Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File:                     eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier:          xipy8DeVQlVM1GfDTsebHVyQ4F6xvyQ6TFp1lWrH5JM=
Subject key identifier:   E6:D3:79:B0:31:99:2E:B0:31:D4:07:FF:FB:0A:77:CB:1E:EF:77:42
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer:       /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial:       01962E61C323FDD77E8E24CCA4199F5D61EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number:          0FC5
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
                          2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: RDzHmTYT0Au+2tYBwjHg3OP3hM29hhzyPRCpVeaiSqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:23:fd:d7:7e:8e:24:cc:a4:19:9f:5d:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=e6d379b031992eb031d407fffb0a77cb1eef7742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:04:39:0e:42:33:04:06:72:d0:7f:3b:7a:
                    bd:6b:db:29:52:b3:f6:7a:4e:08:a9:2f:77:6c:63:
                    f8:f7:09:78:91:a0:fb:42:db:fb:5c:9c:95:6e:2b:
                    6a:46:e2:c3:55:d8:f9:be:84:e3:a0:c5:7e:94:00:
                    b0:8d:73:94:f5:3f:3a:91:0f:ab:10:1a:80:b8:f7:
                    cc:37:28:a7:ce:9e:f4:8f:de:ff:ee:07:9e:a5:9b:
                    49:6d:a9:81:2a:9b:bb:2f:03:00:f3:19:a3:29:ac:
                    51:7a:37:3b:73:d9:80:5d:ea:11:10:9b:25:d2:3d:
                    35:58:e8:72:c2:aa:3a:75:a7:ea:c2:ed:15:f3:90:
                    38:73:da:a8:48:6e:51:96:c7:72:44:0e:27:70:b1:
                    2c:ca:b6:0d:ce:6e:83:74:a9:dd:a5:d7:b4:5d:af:
                    88:a9:e3:06:d6:bd:f6:07:50:7c:32:ec:62:b2:34:
                    43:da:da:f9:b6:c6:25:e8:62:b5:23:29:e3:1e:0a:
                    d4:27:29:e7:d8:31:59:8c:10:45:62:3e:71:0c:3f:
                    80:ff:bf:d3:36:f9:72:2b:62:1a:fc:2b:33:75:8a:
                    6b:c5:1c:41:71:1e:eb:57:38:34:fe:2c:fd:a5:32:
                    0f:08:49:1f:a5:00:36:e3:33:26:f5:21:35:38:19:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:79:B0:31:99:2E:B0:31:D4:07:FF:FB:0A:77:CB:1E:EF:77:42
            X509v3 Authority Key Identifier:
                keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:99:c9:8d:b8:08:8b:82:a3:2c:8e:96:45:cb:db:ab:f4:
         4a:87:73:f6:4b:c4:93:44:67:6d:33:81:88:50:5d:ca:b9:e5:
         2b:c8:4d:ab:44:f3:27:42:8b:31:c5:12:ee:14:01:01:35:ea:
         52:ee:3b:63:2f:e9:71:1e:bb:92:ed:64:3b:3b:6e:6f:ca:37:
         f0:3c:34:51:70:6d:85:d3:b4:96:b9:c1:8b:ad:e3:e5:9d:e2:
         a8:22:bc:bd:e3:83:f5:de:6d:fa:1b:07:94:e1:8b:f6:08:0d:
         9b:99:78:8b:36:90:77:6b:4e:da:f8:85:aa:29:f7:b0:8a:53:
         6b:67:f7:25:a9:80:49:57:a2:e5:5a:72:f9:50:8b:61:66:20:
         b4:ff:41:4b:c8:ba:53:83:d9:22:60:23:11:d1:81:54:f9:34:
         28:cf:9f:44:fa:eb:95:fe:0f:82:c4:9a:38:95:0f:85:cf:0e:
         83:20:4c:13:8a:1d:dd:c3:a5:76:6a:96:25:dd:81:dc:cd:53:
         23:3e:cc:d0:b3:e4:eb:69:8b:ce:42:22:f7:15:14:cc:71:37:
         6d:a6:a2:6a:9e:76:b7:64:99:be:a6:d3:b6:12:da:5a:72:75:
         7f:9b:9d:21:7d:e1:c8:0e:1f:77:fc:a8:56:fc:24:45:47:65:
         05:aa:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----