Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File:                     eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier:          MeevvjoFTvGIEGfeb+Bz9jYFT5K21utpA4at5A3f1j0=
Subject key identifier:   D5:D5:88:53:2F:11:B3:C3:DA:11:D4:0A:B9:42:F6:D8:3F:C5:60:61
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer:       /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial:       01962F74E2C091F65E0FCB04109EFFBDB5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
                          2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: 4kk7kqRcbpqTJgqlnCiIfLA933O8hShCyB0Rtmxq+WE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:c0:91:f6:5e:0f:cb:04:10:9e:ff:bd:b5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=d5d588532f11b3c3da11d40ab942f6d83fc56061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:2e:70:e2:e1:16:e1:2f:b3:87:a6:86:58:
                    5b:51:28:b6:f3:7c:8f:76:72:88:89:ac:cb:a6:f1:
                    03:05:fd:36:5f:06:2f:9e:66:b6:8c:de:ee:07:ba:
                    33:dc:35:07:86:83:e8:5a:79:09:91:c0:b4:a3:46:
                    4a:2b:7f:9a:9b:a2:6b:2f:bb:8f:6f:5a:e5:7f:4f:
                    ba:c6:73:4e:05:5e:73:92:31:76:cf:d5:23:f2:36:
                    c6:44:dc:17:01:34:b5:5f:fa:e5:53:b1:aa:11:73:
                    67:57:6e:11:96:97:9d:1d:15:4f:68:25:e3:46:4f:
                    1f:d8:08:c5:70:74:55:ad:58:ac:c3:56:22:90:e5:
                    c9:3d:87:46:5e:dc:66:94:12:4a:46:87:f4:e5:e2:
                    26:54:2b:c1:5d:81:9f:84:20:5f:69:5e:36:d7:f3:
                    a2:36:ed:ea:7f:e9:33:b2:b1:f6:97:4e:22:85:7a:
                    66:8b:26:d9:22:5f:a6:69:55:27:e2:02:93:20:a5:
                    f0:f3:b3:30:ce:79:09:cd:cd:3b:f1:24:de:a2:02:
                    37:52:3c:b8:7f:ff:e8:53:f5:f0:1d:68:42:cc:75:
                    87:9a:db:7f:20:e4:bf:b1:21:0b:4c:ed:c9:c5:5f:
                    2c:1e:47:ca:26:49:61:cd:dc:66:04:2b:46:23:34:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:88:53:2F:11:B3:C3:DA:11:D4:0A:B9:42:F6:D8:3F:C5:60:61
            X509v3 Authority Key Identifier:
                keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:a8:a1:53:20:d0:cb:28:e5:f5:c7:a2:0c:ee:42:06:bc:
         f4:e3:1a:b4:0b:1a:8f:a7:c7:f1:62:5c:95:6e:c0:22:e9:aa:
         06:09:12:c7:34:f2:17:24:e0:a6:78:ed:e5:d1:aa:f2:c1:50:
         34:57:15:84:ff:d0:ab:0e:7d:76:61:a6:3a:09:29:91:34:dc:
         82:98:f5:18:19:45:f8:39:13:e1:fa:06:25:20:52:6d:bd:d7:
         bf:69:cb:8f:14:60:95:d2:48:cc:67:06:de:d5:8b:28:59:d4:
         64:a2:6b:a8:ef:54:f6:de:a7:5d:55:a2:7f:3e:99:9a:0b:b2:
         7d:96:e3:a8:89:dd:d9:23:a3:69:86:a0:46:2d:1e:50:ba:17:
         71:46:51:88:f0:d9:5c:fc:ef:2f:a8:85:c3:25:1f:ef:a0:b3:
         25:88:46:57:eb:e6:68:62:a2:86:12:fc:97:c3:40:a8:5e:fe:
         fe:64:41:87:dc:ff:95:75:2e:39:26:0a:c3:56:27:4f:9f:84:
         9b:c2:91:1e:9a:f2:6a:9d:f0:65:53:28:1f:91:e5:7b:54:74:
         39:8c:f0:e4:04:22:24:6c:11:ae:19:77:6a:ff:59:81:ee:a6:
         c5:ed:34:cb:f8:8a:ef:8e:3d:63:b1:fe:23:52:13:f5:cc:56:
         e8:b6:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----