Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File:                     EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier:          41GwG1zCvbxcrsWrwV4bZMJ/UlY6/uLKc24ArCec1W8=
Subject key identifier:   74:33:48:6A:A4:7A:6A:A4:0E:B2:04:6F:75:A1:14:1E:14:3B:57:FD
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer:       /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial:       01962FAB5055F96EE026950CF37584C4AA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: dBgyw1vMqMan9vTP2CZT6+uimpBemkBPMVuZvQnonHU=)
                          2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:55:f9:6e:e0:26:95:0c:f3:75:84:c4:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=7433486aa47a6aa40eb2046f75a1141e143b57fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:c2:a9:b4:88:20:76:4d:d3:9d:02:94:6d:
                    a2:59:6d:34:3f:1b:ab:b5:fb:64:dc:2b:5b:af:22:
                    15:22:c5:41:28:ac:4d:1e:2b:b2:b1:96:19:a9:4f:
                    38:b0:56:1c:6b:9a:7e:bc:62:8c:a2:b2:ae:23:2e:
                    82:73:f4:b3:04:b9:a5:f1:02:0d:e9:0f:c7:d3:d3:
                    a6:e5:d8:1e:1c:78:c6:9c:3f:5f:16:a5:65:69:74:
                    fd:a4:b2:2c:26:bc:48:d1:1f:b9:61:57:b3:e6:c7:
                    8e:02:5d:0d:e5:43:03:50:95:e8:bf:a0:05:18:cd:
                    fb:03:48:68:ee:d7:ef:96:89:48:9c:5b:63:5b:e1:
                    be:8e:4e:db:35:5c:23:51:f1:8f:4c:5b:77:e4:70:
                    7e:72:24:b1:2d:e4:72:89:36:4a:ee:a1:e5:a3:3e:
                    90:c0:b5:3d:4a:64:84:f0:5b:14:26:5a:59:7f:86:
                    08:e0:70:a0:05:98:df:bf:89:e0:6b:a9:b1:78:96:
                    4b:e3:3d:9f:86:81:67:29:53:d2:88:2e:5b:14:04:
                    41:f3:d1:68:6e:c5:e0:b8:56:52:ee:36:9a:95:53:
                    b9:10:a7:32:e3:6b:51:f5:71:14:48:a3:4c:5c:b7:
                    bf:f8:92:56:b5:e5:ea:9b:eb:e6:94:f7:3a:b8:b9:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:48:6A:A4:7A:6A:A4:0E:B2:04:6F:75:A1:14:1E:14:3B:57:FD
            X509v3 Authority Key Identifier:
                keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e7:9d:e4:fc:68:7e:53:4c:ac:07:6c:70:34:bd:23:24:1a:
         60:64:0e:a0:4e:85:82:3a:7d:56:fb:34:c6:c3:0b:dd:59:cb:
         cf:14:a9:d1:9c:06:f0:0b:fc:99:ec:b4:ad:30:eb:ce:7c:87:
         72:fe:46:c3:b1:0a:a7:eb:5f:f7:77:11:3e:a7:2d:39:f3:9b:
         7a:0b:0a:e4:74:a9:58:e4:0e:aa:ce:23:66:7a:08:64:b3:28:
         c6:3a:b1:2e:96:37:53:42:93:85:dd:9c:b4:dd:1e:ad:dd:4f:
         02:71:56:cd:ab:c9:1a:fe:c7:04:18:08:55:eb:26:b8:23:b7:
         1f:bb:cb:0c:1c:0a:eb:df:51:e7:20:d3:48:2c:c9:97:d3:17:
         e8:0e:1d:3a:3c:f6:e2:bb:7c:fb:8c:68:1d:69:51:7d:14:2c:
         63:f1:e5:01:81:39:cc:f1:8e:d0:04:04:24:43:1b:69:2c:8c:
         d2:63:a7:bb:9d:17:27:05:a1:19:99:47:cc:b4:86:5b:2f:39:
         c8:d4:92:0b:59:8f:fc:80:2c:42:f8:a0:98:72:fb:d2:45:aa:
         63:2a:bf:97:25:c3:63:c9:37:88:69:ec:ae:c5:a4:c9:52:3a:
         3c:2f:3e:1c:df:3a:a0:4d:e8:25:74:87:6b:d2:cf:3c:07:58:
         62:53:4a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1BV+W7gJpUM83WExKoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl
ODYxY2QwHhcNMjUwNDEzMTUwMTE4WhcNMjUwNDE0MTUwMTE4WjAzMTEwLwYDVQQD
Eyg3NDMzNDg2YWE0N2E2YWE0MGViMjA0NmY3NWExMTQxZTE0M2I1N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxjCqbSIIHZN050ClG2iWW00Pxur
tftk3CtbryIVIsVBKKxNHiuysZYZqU84sFYca5p+vGKMorKuIy6Cc/SzBLml8QIN
6Q/H09Om5dgeHHjGnD9fFqVlaXT9pLIsJrxI0R+5YVez5seOAl0N5UMDUJXov6AF
GM37A0ho7tfvlolInFtjW+G+jk7bNVwjUfGPTFt35HB+ciSxLeRyiTZK7qHloz6Q
wLU9SmSE8FsUJlpZf4YI4HCgBZjfv4nga6mxeJZL4z2fhoFnKVPSiC5bFARB89Fo
bsXguFZS7jaalVO5EKcy42tR9XEUSKNMXLe/+JJWteXqm+vmlPc6uLliGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQzSGqkemqkDrIEb3WhFB4UO1f9MB8GA1UdIwQY
MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt
ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3
LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseed5Pxo
flNMrAdscDS9IyQaYGQOoE6Fgjp9Vvs0xsML3VnLzxSp0ZwG8Av8mey0rTDrznyH
cv5Gw7EKp+tf93cRPqctOfObegsK5HSpWOQOqs4jZnoIZLMoxjqxLpY3U0KThd2c
tN0erd1PAnFWzavJGv7HBBgIVesmuCO3H7vLDBwK699R5yDTSCzJl9MX6A4dOjz2
4rt8+4xoHWlRfRQsY/HlAYE5zPGO0AQEJEMbaSyM0mOnu50XJwWhGZlHzLSGWy85
yNSSC1mP/IAsQvigmHL70kWqYyq/lyXDY8k3iGnsrsWkyVI6PC8+HN86oE3oJXSH
a9LPPAdYYlNKhA==
-----END CERTIFICATE-----