Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          mCr+Q8DsJxwbrYT6ixJ7Hd1D93iJY++ASDCjuQIvox0=
Subject key identifier:   63:19:52:06:D0:60:D4:65:AE:B4:89:C4:2C:68:D9:52:7D:33:A8:65
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       01962F7492B03E8B22474EF9E3882CCE1F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          091E
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: Bm+9zuj+Twu5aySEAJKPb82DlQy07tbBBVMlX0FfnRI=)
                          2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:b0:3e:8b:22:47:4e:f9:e3:88:2c:ce:1f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=63195206d060d465aeb489c42c68d9527d33a865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:14:66:de:9c:fa:ea:68:c2:03:38:4d:ac:
                    76:1a:c4:60:d8:b0:c9:88:fb:73:2f:63:d7:49:e9:
                    c4:86:9a:c8:58:e1:84:ec:13:76:58:c6:0e:83:7c:
                    e5:38:87:34:12:7d:3a:3a:a6:19:8d:61:3c:20:33:
                    1a:59:6c:fe:50:9f:80:09:0a:d3:d6:b5:6a:f1:52:
                    df:46:69:43:7b:58:74:8a:25:33:0c:e8:75:eb:a2:
                    c2:7e:25:c4:ab:87:61:77:30:54:f9:a8:fd:e9:af:
                    1d:67:66:68:69:3a:fc:aa:fc:f2:a4:e9:c5:f4:eb:
                    f3:30:ff:64:3e:6c:02:bb:26:ca:29:fd:7f:06:c3:
                    51:38:e1:30:a7:e5:2a:be:66:83:14:bd:a0:01:5e:
                    aa:45:3b:80:c2:4c:96:ff:b7:50:e1:eb:16:b0:58:
                    70:50:9a:60:4a:3f:67:73:6a:53:3f:45:64:76:c3:
                    c0:37:3c:4e:c8:ec:93:d4:af:00:59:fa:a4:a7:ab:
                    d2:56:1b:ed:70:0a:44:64:bd:70:25:df:69:d5:5e:
                    55:70:8f:6e:11:ff:2a:a9:96:ce:95:0d:93:03:e9:
                    c9:09:fb:d4:1b:fb:81:0c:88:24:7d:2d:c6:b3:b5:
                    41:60:1e:cf:29:fc:05:f9:ce:82:e0:78:0f:21:a0:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:19:52:06:D0:60:D4:65:AE:B4:89:C4:2C:68:D9:52:7D:33:A8:65
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:56:fa:45:59:d1:13:d7:a2:ed:07:cc:66:64:10:01:b2:ae:
         1e:61:db:31:e2:e1:00:06:93:bb:5b:5a:20:48:58:4d:e3:ad:
         bc:aa:d9:2b:6c:2b:18:33:c8:66:7d:16:c4:c4:ac:85:5c:a6:
         60:27:aa:1f:f1:f4:36:ae:4e:87:ad:2a:2c:02:a3:07:10:3d:
         e2:21:43:fe:a7:1a:8e:50:05:dd:8b:6a:70:56:8d:de:4f:9c:
         90:b6:ef:97:61:76:3f:52:41:2a:fa:82:fb:dd:a2:10:e3:44:
         c1:e9:e0:0e:a8:d6:e2:e9:66:1c:94:d3:c4:9a:c4:55:0c:1c:
         c1:49:3c:73:11:c4:cd:67:a0:26:2e:b1:1a:f6:6f:91:82:ad:
         51:50:01:d3:c1:0e:75:2a:4d:29:06:86:15:45:92:f2:6e:10:
         60:76:23:c6:e3:4b:9c:61:79:48:4f:ac:44:2f:47:af:6c:7e:
         3d:5b:c2:8b:7f:c1:50:bc:36:f5:83:27:70:2b:2a:aa:7f:a7:
         21:fd:6d:ce:7d:e4:1a:f7:15:84:f1:1a:88:9e:88:a0:2f:76:
         53:fb:a3:95:3f:48:b6:54:86:76:59:72:63:15:d6:be:74:9f:
         9f:ed:6d:3b:24:98:31:9f:8f:e3:d9:e7:8b:48:8b:1e:d6:80:
         a3:97:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----