Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File:                     ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier:          btpdgc1dogml1UBH0Cfid1QzeHP/Y8zm382gNjGMoV8=
Subject key identifier:   E6:2B:BD:86:5A:46:DB:9E:EF:D7:E4:B6:86:42:98:A1:5D:05:A7:70
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer:       /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial:       01962DF3C1F44F73C25059A28190C640307C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
                          2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: xh7yeWn9Ye3M/NVkLufuSzjpRmBH5uyVE7ttx9hJ5RM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:f4:4f:73:c2:50:59:a2:81:90:c6:40:30:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=e62bbd865a46db9eefd7e4b6864298a15d05a770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:de:6f:d1:b5:94:8b:78:1b:90:75:84:3a:
                    ed:f2:fc:5d:28:87:e1:e9:1c:13:53:b7:31:f2:52:
                    00:bb:28:af:20:80:ee:a5:83:09:78:18:b8:b0:31:
                    c0:97:0a:7a:a1:9d:00:eb:0a:ba:7d:6b:bf:1b:be:
                    35:3a:91:be:8f:d5:23:47:ec:0e:c6:b3:9c:38:18:
                    88:30:93:57:d7:30:f2:91:0c:3b:cc:b5:1c:c0:03:
                    8b:76:ed:fe:a7:aa:4c:99:97:ab:61:78:b7:f2:47:
                    82:28:18:32:54:ed:1d:47:05:e5:cd:01:6b:be:74:
                    30:ea:09:42:37:1b:f2:a9:1d:7b:34:08:d2:2d:86:
                    ef:22:13:2e:18:10:7c:2e:87:80:05:c7:55:67:3d:
                    3c:63:d5:5a:c9:78:3d:bf:f9:cd:5d:89:1b:73:04:
                    29:1b:87:ad:10:af:d1:e3:f9:9a:b3:4d:9f:1a:5c:
                    9e:e4:0f:72:31:a2:98:e2:2b:1a:79:1f:a7:7a:8b:
                    45:e8:1a:d4:02:97:ed:c0:3f:95:83:16:2d:22:76:
                    66:02:26:d1:5f:64:76:59:e4:6b:29:ec:11:3d:a1:
                    2a:c1:b4:fc:f8:ac:ab:35:ad:ce:36:45:cf:1d:f1:
                    ed:7d:62:eb:d1:09:aa:56:17:9f:1c:30:18:39:e7:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:BD:86:5A:46:DB:9E:EF:D7:E4:B6:86:42:98:A1:5D:05:A7:70
            X509v3 Authority Key Identifier:
                keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:76:7c:c8:b8:5d:dc:c2:4e:3a:05:7e:be:2c:47:8c:57:
         7d:b6:87:17:00:09:3e:52:fc:04:36:f3:da:d0:0d:48:bb:3d:
         ac:44:de:68:1a:b1:fe:93:46:a8:3e:3f:cf:59:28:ec:66:f6:
         2b:d2:39:02:ee:e9:c4:93:23:8e:de:e4:8f:4c:31:54:2e:7f:
         81:60:29:b7:14:3d:9b:74:53:18:e0:a3:96:01:21:b2:b0:4e:
         be:ee:55:92:99:0c:5b:58:0d:1d:dd:a0:96:73:a7:79:c3:f8:
         6c:0c:be:e2:3e:bc:d6:cd:0e:82:f9:62:02:76:9b:73:d4:e3:
         af:b6:27:63:e7:2a:a6:72:57:42:8d:a7:af:1e:74:43:4c:be:
         53:ba:38:8b:96:10:ce:c1:fc:75:e9:4b:70:1a:23:01:0b:39:
         13:d3:d2:97:4c:6c:09:b2:04:f0:94:83:af:1c:97:40:15:86:
         79:82:f4:62:b6:ef:79:b8:f5:1c:49:d4:c5:4e:fc:00:a4:c5:
         e6:ae:5b:da:ee:74:19:70:db:09:e8:8c:82:ca:e9:ce:a0:d5:
         f2:eb:ea:c6:8a:cb:cf:bf:cf:d7:c1:bb:72:36:3d:e0:bf:8f:
         8d:56:38:09:5f:30:89:d3:2f:e6:7b:19:27:74:a4:56:42:7c:
         df:46:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----