Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          +BcXlzfN/mTfyVMUQ6+trkIi9ELTR60KB/pKJHGpM3w=
Subject key identifier:   C6:1C:34:CA:3A:9F:FC:C2:5B:87:B5:02:13:22:FB:01:97:64:40:50
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       01962F0717BA80745D1BA29A9AD6D1C49195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: gpK2UArqZlXRHaeOqPKLanZyjkZFnF0CJsyR1NJ5ap0=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:ba:80:74:5d:1b:a2:9a:9a:d6:d1:c4:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=c61c34ca3a9ffcc25b87b5021322fb0197644050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:4f:f2:2e:bf:e5:1b:8e:64:3e:86:af:55:
                    30:de:8c:42:69:fa:4b:3a:67:fa:28:ac:c8:5f:dc:
                    05:46:95:a5:a0:49:eb:98:36:fc:00:4a:50:df:c1:
                    5e:22:bc:38:7f:03:fc:9c:94:5c:d9:8f:e1:18:e5:
                    dd:8a:a7:e5:df:02:15:84:6e:09:33:33:71:69:5c:
                    c4:12:3c:be:ab:1d:bc:4c:7f:a5:43:6f:3d:2c:99:
                    2d:0a:84:84:80:bf:68:44:44:86:c1:44:cf:4c:2a:
                    71:39:c5:8d:19:1e:a6:69:d5:5b:1c:9b:46:04:18:
                    b5:7e:fe:78:61:b3:7b:f4:5f:ef:07:05:9f:4c:72:
                    b2:bd:0a:bb:60:7f:51:85:0d:f2:89:1d:ab:75:d1:
                    47:dc:41:0f:20:f3:7c:43:1d:47:c1:f7:d9:27:f6:
                    80:4e:84:fa:0c:9b:2e:5e:50:da:66:9f:61:51:6d:
                    d2:79:9e:f2:ea:2c:5d:75:92:ec:9b:62:ef:92:18:
                    b2:31:17:4c:7b:ed:a6:ec:6b:ae:84:9c:8d:67:7e:
                    75:76:bb:7b:67:94:9c:5e:56:cf:09:76:37:bf:74:
                    77:4a:34:93:cc:5f:5a:11:93:89:03:23:c6:06:03:
                    44:5e:2b:c6:c0:be:d9:e2:30:66:87:80:b0:1d:e5:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1C:34:CA:3A:9F:FC:C2:5B:87:B5:02:13:22:FB:01:97:64:40:50
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:1f:75:6b:bb:20:a2:ad:03:0f:25:11:da:d9:f7:05:61:9a:
         02:9c:8c:fc:d8:e5:78:97:e3:4d:03:99:67:a1:36:4c:a7:9c:
         e6:fc:49:a7:8d:3c:b3:5d:a9:b9:6f:a7:6e:eb:08:5e:ed:52:
         54:c9:cd:93:34:86:11:dc:93:ed:dc:2c:3c:64:63:f3:c4:3b:
         c3:39:93:48:af:b0:a6:97:8c:f4:9a:67:a3:99:98:05:89:f1:
         27:03:80:3d:79:73:ab:c0:45:05:30:da:ac:41:e7:b8:7e:91:
         c1:3c:a6:3b:4e:7e:7a:b9:16:9c:02:9a:a5:56:f4:b8:0b:4a:
         5f:5a:d6:4e:f6:62:3f:0d:68:ed:b5:a6:9d:2c:a3:a2:60:68:
         80:d5:2f:31:c2:8c:76:92:cd:03:f9:8d:05:62:25:b9:3f:93:
         15:a9:12:ba:98:de:e6:f5:84:86:91:02:de:36:c8:09:99:47:
         32:b3:f5:e3:be:ef:49:f0:02:9f:f4:a0:c0:04:d7:74:e7:7a:
         c2:e2:93:5d:b3:12:6a:cf:0f:39:ee:25:99:0b:09:59:a8:45:
         5b:23:31:c2:b0:10:1e:eb:f1:f2:00:31:c8:96:52:71:90:0a:
         85:b7:02:ff:f5:87:8c:81:a1:8e:92:f7:54:5d:c6:6c:14:0c:
         20:66:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----