Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File:                     EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier:          awCbWEe7Ee6IfFczHZMjVuuL5e+8VWM4+x8lBWud/Yk=
Subject key identifier:   3F:B6:91:A8:5A:D2:A5:44:8C:55:80:94:1F:B2:1D:06:95:ED:9E:83
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer:       /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial:       01962E2B4D8F692748B8855E1F4672D87095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: aZF5BAUEjH5u8h67gIJ7kIsWAt7/71VL+Inm44b9GO8=)
                          2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4d:8f:69:27:48:b8:85:5e:1f:46:72:d8:70:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=3fb691a85ad2a5448c5580941fb21d0695ed9e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:38:48:74:40:78:60:f1:01:2f:28:23:4b:
                    8f:53:3e:ce:03:57:4c:ea:3b:73:32:70:40:c0:5a:
                    4a:96:27:51:86:7d:88:6d:df:ae:95:10:8f:10:13:
                    cf:5d:5a:75:ee:c1:ff:81:b2:33:ab:03:6a:d3:cb:
                    03:da:fa:92:1e:49:3c:6c:8e:60:b1:10:af:ab:c2:
                    82:9f:ab:70:7e:fc:37:fa:89:10:a8:a8:a4:b8:1d:
                    33:6b:2a:cd:96:12:9c:fd:b0:ed:83:3d:60:22:4d:
                    3a:84:df:13:54:cb:a1:73:1f:35:48:19:8b:6c:40:
                    46:fd:5a:02:0e:7d:61:1d:c7:73:0c:b9:5d:94:d5:
                    ad:d6:bc:31:06:a2:cf:6a:3d:2b:99:4e:02:fe:ea:
                    25:1f:59:67:10:10:0c:39:25:cc:78:21:80:0b:8f:
                    bb:88:4b:75:21:e9:97:51:a8:15:ae:15:12:62:36:
                    f2:f6:ed:6d:ba:55:72:2e:56:3f:27:a4:f6:c8:01:
                    ff:55:41:18:c0:5d:ee:98:2a:92:99:39:1c:f0:48:
                    89:a3:f3:01:2e:fd:89:b5:dc:66:e1:36:06:22:c3:
                    53:81:18:c9:e3:1b:5b:97:13:ef:45:d3:50:46:b1:
                    52:ec:29:d1:d8:e1:be:68:9c:ce:f2:34:1d:05:17:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B6:91:A8:5A:D2:A5:44:8C:55:80:94:1F:B2:1D:06:95:ED:9E:83
            X509v3 Authority Key Identifier:
                keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:6d:24:7c:83:7f:99:fc:a6:18:aa:e1:98:f5:a6:19:eb:
         8f:f5:0f:31:a5:82:64:44:38:70:87:74:d8:e4:38:be:42:4e:
         26:d7:45:47:82:64:e5:5c:a5:b4:16:64:56:cb:e1:0a:51:39:
         34:64:94:fa:32:6a:db:b9:a4:ab:f8:06:42:14:9b:fb:fe:03:
         18:ab:51:31:47:24:3c:08:96:53:ad:f2:fd:3f:6a:85:2d:c9:
         4a:4a:5f:e6:bf:76:69:f3:16:a8:2a:f4:6c:d7:32:20:cc:65:
         1e:61:b7:d2:ba:a1:c3:1a:1c:a7:8e:da:8a:30:0b:31:c9:40:
         2f:19:15:89:b6:e8:db:25:e8:95:76:6b:f9:f4:93:e9:6c:ed:
         9a:0b:38:a8:ea:d0:9d:f8:40:ad:d3:c0:e0:c5:3b:df:9b:df:
         3c:37:7b:41:64:32:a0:d7:a1:29:57:23:74:c0:91:c9:e2:d3:
         5b:cc:de:9f:35:55:59:08:a9:ed:d9:1e:95:77:d8:54:42:94:
         a7:76:f8:d0:70:e9:9c:7a:07:a0:a5:9e:9a:c1:c0:be:5d:05:
         47:9a:27:68:4c:82:ee:6c:b5:7b:d9:f5:68:de:2f:a7:9f:b0:
         ec:32:02:2f:92:8c:d6:45:f7:2d:08:ab:80:36:58:2f:9e:9d:
         04:48:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----