Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File:                     EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier:          NTUemRcXLKB5X5Ic4vG54H9obsWHfcOPHVECeVgF2sk=
Subject key identifier:   54:E9:DE:CF:E3:A5:AB:AA:AD:7D:2C:57:9C:3D:61:AE:78:A1:72:75
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer:       /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial:       01962F3D8541A9B4F8AD428F7D6C3660C2D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: 151ORxWgDmLJp/IcSXCPfJ0ytj3q8oFh7gyybr8Jd9s=)
                          2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:85:41:a9:b4:f8:ad:42:8f:7d:6c:36:60:c2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=54e9decfe3a5abaaad7d2c579c3d61ae78a17275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:05:74:3a:69:8e:4d:da:df:8a:da:bd:e0:
                    34:2e:70:18:fd:20:11:27:3f:fe:8b:8a:b9:c1:82:
                    cc:aa:d5:d4:a7:91:af:e9:44:fa:0e:3e:67:21:49:
                    3d:3a:d8:fd:63:8a:3d:90:9d:ba:e0:ce:d5:e9:9c:
                    90:64:2b:76:3c:af:3b:ad:5b:52:cb:6f:c8:49:ba:
                    22:34:2c:f2:4f:d2:d7:bc:68:57:56:4e:80:88:56:
                    9e:ab:0e:2f:d2:3c:4f:46:5c:d7:70:44:b5:18:25:
                    97:83:8a:b2:67:3f:b0:29:99:17:b6:2a:8f:a6:9b:
                    d0:05:e9:41:b5:cd:ba:91:fd:c3:67:0b:41:f3:9c:
                    2d:8d:32:99:7a:72:0f:b0:20:4d:e6:c4:69:98:ad:
                    55:59:cc:9a:7f:67:86:dd:cd:70:b4:64:73:9a:05:
                    d9:ab:9d:2c:8b:4e:cc:a0:10:dc:95:a0:86:6a:ec:
                    17:0a:6d:46:3a:a5:f9:f5:ef:4c:53:d1:f0:38:92:
                    fd:0f:54:b0:d1:64:0e:81:7b:25:52:ba:72:ee:a6:
                    33:c1:ae:86:36:a0:54:c9:b0:ae:ce:3b:23:d7:ad:
                    60:4f:5b:7b:ad:38:83:0a:7c:9a:07:6d:b0:22:54:
                    4d:f4:01:30:a7:21:2c:90:71:77:8d:4c:7d:6d:13:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:DE:CF:E3:A5:AB:AA:AD:7D:2C:57:9C:3D:61:AE:78:A1:72:75
            X509v3 Authority Key Identifier:
                keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:47:73:35:0b:f3:5b:a7:d7:ed:4e:2f:d0:6e:e8:13:4a:
         f1:67:44:4e:2e:b2:5f:c1:e6:c3:87:56:17:2d:2d:e5:10:8d:
         56:d5:95:4f:6a:7c:5e:c2:19:90:c2:52:99:98:f0:36:c0:a5:
         55:3d:a9:d5:56:4d:7e:89:33:23:7e:48:b0:81:08:78:20:cb:
         f1:d3:02:32:3f:e8:af:79:23:c5:d5:28:87:2e:f6:14:71:16:
         73:13:42:1e:94:8e:93:68:ba:f3:6d:df:2c:65:32:83:b1:cc:
         db:b0:94:87:ed:ae:58:90:1b:c4:7e:fd:02:91:ff:7a:ef:f6:
         f9:e5:5d:a7:8d:2f:24:f4:ff:db:34:7f:ef:68:5d:ac:4f:92:
         43:0d:11:9e:22:ce:41:6d:ac:d0:bb:65:f4:56:21:1c:93:9c:
         95:1b:03:bc:e3:59:4c:fc:43:ff:5f:fa:26:98:13:2e:4c:7e:
         ad:be:e1:11:22:a1:dc:75:69:97:06:ba:10:cd:65:ed:aa:d1:
         28:3e:67:1d:95:16:d0:20:5e:83:6b:40:5a:15:6c:34:b7:0d:
         8a:bb:0f:20:73:ce:c0:2c:ce:c2:ce:68:df:c8:62:11:12:c6:
         61:87:7e:97:dd:3d:69:eb:0d:6b:07:35:4e:44:8d:d9:7a:d6:
         2c:6b:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----