Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File:                     eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier:          dflaiGu/YZ7X/1uT1Xh9Vr34rTFNjA/S75GsP+j27u8=
Subject key identifier:   16:34:AE:B7:20:16:69:9D:2B:36:28:58:78:0B:B5:34:CA:5D:7C:9C
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer:       /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial:       01962E2B46B65A3764106C95D15D9D942133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number:          0E52
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
                          2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: ol2lvcyqWSTbL9ljKZHoijadX4UcMnAlb2UQz3oHBKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:b6:5a:37:64:10:6c:95:d1:5d:9d:94:21:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=1634aeb72016699d2b362858780bb534ca5d7c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:5f:19:32:0b:59:74:50:27:00:05:f9:92:
                    58:d8:97:9b:84:66:28:e4:d8:63:8a:02:36:55:e9:
                    52:65:76:ce:32:3f:68:7a:46:0f:83:f8:42:81:d5:
                    8a:8e:41:f4:2d:fa:cb:42:47:a7:6c:48:2e:15:36:
                    6e:ce:92:a7:69:4a:92:4d:75:ec:20:f7:3a:6e:5b:
                    21:66:f8:0e:b0:5f:2c:2b:88:3e:30:69:2c:72:87:
                    33:c6:0b:b4:72:cf:2d:16:4a:c2:c7:ba:32:57:71:
                    98:7d:9d:07:bf:51:99:41:1c:fe:80:74:29:0b:12:
                    57:b0:59:8f:13:69:e1:55:99:4f:c9:38:a5:31:33:
                    70:df:f1:c0:d0:eb:21:b1:97:27:e5:73:06:ee:f6:
                    a9:ad:59:0c:8d:40:85:0c:cf:20:9a:89:96:0d:d9:
                    68:e7:db:e9:38:25:35:32:36:70:4b:ce:c7:01:7f:
                    f2:41:79:ac:56:18:21:a0:23:3f:d4:4e:4d:bd:4a:
                    0a:03:45:9f:98:65:7a:12:e5:8a:2d:d2:6a:08:5b:
                    52:af:61:3a:c5:7a:70:9e:cc:13:16:98:34:9c:dc:
                    c8:84:74:89:8b:75:d5:ce:b9:4e:40:94:07:df:2e:
                    24:88:1e:5d:0a:bd:29:5b:c6:2f:82:20:53:75:d3:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:34:AE:B7:20:16:69:9D:2B:36:28:58:78:0B:B5:34:CA:5D:7C:9C
            X509v3 Authority Key Identifier:
                keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:13:53:14:8a:e9:87:0a:35:64:04:45:d9:7e:e4:4e:6f:
         00:06:b6:b1:c5:b5:b7:d7:59:f6:b8:fd:60:7f:cd:b5:c8:3e:
         be:4c:10:95:04:a9:d3:03:3c:00:ea:f8:81:0a:f3:9f:a5:59:
         6a:f1:b5:84:7e:e4:8d:72:1c:4a:e7:d6:51:67:38:80:98:3d:
         54:ec:5c:bd:0a:d4:5c:53:41:41:6d:ec:7b:3e:fe:bc:07:10:
         c5:2f:e6:a0:16:30:1e:11:78:93:0a:93:95:8a:a4:f1:e2:4d:
         a7:a1:2c:41:bf:60:04:f0:07:fb:6f:c2:ac:81:12:43:a0:e1:
         19:08:33:03:f5:21:63:d7:22:1c:21:20:20:c0:47:5c:69:ff:
         0a:c0:ea:3b:d6:b0:13:48:e4:a0:a1:79:4a:7c:7e:bf:74:28:
         64:1e:07:5c:f9:b0:7c:07:0a:d2:25:4f:30:4b:cb:a9:12:9a:
         39:fd:90:11:2d:43:9b:46:d4:cf:b8:6e:69:5d:c3:10:de:0a:
         af:72:56:51:e4:06:94:97:c2:88:f5:8f:95:1b:71:99:e7:46:
         b9:8b:bc:cb:11:e8:ff:f3:9f:01:83:43:5f:d9:82:9a:69:04:
         00:08:b2:00:36:fb:bf:9e:b5:32:1d:b4:7a:e4:6f:fc:19:13:
         23:5c:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----