Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File:                     eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier:          ao/FeZZzmD6SwwNSlBrTx6C/zCXeFpvKwBJNqt4lPAY=
Subject key identifier:   34:12:2A:06:05:D1:15:90:9D:8A:AD:5D:1F:5D:BB:A6:88:46:8B:5F
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer:       /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial:       01962E2B422B99F1ABE7C037EFB2B7E83D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number:          1207
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
                          2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: QaUlXEoAxru1X5N5+90BRaEF3T6QGCjxnPAHZI/Yjhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:2b:99:f1:ab:e7:c0:37:ef:b2:b7:e8:3d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=34122a0605d115909d8aad5d1f5dbba688468b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:5a:24:ed:d2:00:4c:c4:51:8f:a0:bd:66:
                    fd:15:80:75:f1:b9:d7:d9:c8:e1:3b:68:be:40:df:
                    b3:b4:58:30:fd:91:c4:b2:86:a0:9f:58:83:33:1c:
                    27:12:f0:37:01:2f:98:98:78:14:b9:11:a6:92:6a:
                    ef:19:ff:54:fe:a3:58:fd:ec:f6:7c:e8:f6:ca:a5:
                    e9:92:d9:6a:8f:0f:3a:6a:4b:36:de:1f:10:f6:c4:
                    ec:1d:28:e0:01:84:b9:3b:96:d6:0c:47:a1:a8:cb:
                    17:54:ee:26:78:3f:41:16:4c:2f:cd:3d:f8:5b:b9:
                    04:c5:29:92:23:0a:d4:94:9e:20:ad:64:3a:d7:22:
                    20:ba:be:5c:2f:71:56:ef:a0:27:50:ed:cd:90:a2:
                    06:d2:10:aa:c2:a2:33:1b:70:71:79:4f:b3:18:d6:
                    24:d9:b8:ad:89:72:43:dc:56:c3:1e:bd:28:14:bd:
                    3f:8e:86:32:e9:55:59:6a:3b:be:4a:58:68:78:35:
                    3f:8d:f9:d7:68:17:38:a0:fc:57:72:2e:69:a0:f5:
                    30:60:63:1c:57:41:3f:3a:44:97:8a:aa:27:3e:15:
                    36:51:61:10:76:18:78:38:85:0f:1e:b3:7c:ea:72:
                    4f:e4:d0:55:1c:cb:dd:9b:43:e3:35:6f:fc:53:b2:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:2A:06:05:D1:15:90:9D:8A:AD:5D:1F:5D:BB:A6:88:46:8B:5F
            X509v3 Authority Key Identifier:
                keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:7d:4a:bf:e4:75:30:fc:c2:f6:4a:ce:79:a8:0f:c4:6f:
         5f:55:d1:0e:c9:a6:42:bf:74:30:cb:3e:6e:9a:50:2a:6d:cb:
         8d:ee:57:fd:7c:a0:84:09:7f:ff:2b:fa:b2:87:78:fc:05:c2:
         52:23:82:a5:cf:83:9c:64:67:fc:12:66:63:92:06:bb:9a:3e:
         4d:1e:44:4d:37:c7:ee:42:7b:07:26:4e:d7:1d:4c:6a:44:ce:
         96:db:fa:96:92:17:58:2d:bf:61:b4:d9:10:5e:78:ea:d6:14:
         4d:2c:33:6d:3c:52:1c:f5:b9:56:8d:36:75:5b:a9:4d:11:ab:
         48:74:6d:31:b6:5f:60:59:c7:45:94:b1:e3:9f:4c:9e:4b:c0:
         a6:38:25:1b:b6:8e:3c:60:ef:20:f5:c4:c3:69:57:1f:17:9e:
         83:21:60:b8:ee:67:83:56:ae:36:f5:ab:1b:f6:d9:dc:44:51:
         71:5f:e6:da:09:8c:0d:15:3e:52:f2:0f:0b:0f:3c:6e:78:0f:
         01:d9:47:91:a7:21:4c:b4:e7:bf:93:ec:b8:23:5e:7e:6e:57:
         15:8d:fb:28:d0:a2:7f:ad:bd:5a:25:8e:50:4b:89:9d:b2:d7:
         93:9f:ec:e9:da:1f:89:f1:1e:f3:78:ce:81:4c:93:b0:2d:ce:
         27:f4:be:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0IrmfGr58A377K36D0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0
ZWI3YjkwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
EygzNDEyMmEwNjA1ZDExNTkwOWQ4YWFkNWQxZjVkYmJhNjg4NDY4YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc9aJO3SAEzEUY+gvWb9FYB18bnX
2cjhO2i+QN+ztFgw/ZHEsoagn1iDMxwnEvA3AS+YmHgUuRGmkmrvGf9U/qNY/ez2
fOj2yqXpktlqjw86aks23h8Q9sTsHSjgAYS5O5bWDEehqMsXVO4meD9BFkwvzT34
W7kExSmSIwrUlJ4grWQ61yIgur5cL3FW76AnUO3NkKIG0hCqwqIzG3BxeU+zGNYk
2bitiXJD3FbDHr0oFL0/joYy6VVZaju+SlhoeDU/jfnXaBc4oPxXci5poPUwYGMc
V0E/OkSXiqonPhU2UWEQdhh4OIUPHrN86nJP5NBVHMvdm0PjNW/8U7Je6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQSKgYF0RWQnYqtXR9du6aIRotfMB8GA1UdIwQY
MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt
NzU2OGExMGRmNDQzLzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz
LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq19Sr/k
dTD8wvZKznmoD8RvX1XRDsmmQr90MMs+bppQKm3Lje5X/XyghAl//yv6sod4/AXC
UiOCpc+DnGRn/BJmY5IGu5o+TR5ETTfH7kJ7ByZO1x1MakTOltv6lpIXWC2/YbTZ
EF546tYUTSwzbTxSHPW5Vo02dVupTRGrSHRtMbZfYFnHRZSx459MnkvApjglG7aO
PGDvIPXEw2lXHxeegyFguO5ng1auNvWrG/bZ3ERRcV/m2gmMDRU+UvIPCw88bngP
AdlHkachTLTnv5PsuCNefm5XFY37KNCif629WiWOUEuJnbLXk5/s6dofifEe83jO
gUyTsC3OJ/S+3w==
-----END CERTIFICATE-----