Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File:                     EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier:          DY8RfFaVLL4ZCXEVkVrFr1M30NErrTAXsUCVIBF75V4=
Subject key identifier:   CA:80:5F:EC:F1:06:67:01:75:54:27:E7:8E:18:E1:A6:85:42:7F:26
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer:       /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial:       01962F3D59307CA9BBE883433A37270E2FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number:          05EB
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: BFejc/X/reE+5kbRsCHdtA/txrDJRnd+bZS9KagqMZw=)
                          2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:30:7c:a9:bb:e8:83:43:3a:37:27:0e:2f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=ca805fecf1066701755427e78e18e1a685427f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:58:e8:4b:35:cd:9d:1f:8f:8b:5b:89:d0:
                    d4:f3:3c:b9:e4:f9:74:e6:e8:22:c6:54:70:dd:76:
                    12:aa:4c:e0:cd:28:5a:9b:93:b0:7c:8d:cb:21:21:
                    23:ab:f7:7f:e7:4e:55:f6:3c:32:4d:75:ac:e9:1a:
                    cf:29:59:1f:71:93:c3:ac:ca:37:44:42:96:fe:0f:
                    ae:8e:fd:e8:50:a3:c6:0d:1d:59:be:ee:14:e8:3d:
                    5a:6d:03:8f:1f:41:99:ea:8c:24:04:be:6c:77:25:
                    d9:68:bd:52:74:ed:70:41:5a:0a:0e:fc:ae:39:72:
                    ba:aa:5e:7b:e0:30:9b:26:f6:55:40:c2:a0:a7:c2:
                    b9:43:0e:70:54:b6:6e:44:a4:ef:86:bf:1c:fc:f7:
                    03:b8:f8:2d:e5:bb:bc:72:08:c2:13:cd:6c:d7:0f:
                    a5:6c:ee:48:83:3e:db:32:43:ac:72:00:c5:1a:3a:
                    9c:b3:d0:6a:2c:cb:c9:a4:e7:2d:c8:0e:5c:51:ff:
                    1c:ef:c3:5e:ae:c6:e4:ae:79:46:d3:04:dd:b8:16:
                    fa:9b:f4:71:36:33:b4:47:e4:42:f7:8c:8a:cc:fe:
                    e1:80:8e:64:5b:5b:0f:bf:70:ac:fe:35:1d:b5:2d:
                    55:39:39:66:ca:35:e5:1d:69:10:43:4a:18:f6:54:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:5F:EC:F1:06:67:01:75:54:27:E7:8E:18:E1:A6:85:42:7F:26
            X509v3 Authority Key Identifier:
                keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:16:7b:ba:0e:85:16:98:b5:3f:7d:e6:47:e0:e6:f7:7f:2d:
         24:04:f5:b2:f3:fb:13:49:5d:9d:61:bd:d6:c2:bd:e9:97:85:
         65:5a:ff:63:3a:0d:f3:50:c7:7b:50:4c:0b:83:3b:f6:4b:95:
         82:36:10:3b:2e:68:d5:14:c6:36:86:d4:65:1a:63:a1:96:ba:
         1a:df:31:12:16:1d:b5:87:0b:f8:16:e9:19:8c:89:85:84:6c:
         aa:ec:b7:85:97:d8:b6:00:6a:d4:c2:4f:73:df:6e:a6:ad:18:
         f3:b8:48:cf:19:35:c9:29:7e:ae:1d:8d:96:a9:0c:51:cb:1a:
         d8:82:c7:4c:47:df:48:33:16:41:d8:46:9a:56:12:49:a4:f2:
         bb:c2:7e:41:fc:22:89:dc:79:e1:c0:a2:27:d8:ef:b7:f7:8e:
         bf:65:25:d5:bd:6d:54:52:7e:ea:6b:3f:fb:fc:e2:d8:82:04:
         89:56:56:41:e8:f4:1c:86:2c:ea:79:21:c3:63:8b:fe:20:28:
         42:38:2c:22:22:fd:92:35:bf:31:6e:ca:02:ca:18:23:a9:82:
         f6:66:21:40:02:f3:07:ac:87:b5:30:34:dd:4d:1c:3c:de:a2:
         f5:32:20:df:6f:00:ab:df:d6:39:e3:ec:ab:04:cf:4b:7f:7c:
         87:13:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----