Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          CD+tlqe0upUQrukG10ALMYqzMllh65ICYBGnHBH3Opw=
Subject key identifier:   04:F9:D3:81:53:A6:3A:29:5E:E8:44:BD:B6:C4:20:EF:5E:55:A7:0B
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       01962DF3F53A700CCCDCE7E5DA2B2FD51B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
                          2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: mEGr3xisTEtvADNmybmgsrTSsdtJqY0KtnX3ysDeLHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:3a:70:0c:cc:dc:e7:e5:da:2b:2f:d5:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=04f9d38153a63a295ee844bdb6c420ef5e55a70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:42:e5:88:07:cb:83:75:19:92:f3:08:3b:
                    e0:9e:82:db:b6:7a:04:ae:ba:90:0e:3f:a4:85:eb:
                    4b:bd:c6:03:71:4b:72:00:e5:be:a1:d1:33:5b:f4:
                    97:14:7f:72:ec:42:7a:c7:51:25:21:ca:f7:a3:6b:
                    db:52:c5:ca:9f:86:73:76:2a:a0:c7:f4:be:14:6c:
                    45:6b:c4:ed:ab:94:d8:de:fa:13:b2:75:b9:f0:83:
                    eb:59:7a:d6:98:a7:07:72:f5:95:82:7f:6a:9a:ad:
                    18:60:d0:28:63:bf:ab:35:04:81:2f:f2:56:3a:f0:
                    19:8b:40:d4:a3:ff:a8:81:b3:f7:37:b9:bf:94:c0:
                    3f:fa:ee:55:99:88:7d:b9:52:5e:0e:e5:79:9d:7f:
                    1d:8d:71:f0:4d:38:30:89:c7:f9:15:c3:10:85:3f:
                    e5:94:54:85:d9:86:a6:75:c1:8c:43:30:3e:cb:d1:
                    a2:62:17:b4:3c:d0:60:ae:24:81:f9:e9:57:91:6a:
                    8a:2e:81:57:1b:58:02:57:c5:20:e7:72:ed:c7:af:
                    a6:ae:5b:5a:2c:72:fa:cf:bb:72:7a:31:39:e8:ac:
                    19:17:54:7f:16:fa:70:5f:13:ce:aa:d4:71:a4:a0:
                    1e:a2:c3:5a:36:c7:cb:2f:54:41:18:36:3d:a7:05:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F9:D3:81:53:A6:3A:29:5E:E8:44:BD:B6:C4:20:EF:5E:55:A7:0B
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:2b:10:4c:d8:51:8a:01:43:02:d0:77:13:0c:a9:05:fe:
         59:54:d9:53:94:de:f5:95:8a:fc:30:58:fe:35:6f:d1:15:e5:
         c1:c0:70:d7:d6:fb:ee:e9:53:75:af:ec:d5:da:9b:1a:ac:ff:
         48:03:3c:cb:27:22:e8:90:d5:eb:27:ef:aa:01:d8:70:2f:64:
         21:33:13:03:41:81:aa:3b:b9:5e:1f:27:31:e4:a8:f1:66:d6:
         f8:9a:d0:bd:1a:5d:5b:16:70:22:81:52:ee:9b:9a:4a:63:5f:
         1f:0a:18:78:7a:64:26:38:f6:b1:ee:5b:02:be:70:fb:93:c1:
         6a:9b:bd:41:26:33:e7:fb:75:b1:d1:4f:7a:1b:58:ce:61:2f:
         a5:92:14:9f:73:ed:1e:15:e7:4c:33:13:22:1c:a8:35:58:3a:
         fe:22:90:4a:94:10:64:6f:6d:56:cb:fb:f8:71:f4:0a:e1:6c:
         f9:d5:9b:4a:a0:25:8c:f1:90:2d:20:07:83:a4:e8:42:5b:4e:
         db:33:4e:a6:2e:ce:74:3c:b6:ec:0e:c7:c6:81:1b:8f:c7:6d:
         f6:79:73:48:e3:1c:1b:2a:82:f7:13:12:4c:a4:89:08:7f:ff:
         61:bc:d2:15:b4:d3:06:8e:21:0b:bc:2b:da:54:fb:87:60:6a:
         47:98:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----