Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
File:                     eSWRAsFpk85eE7CMumDu2tf5J3M.mft (raw, json)
Hash identifier:          aUmO+IeAj6oYsD/UNQgSgPdsufFMj/BEPWNhQFubsXY=
Subject key identifier:   3C:04:FF:17:A2:8C:46:36:8A:B7:42:91:57:89:0F:CD:4D:1F:99:9C
Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
Certificate issuer:       /CN=79259102c16993ce5e13b08cba60eedad7f92773
Certificate serial:       01962ECF512FB5A1F66446AC9DF0B2F9D531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
Manifest number:          E7
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 2XnqswJhUp8Q7QKYSg6mYnJtPx0.roa (hash: GVTo7but2rFEi3PE0oMZ20Q2ZfZFSUAgiohCKBnP4LM=)
                          2: eSWRAsFpk85eE7CMumDu2tf5J3M.crl (hash: /aCJRSfhaAsvdsQWHfr5v4DBeka9nGmzJpaRhtMNbCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:51:2f:b5:a1:f6:64:46:ac:9d:f0:b2:f9:d5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=3c04ff17a28c46368ab7429157890fcd4d1f999c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:6f:41:26:8e:b6:7f:ba:38:82:9b:65:87:
                    b3:f8:2c:bc:96:56:ec:ff:d4:8f:26:0a:4b:6a:71:
                    70:24:bc:7f:c8:d9:5b:4a:4b:82:31:d8:c0:73:3e:
                    c3:46:46:1c:e4:b2:f5:47:5b:42:bf:50:54:ce:fe:
                    dc:90:ec:66:22:6f:fc:18:36:2b:69:74:f8:d3:de:
                    d7:19:ba:a8:b9:3d:59:a7:c6:8e:12:d2:0e:ca:15:
                    6e:38:3e:1b:78:37:cb:ed:39:f3:1b:b1:03:94:f8:
                    cd:20:e3:86:7f:91:54:e7:63:55:4f:d2:2e:8e:82:
                    e8:ee:25:bf:97:88:62:0a:8e:0c:5a:a6:5b:52:02:
                    23:64:2f:0a:59:05:b2:65:c5:3c:a5:b8:81:7b:a8:
                    fd:18:88:3c:6e:81:bd:16:e4:05:6c:f9:ea:3b:5b:
                    88:c6:8a:39:ea:0a:23:04:29:c0:c6:7e:69:40:6e:
                    dc:b3:ba:9a:30:be:09:c2:77:26:86:bf:89:00:fe:
                    19:df:6a:0b:78:73:3c:96:ec:12:2c:2c:cc:7b:ae:
                    f6:b9:9d:e1:ae:74:7e:36:86:dd:5d:88:58:3d:fd:
                    2e:75:f7:7e:b0:15:27:eb:be:e8:c6:1a:8f:2d:e7:
                    4c:1e:00:3e:45:4e:64:4e:12:76:d6:dd:5d:60:cc:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:FF:17:A2:8C:46:36:8A:B7:42:91:57:89:0F:CD:4D:1F:99:9C
            X509v3 Authority Key Identifier:
                keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:14:14:c2:73:3b:62:16:1f:3f:aa:b7:64:42:b2:8d:1d:9a:
         1c:db:8e:de:14:e0:72:97:8d:5e:60:3e:f2:9c:55:ba:e1:bd:
         31:13:0a:cf:e6:11:fb:88:ca:f9:83:17:db:a4:3e:5b:6e:aa:
         88:eb:58:3f:ec:0c:6c:65:5f:48:0f:73:e3:f8:a2:0c:1c:b7:
         44:ee:3f:81:7f:36:3c:07:37:66:ab:cd:87:0a:0a:c6:a0:63:
         ed:16:3b:cc:54:21:77:96:73:51:27:aa:85:08:b8:0d:15:63:
         ec:6e:bc:5c:d5:ca:ab:0d:20:80:93:6c:c9:da:81:cb:c0:f3:
         e9:b1:ef:b9:18:94:c6:84:2b:e2:6a:e0:b1:78:54:b3:3c:d7:
         48:34:16:75:43:c5:45:ce:19:b0:17:7e:cc:8b:73:41:55:74:
         12:a9:9c:e4:db:b7:b4:3f:b5:bf:20:d5:95:10:e8:ac:0e:4d:
         2f:55:c0:d1:95:e2:1b:71:48:dd:70:db:f4:1f:85:4b:11:f4:
         0b:1b:5e:63:49:b5:78:a1:c0:ce:37:00:a6:99:c4:f6:9b:9d:
         37:9c:76:6c:9f:8e:66:dd:9a:0a:f9:ac:b5:2e:aa:ab:4e:2a:
         d8:3c:e8:68:5f:94:b6:98:f5:ad:57:9d:43:3d:3f:80:5b:c9:
         95:02:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----