Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          LD8wzm5YquvajW6FKmIOJqpnF1U2kdt6FzbgnRKYOt0=
Subject key identifier:   9C:1E:9D:B4:81:AF:2E:5F:52:9B:A8:BB:C8:34:48:C8:1E:0F:49:2B
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       01962E61FB313DEB03A1E573524BFB151D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          0E55
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=)
                          2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: DGOnyXRj4KPrwwUSmibquVA/5o99BCc7/Y4cqXiwMFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:31:3d:eb:03:a1:e5:73:52:4b:fb:15:1d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=9c1e9db481af2e5f529ba8bbc83448c81e0f492b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:52:c6:c5:c0:f1:ca:c7:a4:fe:4d:70:48:
                    ec:c8:f1:bd:79:8c:89:89:ea:8b:c3:5c:e3:4f:ba:
                    7e:41:c9:2a:c0:7a:aa:65:a6:95:ca:3c:56:00:8e:
                    3d:30:54:ee:bb:13:e4:4b:bc:15:6c:08:cd:c3:d3:
                    07:cd:9f:23:de:f0:93:8d:12:9c:cc:62:4d:1d:58:
                    66:fe:6b:95:2f:85:18:a9:22:df:75:e1:13:bd:33:
                    c6:2d:1d:4b:63:76:dd:9d:05:0d:d8:9d:f4:30:75:
                    21:cc:46:6e:52:3b:be:f3:93:2e:9d:ef:d7:d1:07:
                    d1:1a:62:c7:b6:e1:a1:21:b9:25:db:d1:96:8f:74:
                    30:fd:9f:25:fb:86:ef:36:b4:26:e3:36:6b:74:04:
                    92:fd:fc:a7:de:c8:09:04:7f:75:fb:10:3b:4e:7f:
                    4a:0c:91:fc:62:f7:04:1b:76:a7:d0:d3:e3:69:4d:
                    e0:74:08:c7:c6:7f:fc:1a:7e:15:16:a7:f9:93:b4:
                    01:6d:58:d7:bd:c5:0b:03:4a:10:0f:4a:99:11:47:
                    a4:1d:96:6a:1f:f7:b4:25:1e:a2:28:ca:60:66:91:
                    ac:95:ee:34:fd:4f:a6:e6:16:97:ae:31:b3:28:9a:
                    3b:d9:00:55:f4:4c:bf:73:9f:7e:1d:c1:17:3e:06:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:9D:B4:81:AF:2E:5F:52:9B:A8:BB:C8:34:48:C8:1E:0F:49:2B
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:cc:43:10:40:ee:8b:63:7a:97:51:2f:4c:34:65:41:ab:
         81:0c:2b:f9:58:14:e6:2d:4a:6c:74:bc:2e:d1:eb:b8:8f:27:
         6e:da:83:b2:ca:6a:84:17:4f:7f:05:f8:65:ca:e4:9c:35:e1:
         87:30:22:28:3c:8e:0d:d8:67:ba:01:87:4b:bb:5e:03:49:4c:
         06:04:16:0c:a2:ea:c0:e1:87:c7:56:08:97:2d:dc:8d:da:8e:
         88:62:0c:94:25:cf:10:cb:7b:84:f4:9a:f4:c2:e4:fa:bc:f3:
         3d:95:8e:5a:3b:26:d3:22:1c:a8:c8:e3:6c:e8:31:88:44:01:
         97:1f:cc:3c:f3:9b:f8:c2:4b:90:f9:b1:cc:13:cb:db:e2:2b:
         90:73:f2:a8:55:9b:94:45:98:21:ae:fb:d6:be:f8:d3:04:99:
         5e:a0:57:f1:8f:17:be:c7:27:fd:63:84:38:2e:8e:2f:4f:da:
         9a:8a:19:b0:84:d5:3c:fe:1b:f9:d6:72:a2:25:13:39:f1:e0:
         55:e5:20:47:03:9c:02:3b:33:51:c4:37:64:c5:a7:d7:a4:c8:
         bc:2a:3c:3b:0f:2d:1d:77:65:8c:f2:80:f6:bc:99:ce:57:9d:
         ce:5c:8c:f6:6f:38:43:6c:bc:8f:e4:21:45:29:db:fe:f2:fd:
         71:88:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----