45:39:78:13:7a:5f:39:cd:e5:e9:14:92:d8:
         51:f6:19:60:58:24:f1:d1:12:8c:b3:68:6f:7a:5f:d2:ca:62:
         17:d3:4e:72:15:d3:dc:51:8f:c7:3c:77:ec:02:0b:57:2a:77:
         84:96:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----