Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File:                     EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier:          8p7c/9UJuYy/ppYjJRMFWP72dggn0VtwvQ8hgOSIJW4=
Subject key identifier:   26:6E:2B:70:68:08:11:52:31:C4:59:64:DC:D7:7A:20:AA:26:F7:35
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer:       /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial:       01962F74A3FC826E156B9C16158E6A7A1671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
                          2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
                          3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: CPpHRJV6g99hTSPCnIGG3IMEmIvY2JZnT8iyXmPXSlQ=)
                          4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
                          5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:fc:82:6e:15:6b:9c:16:15:8e:6a:7a:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=266e2b706808115231c45964dcd77a20aa26f735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:f8:c5:78:42:79:bf:3a:37:c6:e8:14:0f:
                    a2:c1:2b:d8:67:99:0b:af:ee:7b:9d:68:98:75:9e:
                    6c:48:6c:24:f0:b2:1a:67:99:20:c9:76:15:88:d3:
                    ae:40:54:dc:be:95:11:72:f6:25:c4:cd:c4:09:68:
                    ee:0f:01:7f:46:a3:2d:d8:44:6f:13:69:29:f0:d6:
                    65:f8:4e:82:ab:07:c5:fb:68:9f:d8:86:26:1b:28:
                    f2:a4:7a:b6:9a:fb:66:5a:7d:c5:e2:c9:56:ac:f0:
                    96:90:cc:bd:cd:5a:05:56:39:cf:06:6f:a4:45:91:
                    40:b8:1c:a8:f4:10:4c:ba:db:a2:bd:9e:08:00:ea:
                    88:89:78:41:e5:90:58:82:27:2c:a7:32:13:a9:65:
                    6c:c1:7f:66:f4:d5:dc:4a:bc:22:0c:49:c6:df:19:
                    18:aa:4e:a3:eb:90:5f:cf:c8:f1:9b:84:cb:b3:33:
                    ba:14:a1:a9:fe:18:fc:81:38:44:c8:e9:0e:35:a0:
                    37:97:c2:c2:ff:71:a9:c6:5c:dd:28:39:ef:c5:bf:
                    35:69:11:37:1a:3d:90:96:8d:a3:90:97:13:ee:05:
                    3e:9d:bc:a5:a9:9d:de:7e:9f:14:f8:be:b4:5d:6a:
                    2d:e6:0f:14:5a:21:24:4f:0e:64:d9:fc:61:30:4a:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:2B:70:68:08:11:52:31:C4:59:64:DC:D7:7A:20:AA:26:F7:35
            X509v3 Authority Key Identifier:
                keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:10:56:c8:3c:b9:71:3d:37:d6:a7:49:3c:72:1c:ca:f2:
         89:8f:15:b0:54:a6:c9:6f:9d:29:30:6d:6f:76:91:d0:48:c8:
         68:5d:54:2d:ec:77:00:53:64:ab:65:e1:ca:89:7c:19:13:4f:
         5f:74:65:15:13:47:af:ef:52:df:c3:11:9b:5d:0c:19:b6:52:
         f2:9e:a7:70:6e:8a:a9:95:df:ba:8f:2b:43:fa:fa:45:51:ae:
         1a:48:3b:dd:48:15:53:f3:7d:d3:1c:a0:47:03:6e:86:cf:59:
         63:04:3b:e3:10:8a:87:fa:3a:b9:84:fd:d7:86:c7:15:47:58:
         f8:6b:93:46:77:32:7b:e2:f1:c3:d6:0e:84:b6:5d:fb:a2:49:
         a7:9d:f7:67:97:8b:e8:ca:7d:d4:8f:54:68:0b:b2:14:19:ca:
         77:58:0a:1f:ce:af:b0:41:47:66:75:3b:76:31:c8:92:d9:77:
         bb:ba:1e:c6:a5:46:a3:5c:92:6c:1d:2f:0c:d1:6e:92:99:d2:
         42:02:c7:bf:97:ad:e3:18:a5:8c:40:d8:3c:af:a1:ae:9e:a4:
         99:2a:ca:45:0f:77:b9:f2:75:21:90:2a:d6:a6:4e:be:08:f1:
         12:54:7c:ee:77:7e:13:1a:00:ad:d2:b7:9c:f9:91:bb:0f:10:
         97:fd:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----