Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File:                     E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier:          luKKhZ1tOJCgqsbNTc+2yiyY0DHcX1aXE36b5PLoFII=
Subject key identifier:   18:6A:74:C5:21:5F:A2:9E:58:C5:45:B2:73:D3:33:C9:2E:E7:D5:29
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       01962F06517675C35D10C047DBA6FCAF7859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number:          10C8
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: u9COtVTnKhwTRrw5C5VxvU7ZqOQxwrc5iV0f5W37x7w=)
                          2: RAwW8IE1n9sVekuiCyEikAL5HtE.roa (hash: R2iI0k0l7koAhrOpg0u96qvpaz2J9avElrVz1cFdebo=)
                          3: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (hash: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:76:75:c3:5d:10:c0:47:db:a6:fc:af:78:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=186a74c5215fa29e58c545b273d333c92ee7d529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:19:50:d5:20:de:71:0d:f1:dc:3a:a3:39:
                    4e:07:67:41:aa:94:2a:fb:ce:50:a7:d7:34:9c:e9:
                    9f:22:15:6a:d8:a5:30:61:e8:89:65:c0:1a:fe:2a:
                    5c:80:c0:e7:6f:f3:cb:a1:0b:c4:c7:b4:34:52:16:
                    c4:7f:84:61:21:57:49:e4:d9:64:d2:ae:52:3c:66:
                    fb:c3:cb:a0:75:9c:30:b2:44:11:d9:00:a3:08:41:
                    f8:b4:9d:7c:7b:05:a0:27:53:d7:94:f7:5a:91:f5:
                    25:ae:59:1d:ed:4d:60:d9:1c:e6:d9:97:47:6f:58:
                    98:a5:d9:04:30:0a:53:0b:e1:61:93:8a:fb:4d:92:
                    b6:c1:10:40:bb:b2:68:0d:9b:aa:14:bc:c1:93:2f:
                    77:6c:4b:89:e2:27:74:a2:8d:96:24:4c:ed:d6:ff:
                    c4:d9:72:c3:92:74:4f:13:c9:c3:e3:c9:63:6c:b7:
                    d6:7d:51:b0:a3:4c:56:f1:dc:01:61:a5:b0:a2:02:
                    42:97:0f:7e:37:95:2c:b9:a1:a7:3d:b7:99:cf:ed:
                    89:a3:93:39:10:da:f7:e0:2b:18:c4:61:bc:74:98:
                    4d:59:5e:26:4b:13:9c:8f:8f:47:e9:44:cc:ae:ca:
                    c0:1c:b1:90:04:dd:ab:b6:5b:e9:fe:ae:17:72:41:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:74:C5:21:5F:A2:9E:58:C5:45:B2:73:D3:33:C9:2E:E7:D5:29
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:39:2c:1b:18:0c:28:91:81:b6:2e:b8:6c:f9:6e:21:c4:65:
         67:85:a1:6e:b9:ae:75:c1:ab:37:cc:4c:b8:0b:07:9f:ea:ec:
         84:b4:02:1a:c8:dd:14:5e:bb:fe:ce:28:73:9d:cb:54:e2:98:
         f3:a5:83:10:3b:39:cf:6c:e1:ee:8d:44:37:0c:31:92:1e:79:
         73:84:4e:06:84:a1:3f:7e:c7:24:76:b6:c6:7d:07:4c:b2:f0:
         6d:f7:3e:a4:fc:9b:11:a4:03:ef:35:a1:b6:43:80:e4:29:4e:
         09:a6:04:cb:95:05:79:92:ea:e8:ef:31:2a:df:a3:bd:b1:8d:
         cd:5a:45:82:6b:60:d4:26:e8:33:e8:d1:dc:50:3b:4a:03:91:
         73:42:8e:be:3c:87:c1:f5:0e:f1:0f:4e:dc:9a:4c:66:f7:29:
         7d:c7:27:d0:9d:c7:fe:9f:26:6c:ae:7c:28:cc:5a:4c:ae:ce:
         05:a9:7e:7c:01:3d:52:47:50:47:e3:e5:d8:99:0c:7d:41:78:
         00:7c:34:53:d1:76:6e:cc:fc:51:0c:d7:5e:9c:8c:c4:b5:c8:
         31:f1:d0:1e:46:98:24:8c:e6:41:ac:56:01:f6:02:04:8a:30:
         04:4a:30:96:83:8e:66:16:6c:e6:d8:7e:78:ec:c5:d8:5f:de:
         f4:eb:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----