Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          7BgbNDqWJeBe/+ERVYDTuaZ5uH/HKUCsxp9j7aV0ZVs=
Subject key identifier:   73:F8:80:14:24:AD:CF:4C:BF:24:FA:B8:07:91:61:C6:D9:3D:3F:A1
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       01962DF43413BF010275B4F82C3D68F403B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=)
                          2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: Hh/POxB5p2YO5Lq21db/aHMWgBktp83xVkrL9KIX/mo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:13:bf:01:02:75:b4:f8:2c:3d:68:f4:03:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=73f8801424adcf4cbf24fab8079161c6d93d3fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:97:58:08:47:71:9f:e5:af:be:8f:c4:d6:
                    46:c1:b8:01:7c:49:cb:a4:cd:04:39:a8:f3:9e:39:
                    00:58:25:04:f2:d8:02:7f:10:7c:1a:7d:67:a0:05:
                    f4:27:37:56:4a:99:12:1e:60:74:4d:84:49:2c:3d:
                    2a:93:68:05:67:7d:18:a4:0a:8f:d2:7e:4d:d4:54:
                    96:c0:02:78:97:b3:3a:ca:f1:3e:d8:05:39:4f:bb:
                    60:a7:04:2f:69:09:45:da:ef:e8:10:d2:db:38:4d:
                    ff:7c:95:6d:b6:19:f6:74:0e:95:3e:55:8b:dd:57:
                    46:cc:49:6e:81:dc:ad:d8:c2:5d:38:0a:5e:a2:3e:
                    f9:04:77:60:c6:90:2b:e4:41:21:17:17:17:72:a1:
                    6d:6f:e0:fd:3d:f1:a1:dc:6b:d4:8d:1b:3b:35:33:
                    75:b7:fa:54:22:d3:06:24:8d:c2:0c:c9:c1:04:14:
                    a2:49:27:08:fe:88:d1:9c:08:72:51:cb:45:45:5a:
                    1e:b9:5b:ad:90:b0:eb:5c:15:e3:ae:e0:9d:61:44:
                    1c:35:2b:1b:fb:c1:c5:70:f8:9c:a9:f3:7e:14:e7:
                    76:a5:45:ee:6a:71:5a:ff:7f:9a:e4:88:5a:ab:92:
                    f8:d9:7e:1c:3d:5b:18:14:e8:81:2b:45:7c:9a:a0:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:80:14:24:AD:CF:4C:BF:24:FA:B8:07:91:61:C6:D9:3D:3F:A1
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:90:d1:ed:c9:6e:27:27:ab:39:53:0c:4f:ac:99:85:bb:7f:
         71:f6:40:0b:6c:af:2a:cf:c9:8c:d0:7a:20:4d:86:20:67:2a:
         fb:ed:99:f1:b3:12:c7:d9:85:a2:e5:96:fd:a2:1b:9f:b8:23:
         d2:9f:13:b0:0d:46:07:1a:60:36:7e:e6:c7:08:38:65:62:19:
         cb:b8:2c:99:c4:58:5a:d0:39:fd:d0:f6:0c:51:d8:13:ea:23:
         3a:fe:4b:1a:ed:1d:d3:61:df:85:82:19:43:c8:e6:c9:a1:15:
         2d:84:7b:29:09:0a:76:62:b5:16:6e:7e:4c:39:11:ef:13:9b:
         82:2f:9d:b7:1b:b6:f6:2f:fe:51:6c:ac:c8:f4:ae:1a:fd:09:
         a9:cd:77:59:6f:9c:5b:51:56:0d:61:d4:6d:1c:99:bc:a7:02:
         06:bc:5d:0b:25:11:93:b8:f5:f9:c3:5b:bd:61:8a:6b:34:93:
         e4:2f:03:bf:d0:04:96:9c:8c:13:3d:c1:ae:38:65:fb:df:4a:
         00:e5:75:82:35:2f:1d:0c:8f:c4:5c:78:2e:46:c2:6f:24:92:
         b3:62:63:b9:f6:dc:08:8a:a7:d5:b8:82:fa:7c:1f:45:32:3e:
         e2:48:34:4c:8f:71:f1:05:28:1c:ee:03:60:a4:11:bd:d1:9f:
         2f:c0:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----