Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File:                     EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier:          MyB6Rq2EPkI1S5VcCKQTD6nkHJKbgmqdzrqD8zW70M0=
Subject key identifier:   B5:35:A2:F1:F2:BC:48:62:A3:0A:13:E2:01:4F:C7:DF:F8:95:CB:F1
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer:       /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial:       01962DF3BE15152A243A64236BA7D3F5B9DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number:          0E4F
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: 7X66TYAh99ZZqFA8E3AHLyfc7Ba2072QsKSBMfd0qZA=)
                          2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
                          3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:be:15:15:2a:24:3a:64:23:6b:a7:d3:f5:b9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=b535a2f1f2bc4862a30a13e2014fc7dff895cbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:d4:17:48:32:f7:13:62:35:7a:6e:09:89:
                    a2:c3:56:66:53:5f:b3:20:35:34:75:97:fd:da:1d:
                    2a:7c:97:4e:2e:c0:f5:7e:f3:d4:5d:6b:8a:67:01:
                    af:4c:bc:02:8b:b9:37:bf:b3:76:6b:b1:d2:98:5b:
                    d0:a1:e7:da:f7:1e:34:4c:48:fb:ff:93:cd:82:f1:
                    d5:6c:3e:d2:0c:15:a8:a3:80:b7:88:66:c3:28:61:
                    0f:a1:d9:24:14:d8:10:6c:78:02:fd:6b:04:f8:02:
                    62:b5:f0:91:5c:fb:9a:b6:72:05:c8:78:d6:dd:11:
                    48:74:67:d5:9e:81:19:6a:08:28:3e:33:0a:15:12:
                    3f:14:f2:b5:cf:c6:e1:84:92:66:83:52:f3:4a:7d:
                    b5:c1:ba:13:33:11:a5:32:1d:5e:0a:40:60:8e:3b:
                    66:44:52:d8:b9:8f:09:ec:2a:d0:bf:50:59:eb:05:
                    8e:b4:e0:49:ee:55:c6:97:a8:ae:f9:f4:b7:04:0c:
                    1f:14:3a:0c:08:93:b3:ab:81:88:98:05:b7:6c:37:
                    31:f3:c4:25:99:b0:9d:37:01:f1:97:bb:5d:15:dc:
                    a9:a7:d6:4a:c8:09:c8:50:05:19:b6:02:17:8a:77:
                    ef:60:16:7f:95:c8:73:63:d4:49:df:f9:42:63:89:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:A2:F1:F2:BC:48:62:A3:0A:13:E2:01:4F:C7:DF:F8:95:CB:F1
            X509v3 Authority Key Identifier:
                keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:08:fa:15:6a:4a:3e:fc:19:b6:ef:b9:44:56:d6:0e:01:
         27:b1:51:44:dd:f0:10:19:63:f7:45:fc:22:51:01:27:64:b0:
         1d:65:6e:59:45:98:07:81:00:eb:c2:e1:c0:21:54:d7:de:49:
         6b:a4:39:de:11:ac:29:96:41:de:6f:d9:c9:56:91:9a:7b:3e:
         57:c2:0a:a1:5e:46:34:90:65:0b:d6:56:e8:00:c2:34:67:54:
         fe:34:29:a7:9c:90:3f:23:28:89:f5:10:ce:65:ad:ab:8c:76:
         4d:e2:4e:dd:b2:d0:9a:c1:9f:b5:ee:9a:57:b2:db:11:1d:71:
         5e:82:44:db:a9:2d:8c:16:14:54:5b:e2:b9:a6:43:2f:cc:b5:
         66:02:7d:84:27:e9:bf:b9:18:c1:1d:31:60:71:80:9a:f0:1a:
         56:8a:e1:71:fd:c4:29:28:3e:6f:32:08:b7:6b:16:a3:d9:b0:
         19:da:d3:95:91:39:f2:fe:78:4c:81:f5:60:d0:7e:cc:8b:20:
         1e:23:a5:61:48:87:a8:5b:41:b2:e9:9d:3c:b7:8a:35:0c:72:
         87:a5:39:06:56:d8:d8:7e:75:80:5b:5d:25:d5:b6:c3:43:e4:
         ef:1e:d2:4d:90:8f:9d:29:80:c5:61:57:ae:ad:19:2e:c6:85:
         b1:e3:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----