Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          hCXgVVrm1n66WaXSjoF+AOipRoTd9rNWT0Js2Jabqpg=
Subject key identifier:   A9:FF:D0:3D:A0:19:D6:2C:3A:83:16:98:A5:1A:70:22:59:2C:3B:D2
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       01962F067EF408EF3327625181909AC2FF0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          089C
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: HcO5cdSF05y0wg63MJNFAdh4QAo.roa (hash: Mz3glj/KonDBgt2SiP6Zk96rLbwRRRt7COjMo5lu2/M=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: Vj1dSk3ee7hePpLelEwAbCnSra6f57Ryn6+vN9dC2ZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:f4:08:ef:33:27:62:51:81:90:9a:c2:ff:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=a9ffd03da019d62c3a831698a51a7022592c3bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:47:5c:47:2d:bf:e7:4b:f5:5c:27:44:6b:
                    2e:59:be:1e:5d:b0:21:32:03:9f:3f:5b:8c:f8:61:
                    39:38:e4:41:c2:15:64:be:e4:ef:3b:6e:0c:cd:da:
                    79:1e:29:36:8b:a1:a9:e2:e5:3d:99:b0:a7:d8:e9:
                    d5:ba:16:e1:61:15:ff:1e:2f:d0:a7:ed:78:bf:a7:
                    3e:99:e0:3e:b8:b1:28:21:34:1f:b1:a4:71:52:bb:
                    32:fe:76:84:9e:7c:f1:eb:66:45:50:53:3d:0f:47:
                    ab:0c:d8:b5:ed:a6:3b:ce:54:5f:7a:fe:a7:b1:4a:
                    0c:8d:df:d4:3f:7a:e5:0d:71:7b:5f:2e:29:08:99:
                    af:fd:61:07:8a:92:f4:c1:6c:ed:3a:9f:ca:c1:6b:
                    99:74:af:18:ae:4e:94:a3:bd:61:2e:ed:71:ad:ba:
                    25:08:62:2c:31:e0:fb:95:a1:d6:c6:54:98:1c:26:
                    3a:da:45:18:3d:61:c8:af:b6:0a:09:32:56:e4:85:
                    96:6b:64:99:8d:75:6a:7e:31:c1:bf:70:12:74:15:
                    ac:28:91:ff:bf:17:1c:43:2a:95:48:93:3e:84:63:
                    28:37:15:12:71:15:af:0d:4a:df:97:7f:9a:1c:79:
                    c9:1c:c1:eb:70:77:3b:67:3f:79:54:95:3b:34:1c:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:D0:3D:A0:19:D6:2C:3A:83:16:98:A5:1A:70:22:59:2C:3B:D2
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:49:df:4d:35:52:08:f0:7b:57:0c:58:00:73:21:83:00:43:
         b3:c9:40:e6:97:07:36:30:f7:3c:9b:01:19:b7:b4:5e:49:6a:
         65:13:47:61:3a:62:a2:13:36:8a:b9:b7:95:af:a3:9e:86:da:
         5c:fb:f0:bf:7a:b7:20:f3:42:c0:72:8a:fd:8a:e2:8f:d7:41:
         33:3f:4c:45:de:71:1e:d5:6a:05:f8:51:67:bc:a7:24:ca:6d:
         de:27:84:a8:65:30:58:64:95:9b:0e:cc:e8:b9:79:2c:18:8a:
         f3:2f:2b:a9:a9:d2:d1:a8:f1:46:0d:e7:13:a3:27:a1:ec:a5:
         53:2f:2f:bd:08:e7:78:e0:eb:fd:70:1e:e5:65:f4:22:37:94:
         84:89:f0:f8:1a:5d:c2:44:59:89:d1:8d:21:e7:2c:bd:c7:80:
         f9:1a:2e:32:17:6d:d0:84:b1:e3:31:c8:36:54:07:d7:0c:4d:
         0d:c3:be:0c:94:d3:6d:54:29:ec:ea:7e:39:92:84:f1:93:4e:
         29:01:74:c4:a4:b0:81:7f:d1:bf:26:e2:1b:46:0e:1f:ed:9a:
         5b:db:b3:4e:74:c5:cf:31:d3:51:8e:72:6f:fb:69:ff:da:7c:
         55:87:08:67:a3:69:82:66:61:3c:84:cf:59:4d:11:e6:8f:3d:
         da:49:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----