Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          5O/hmtB9SFPxII1QZvW/YBv+uG7TUWcqLXngncR2rbI=
Subject key identifier:   30:01:39:67:45:2C:1A:07:05:DC:5F:3A:E3:40:6D:FD:29:2B:70:49
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       01962E61EA5C74F75FA669B39B6A1BFF93DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: J/hSaMBkimaXF+29z9zOkiwCiNKWy8LrcWphov9qDGA=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ea:5c:74:f7:5f:a6:69:b3:9b:6a:1b:ff:93:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=30013967452c1a0705dc5f3ae3406dfd292b7049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:83:ad:00:a2:65:a2:ba:4e:44:14:e2:92:
                    37:59:4d:8c:1d:cf:96:c2:35:9f:bd:2c:1b:90:7a:
                    d7:5d:a5:73:d7:06:07:d6:3b:cc:c1:a1:38:3a:25:
                    28:78:a7:0a:0c:f4:e1:b2:56:4b:f8:bb:99:26:e6:
                    e5:b2:6f:13:7e:7e:7d:64:85:9b:0c:0e:74:61:af:
                    e8:5a:73:98:d3:80:8f:2a:e8:63:c5:5d:be:25:ff:
                    fe:fc:13:d1:93:16:bf:18:ee:30:32:e6:55:d8:99:
                    a6:32:65:a4:1b:96:28:af:aa:c5:37:53:ce:44:dc:
                    78:72:74:fa:16:26:4f:95:c7:6a:0c:cd:2a:88:ea:
                    07:30:f3:e5:d3:6e:d7:e3:cb:0a:e6:52:3e:4d:63:
                    82:56:a4:75:09:c0:63:c3:0d:6e:05:29:59:47:ef:
                    b5:cd:bf:39:6e:a9:b5:c0:a5:2f:d0:a6:74:9a:25:
                    19:f2:47:09:ed:86:fe:32:f5:97:04:76:0e:fd:d8:
                    6f:a7:9e:58:56:4d:99:f5:6c:c0:a3:a6:37:8e:7f:
                    98:8f:3e:01:4e:0d:26:3c:4a:0e:7f:ee:72:0e:b0:
                    9e:20:54:8a:c8:e4:21:03:57:07:e7:02:94:dc:6b:
                    8b:f9:e7:73:59:d4:51:46:36:69:1f:c4:e4:b8:ba:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:39:67:45:2C:1A:07:05:DC:5F:3A:E3:40:6D:FD:29:2B:70:49
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:8c:05:34:e4:87:d2:20:4a:90:88:46:60:f6:16:2f:1c:
         cd:4d:99:70:7b:fe:0f:29:de:69:65:df:98:d6:57:6e:d5:5a:
         b2:34:e7:d8:90:81:93:54:25:c6:1c:79:19:50:0c:53:d2:c6:
         07:be:27:84:d6:16:5c:02:7e:a7:fc:4e:4c:29:ba:b4:7b:1a:
         60:8a:62:3a:c8:08:7d:27:09:b2:93:81:38:8e:84:02:d5:b2:
         d7:76:83:44:fd:ae:b1:67:69:23:2c:aa:18:ee:43:16:38:7e:
         f6:61:ac:ee:47:29:66:4a:fc:fc:bb:14:71:dc:95:1f:f7:c5:
         b3:8e:bb:9a:0a:37:17:2d:79:0a:99:81:f0:ea:b2:67:29:6f:
         09:30:52:1a:0f:34:a1:93:b0:90:bc:19:5e:92:0b:26:2f:95:
         fc:81:b0:2d:dd:c9:11:5e:b6:0b:91:dc:18:fb:87:a0:0a:0f:
         14:87:c6:00:33:1d:22:f5:8b:fc:20:9d:01:74:87:87:48:f4:
         fe:63:02:3d:29:d6:9a:ea:7b:d8:ce:e6:98:f6:67:7d:71:cf:
         36:8d:0e:b0:af:26:d8:75:ba:c7:e9:d7:eb:ae:9f:63:81:5a:
         8f:07:7a:82:29:80:da:73:03:95:c5:31:09:b6:b1:d0:e8:4d:
         c7:e4:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----