Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File:                     54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier:          r7h36zWJYp/CJt5NoiKgSBJxUUcU52f9wC0Ru77n+jY=
Subject key identifier:   12:8E:2C:93:B0:F8:B0:DE:EC:E3:84:CC:D3:D9:8B:09:91:22:42:41
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer:       /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial:       01962F3D564AA99AEAEF82976DBBD67D259D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number:          0847
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: /L/nPan8Tyu1d5xM3nYz+4xztoF0KphY3zFSBe/TBEU=)
                          2: EZYeVV1sSE-2JpbNlwV7wPbYnOo.roa (hash: ikr2sxni9DwwzkUepDYlmJ4xAXRqZ6YMknDRjY0uwRw=)
                          3: zFb9es3uXkPMd-ugsb3acKq2kWs.roa (hash: CpgoliFvyxru2zXx6gfrBhmQolzdlTSAa5FPVi8Uo/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:4a:a9:9a:ea:ef:82:97:6d:bb:d6:7d:25:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=128e2c93b0f8b0deece384ccd3d98b0991224241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:75:f7:40:5e:af:b8:e9:7b:52:9a:35:14:
                    85:65:30:6f:32:a3:53:3e:4a:9b:2d:13:ca:fc:6f:
                    db:1a:07:7b:aa:8b:cb:dd:c3:6a:86:46:85:b4:74:
                    28:45:aa:e5:f8:e3:c2:5c:c4:ee:e3:1c:9c:01:5a:
                    6f:d0:a3:0a:aa:3b:90:52:1b:2c:dc:07:20:64:6e:
                    75:f3:8d:5a:03:cd:ef:eb:96:04:28:e3:90:ea:71:
                    97:04:31:fe:64:ed:6c:2a:37:9f:39:1b:f8:33:58:
                    bd:00:8d:af:19:c8:f8:4c:ec:ee:7a:e5:dd:43:27:
                    e8:a5:75:66:cd:e1:fa:f2:4d:f3:ce:cc:da:18:f0:
                    81:53:81:11:8d:c7:ea:a2:80:03:6c:ec:a0:39:03:
                    ce:c2:13:27:79:2c:1a:c5:3f:d1:5d:34:0a:80:0e:
                    cd:ee:d8:ef:82:e0:70:b0:3e:68:e4:72:71:4d:72:
                    dd:3f:0b:af:af:69:77:75:6f:b1:a9:00:2e:ea:98:
                    e9:3f:af:6b:fe:f7:ba:da:db:3a:44:26:f5:7f:2f:
                    2c:df:d5:b6:b9:d2:b3:a8:f9:29:8f:2a:8e:29:33:
                    50:88:a7:8b:a9:3b:61:f1:e3:76:76:0a:8f:37:b1:
                    1c:8d:34:f2:bf:f3:bf:07:cb:c8:63:40:a1:b0:6f:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:2C:93:B0:F8:B0:DE:EC:E3:84:CC:D3:D9:8B:09:91:22:42:41
            X509v3 Authority Key Identifier:
                keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:8e:25:66:f6:3a:f2:4b:d6:1e:63:d9:56:50:09:c7:64:
         02:2e:2a:18:2b:86:5b:e0:80:04:3f:c7:58:7b:6b:82:e4:f7:
         48:d1:5a:f3:fa:b0:0c:b7:dc:a0:61:a9:13:bf:a5:5d:5b:a8:
         cb:b8:17:f9:cc:28:2f:ea:4c:a0:e4:17:a6:fa:d4:16:21:78:
         0e:42:80:0b:e1:61:8f:50:1e:4e:90:e6:21:f6:fb:ab:93:cc:
         82:71:d6:d7:e9:15:29:da:9c:e5:cb:71:8b:83:91:fc:b9:16:
         6e:21:3b:32:7a:ad:b2:fc:c7:8a:1a:5b:48:ca:6e:ca:3f:90:
         cb:d9:b3:da:8a:9f:d2:04:b1:2b:66:0f:03:3d:2f:01:51:8c:
         eb:31:f5:41:d1:e8:e3:21:78:d5:d6:25:10:c1:ed:a3:38:c8:
         ce:02:1d:e6:a2:37:c1:22:b0:d6:f7:92:08:2e:93:d3:46:8d:
         9f:37:34:a6:08:a0:55:ef:11:95:aa:50:f5:da:45:95:dc:77:
         43:b7:5e:e4:91:f9:18:fb:32:35:b0:5f:bf:d4:d2:29:2d:70:
         09:85:52:28:ed:ff:09:4a:f8:cd:a1:c5:57:36:a4:d8:89:95:
         00:74:89:b1:94:90:ee:0f:6b:4b:fd:fd:9e:99:ae:73:ad:53:
         fe:28:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----