Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          igwLaiUul9cEEYinE4yUU1oM0Q5MTNjWXyqI4YEAA0c=
Subject key identifier:   35:E4:10:66:1F:70:15:20:E9:81:E2:31:0D:A2:FB:5E:35:ED:A3:00
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       01962DF3CF05B2A1FEC59A92F55952EEDA29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
                          2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: lVSv0zYN3DOZSHP7VGw7K7bsSHsBiAxQYMmNvXWh0Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:05:b2:a1:fe:c5:9a:92:f5:59:52:ee:da:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=35e410661f701520e981e2310da2fb5e35eda300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:f4:59:fe:ce:a3:de:68:8d:c4:9a:82:fc:
                    de:71:c5:39:61:b0:f7:ab:6a:bb:58:3a:cc:c0:7e:
                    00:eb:dc:0e:f1:ba:fb:18:3b:9c:10:4f:e5:51:ac:
                    84:c0:aa:de:6d:28:d9:c0:05:27:aa:e8:6f:d2:fa:
                    70:1c:b9:7c:33:50:38:54:09:86:69:ad:41:20:e9:
                    20:c7:5d:5e:c0:98:22:67:e7:4b:9a:68:4f:bd:bc:
                    b1:4e:d9:d1:b1:50:c6:10:e6:79:32:23:be:0b:9a:
                    0c:c5:c3:ff:30:74:08:4f:d7:fe:d3:a9:99:15:d5:
                    6f:ea:7e:a1:0c:69:e6:f4:6d:d8:0e:72:69:2d:d3:
                    47:22:a5:04:6e:ea:28:1e:68:e6:ad:34:4a:db:f2:
                    9b:10:aa:85:db:f8:59:0c:65:e6:bb:28:27:d8:68:
                    17:8c:d0:09:02:38:e0:9b:18:32:36:8b:6b:ae:07:
                    e6:73:f3:a2:56:6b:bf:48:5a:02:dc:41:39:5f:76:
                    e4:c9:f3:85:99:d2:7e:e9:9a:4d:2f:79:04:d5:f0:
                    b9:47:e5:ac:73:11:b1:14:ba:6e:74:ac:0e:36:98:
                    58:5c:c1:a4:7d:a8:2e:5a:06:6e:92:a7:56:aa:27:
                    41:a4:d4:ee:7d:a6:71:90:d8:fe:d8:7e:14:ea:fe:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E4:10:66:1F:70:15:20:E9:81:E2:31:0D:A2:FB:5E:35:ED:A3:00
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:51:06:04:39:39:dd:7f:1a:83:a5:30:9b:30:e3:22:13:
         ac:d2:42:42:b9:c1:05:8d:92:80:fb:92:63:dd:7c:c1:ce:34:
         27:5a:f2:96:2f:e6:c9:4a:e5:5c:f8:83:bc:e2:a1:ba:97:c0:
         2e:b4:57:5f:15:07:ca:7c:f1:7c:bd:a7:37:00:9e:3a:ab:47:
         68:e1:ea:d2:d9:04:3e:e7:6e:7b:51:52:d4:d6:e2:d5:e4:d7:
         c2:de:16:91:7e:56:bb:a6:24:86:af:c7:ba:51:b9:7f:11:13:
         e7:49:2f:05:04:9c:4e:25:b4:dd:5d:bf:ff:d3:55:8a:6a:62:
         18:d5:d3:51:5d:d2:fb:be:cb:ee:6e:28:2c:d0:fd:15:09:bf:
         8f:8c:1d:cf:88:4a:76:f6:6d:82:88:a8:a7:22:04:ea:ee:4c:
         45:55:cc:4f:15:b4:c5:07:78:8d:a2:23:0e:3c:a4:83:66:98:
         8d:ee:a4:5f:de:81:84:dd:c4:d1:16:95:0b:f2:68:60:03:83:
         d9:26:73:10:5a:7e:29:e9:61:3a:bf:71:59:0c:39:2e:dc:c0:
         7e:c6:07:df:42:1e:21:eb:4a:64:8c:71:dc:3b:3a:7c:fc:39:
         2d:26:b1:9f:f1:5b:7d:4d:e3:51:6b:0a:8a:a1:a3:e1:00:a4:
         fb:b7:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----