Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          dylRJLxxXg8E7hZ0F9f/ljbc0/8DsNihFYiq1RK9LpU=
Subject key identifier:   E2:AB:32:34:01:02:F7:55:A1:AA:03:EC:5E:2B:82:9C:50:BC:F1:14
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       01962E61EE0245056FC0BA266108915BFEDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          0E08
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
                          2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: MYShpQwoMS1dIvDgixpr7UOmkdqGX6qjNN+8o4RUCLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ee:02:45:05:6f:c0:ba:26:61:08:91:5b:fe:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=e2ab32340102f755a1aa03ec5e2b829c50bcf114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:b1:56:08:84:63:f4:0a:70:b7:3e:95:e5:
                    67:5b:7e:15:05:37:69:14:77:f5:d3:f6:3a:ff:1a:
                    83:aa:ea:11:44:7e:63:8c:89:b9:2a:99:2b:1c:6a:
                    00:ff:48:22:11:49:1a:74:35:04:64:fc:ee:c1:a0:
                    33:c0:42:7f:c9:8e:62:93:1e:73:35:b9:34:f3:92:
                    79:a8:82:ff:eb:8d:32:1b:6b:dc:ec:97:21:b3:4d:
                    60:6e:c0:a8:4b:b5:1d:90:d7:02:8d:99:fd:e4:f1:
                    83:b2:71:11:59:99:5b:ac:cf:c7:44:e6:f3:db:31:
                    44:77:fd:92:a0:c8:18:71:7b:81:ab:4b:57:1f:86:
                    4d:46:8b:19:65:a3:d5:f1:8c:07:6e:09:09:18:1d:
                    19:30:34:ad:51:12:ac:7a:f1:0f:da:26:b9:41:e3:
                    30:4f:7c:65:54:06:ae:fa:57:39:7e:5f:81:b3:72:
                    4d:8e:6c:0a:c7:7b:93:f4:b3:b9:5a:e6:2d:66:ed:
                    ba:55:52:4b:25:39:b0:f3:97:31:bf:11:56:50:b4:
                    e6:4c:75:e7:2c:bb:e8:7e:0b:34:95:5e:14:fe:75:
                    2a:4d:01:e0:fc:08:1f:7b:3a:b5:9d:6c:a6:ab:cf:
                    61:1e:fe:b2:84:a1:b2:ab:3d:6b:56:e8:a4:1a:4e:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:32:34:01:02:F7:55:A1:AA:03:EC:5E:2B:82:9C:50:BC:F1:14
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:10:4e:49:ba:3e:06:a5:70:1a:95:03:99:fc:8d:09:b1:
         07:12:66:82:7b:44:cd:00:60:81:fa:f7:2f:4f:22:bd:67:47:
         78:6e:2e:76:74:f5:33:97:ec:ba:e7:9c:8d:64:c5:3b:7f:28:
         e5:0b:e1:6d:be:56:6c:30:4d:0c:d9:ab:31:0f:5f:69:f9:8f:
         70:67:8f:94:81:93:2f:94:fb:34:37:d6:06:f5:bd:9c:58:83:
         7f:70:92:c7:34:2e:c4:e9:cc:c4:a1:25:8f:a0:ec:69:18:b7:
         51:0f:61:9a:69:6a:8e:d4:8a:b5:08:13:f8:d4:09:31:22:51:
         01:57:a0:6e:83:30:2a:16:39:5b:ce:78:aa:73:03:03:84:ce:
         7e:22:d4:df:59:e0:14:ba:ca:ee:41:fd:06:86:b3:df:1b:9d:
         c8:9d:fc:bd:1b:07:92:06:f9:66:d0:50:8e:b3:29:9c:7a:ef:
         cb:df:a9:e5:fe:a4:34:64:f2:10:e9:27:43:f5:ea:ea:2c:40:
         26:3a:d8:1e:f6:27:d4:f0:c8:be:f6:44:4a:20:4f:7b:36:8b:
         af:34:ca:9b:5c:02:5b:c2:cf:fe:05:99:c8:1e:2f:4e:5d:ee:
         02:cf:6c:42:05:69:9c:60:4d:f0:44:0e:66:aa:95:06:e5:6f:
         9b:69:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----