Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File:                     EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier:          Axi8XgDlwL4P8+qt45+MRbDRdnaujBwe8vQSe85jTy4=
Subject key identifier:   62:67:B1:8A:D1:CE:31:2D:79:32:32:EE:5F:0A:AC:14:59:18:9D:81
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer:       /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial:       01962E99627500519FB771DB41AA72AE767B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number:          11F3
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
                          2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: fd5sl9YPcagfLGTxTpD8o2YUmjiEFuKHAiERc1l445I=)
                          3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:75:00:51:9f:b7:71:db:41:aa:72:ae:76:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=6267b18ad1ce312d793232ee5f0aac1459189d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:76:06:d9:22:03:c8:8c:9c:b8:d4:ce:4c:
                    1b:63:c2:cf:88:fb:0f:1f:de:c2:e2:92:a4:53:b1:
                    92:fd:72:00:c9:79:84:21:f5:ad:cb:46:1d:cd:8a:
                    34:f8:a8:6b:ce:8a:6e:04:ac:69:87:47:89:10:4d:
                    4d:79:a4:79:83:1a:a8:3c:8c:e0:56:2f:d0:8e:f9:
                    50:85:f2:82:33:44:b2:1e:7a:99:6f:d3:09:c8:f9:
                    7b:87:f8:5b:87:9e:bc:ca:b7:0b:19:52:d6:7f:a3:
                    76:29:d5:89:c1:99:c0:02:05:96:de:31:38:5d:fb:
                    b1:ce:0b:e3:ae:e2:45:8f:a5:97:a5:67:6c:12:3f:
                    30:49:4b:7d:51:61:c9:b8:a4:21:41:7f:6e:76:86:
                    ec:ab:31:a4:c5:6a:15:cb:2d:0f:47:66:7b:5a:dc:
                    1a:0d:6c:e9:2b:80:81:58:38:db:7e:14:f4:2d:cf:
                    02:df:d4:b8:7d:3b:3c:32:4f:ad:a2:66:92:4b:19:
                    2a:b2:0d:ad:80:7d:d4:f0:89:f3:a3:85:9c:d0:b4:
                    aa:d4:ec:10:af:31:d9:8f:90:3d:73:47:90:eb:45:
                    e9:20:42:a0:c3:82:97:dd:f2:78:11:b2:4c:ff:c0:
                    24:16:3b:65:9a:69:cc:75:77:84:96:73:d6:6a:8e:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:B1:8A:D1:CE:31:2D:79:32:32:EE:5F:0A:AC:14:59:18:9D:81
            X509v3 Authority Key Identifier:
                keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:74:88:30:6f:b6:49:67:07:bd:7b:52:fc:b0:a4:f8:e5:
         9a:aa:bb:7a:7b:4a:3c:81:ca:c5:6f:a5:dc:2d:64:09:cf:0f:
         5c:b4:0d:18:58:5d:85:f5:59:e1:9b:68:ab:68:4d:a5:95:a9:
         22:14:46:bd:19:58:f2:75:e8:ec:fe:09:2c:31:c7:c1:eb:c0:
         a2:78:e0:8c:cb:b2:2b:36:8a:ca:48:61:1c:f1:1e:b2:aa:5e:
         07:0e:e3:dd:20:b7:16:fa:9a:4f:92:cc:9a:1c:bf:27:46:ba:
         51:d6:95:63:70:74:33:0b:39:a4:7d:9e:3e:78:ee:21:40:ae:
         f4:2c:66:c1:a6:15:09:50:70:43:1e:57:c6:1b:af:40:85:5a:
         86:4d:ec:e2:d4:84:6b:72:e2:a4:91:30:b5:85:c8:c5:e3:33:
         62:1b:db:0e:e8:46:04:51:6a:10:22:ea:8e:05:e2:72:5e:fc:
         4b:0b:9e:6a:d8:20:2f:a9:62:f3:be:c6:a0:1e:7a:d4:3f:93:
         bc:61:0e:a6:aa:82:d3:06:e7:90:9d:e3:73:15:bc:26:ff:44:
         94:50:9f:ec:31:23:fc:9f:fb:c8:ed:22:34:ba:df:06:58:5c:
         7e:a6:4c:53:19:ee:52:4f:73:c4:ad:0e:b6:87:ac:62:7d:19:
         15:67:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----