Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File:                     eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier:          5t56B6zWcCWimbM8NE2vsD2jvheDrRnxUpM9GrLimBw=
Subject key identifier:   51:C7:AA:1C:5B:DE:A0:D3:1D:78:DB:89:2E:A4:A2:E6:50:06:36:BF
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer:       /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial:       01962ECFC2BB41BA43BBF67002F3CA8C130C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number:          1187
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
                          2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: zE51s0m5+NT8uI89H+B1Osdqi7hEcKUQWyKS5m4PUN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c2:bb:41:ba:43:bb:f6:70:02:f3:ca:8c:13:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=51c7aa1c5bdea0d31d78db892ea4a2e6500636bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:db:da:e6:c1:c6:d3:6a:3c:a9:25:fa:cf:
                    08:d3:f8:00:73:31:4f:e1:50:9e:f7:3d:a4:8f:4e:
                    47:37:41:41:b8:db:4e:48:81:d1:7a:84:a0:d8:1e:
                    07:d5:13:69:38:7f:32:9d:75:1a:38:72:dd:42:4f:
                    f6:43:28:f3:22:2b:ad:41:72:7f:6d:23:0c:0f:4f:
                    bc:9c:9b:37:f4:15:72:0f:01:5b:3b:7d:f6:56:5c:
                    2d:de:03:7d:bc:4d:03:55:39:9f:04:39:a4:65:92:
                    92:fc:a1:bd:78:88:7f:3a:73:6f:0b:cb:c2:cb:70:
                    f7:45:e7:4c:29:38:8d:46:f2:bb:ce:a7:47:ff:cc:
                    d4:de:1a:2d:a2:ab:ab:fc:d5:54:02:00:08:9d:72:
                    c3:a8:18:42:6c:ee:c9:91:d2:16:d7:93:87:90:62:
                    b1:fb:90:64:a6:8a:d4:75:a8:34:82:eb:fd:90:a4:
                    c7:cc:de:3e:d7:12:0d:6f:28:af:75:ff:16:fe:11:
                    15:5b:3f:a5:1e:4f:51:c0:ae:ef:90:58:70:07:86:
                    44:a1:29:37:4f:15:83:32:f1:0d:c7:84:42:56:6e:
                    cc:ae:71:dd:01:c6:9a:3c:c1:e9:60:f1:19:b6:ab:
                    5e:5c:0c:30:10:60:b7:d4:82:6d:0d:38:22:a4:ce:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:AA:1C:5B:DE:A0:D3:1D:78:DB:89:2E:A4:A2:E6:50:06:36:BF
            X509v3 Authority Key Identifier:
                keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:ec:47:5c:af:46:96:d9:07:4d:64:84:a7:62:f0:d1:22:
         c6:f8:8d:15:9b:70:7e:ae:5d:17:2e:23:1f:75:eb:1a:f1:16:
         ec:17:f1:dd:e4:28:30:d9:1a:fe:35:7e:77:00:e1:3d:83:48:
         9d:21:9e:2c:01:46:41:0d:8e:dd:4f:b6:93:47:89:3b:29:a3:
         58:ad:d7:49:22:25:56:a3:3e:19:94:54:11:41:4d:f9:bf:82:
         ef:72:a6:81:a0:55:2c:16:87:50:7e:14:72:04:a0:56:76:35:
         b1:bc:0e:f6:62:0a:b8:b3:5b:4d:41:3d:9d:62:5a:bf:63:09:
         bc:c1:20:03:96:03:bf:30:2a:90:5e:7d:4b:fc:90:69:47:d6:
         c3:26:45:78:7c:bf:97:50:34:f7:92:8c:9d:6d:8d:50:57:5b:
         43:73:75:d1:6c:bf:09:1c:61:35:0a:4d:b2:85:c8:b4:6b:5d:
         85:37:8f:e2:ab:17:bf:65:82:21:ea:dc:54:63:80:20:1b:ed:
         2d:45:03:a0:26:bf:36:f7:2f:2c:ff:0b:bc:96:c5:01:7b:21:
         26:da:22:8d:2d:7e:93:86:a7:2c:d4:01:01:89:6f:45:ef:45:
         3b:f9:8e:df:78:f4:00:e4:c5:39:c9:e6:92:77:5b:37:df:35:
         6f:9e:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----