Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          vpTtPPDVl8a5R1FVW5+3E3xJ7admsz6O4rHZT/t1zIo=
Subject key identifier:   6B:F3:35:EC:83:74:EF:C8:4D:77:B2:0C:77:09:72:6E:F4:16:E6:13
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       01962F06C6156CA236AB25C7E37DC53F18E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0994
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
                          2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: eT6YdkpHbg6h1De1FRSfUCTiS3lardvaJvVKlsCQXwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:15:6c:a2:36:ab:25:c7:e3:7d:c5:3f:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=6bf335ec8374efc84d77b20c7709726ef416e613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:ac:5c:eb:d7:5b:e8:f3:c1:fa:58:c8:64:
                    94:f2:f2:40:a3:c1:84:77:83:d5:6f:0a:19:f5:be:
                    05:d2:99:b2:f6:9b:3a:10:79:2c:fd:d5:1e:f8:e4:
                    95:07:66:cc:7f:b2:04:0e:84:2d:78:99:ec:ce:33:
                    a1:25:ba:7a:e5:d3:0e:48:c1:b3:be:6a:47:8e:0b:
                    db:f4:b3:48:3f:05:7c:c2:25:4b:22:ba:51:41:17:
                    c1:b5:08:75:52:33:ec:28:e5:ab:c4:68:fd:bb:62:
                    6d:d1:74:31:eb:42:fa:ea:a9:a8:e8:d0:6a:94:00:
                    eb:fe:65:12:85:cb:ac:43:41:6f:a2:57:ce:cf:a6:
                    72:5b:13:92:d4:4b:ba:1c:8a:e3:61:6d:8b:40:7f:
                    07:2a:eb:44:04:89:e4:5c:a2:09:a5:83:82:90:65:
                    68:e2:25:54:e4:01:57:38:5a:bd:82:07:b7:87:b6:
                    11:03:0c:dc:a6:db:03:d5:a1:ce:ca:7a:ff:2e:32:
                    a5:d6:9c:67:ae:ca:b9:9d:65:b5:16:0c:1d:b2:d3:
                    cb:ac:c3:b7:ab:5f:22:49:e2:69:a8:88:22:50:f2:
                    2c:54:b1:93:89:37:6b:1a:77:45:d7:3a:dd:0c:ec:
                    5f:f2:76:b0:bc:2e:0c:d6:18:83:de:bf:cd:c5:47:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:35:EC:83:74:EF:C8:4D:77:B2:0C:77:09:72:6E:F4:16:E6:13
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:b9:32:ad:e6:cd:5f:b3:be:48:12:53:97:a5:87:dc:df:
         8c:26:c2:8d:41:a2:da:88:13:ad:f5:b8:8e:4a:a0:70:f4:43:
         b5:e4:ed:8a:68:3a:cc:f4:ad:bb:ca:dd:e7:58:1e:97:00:67:
         3a:62:56:91:ad:83:cf:b2:80:2e:8b:16:7d:0f:b5:76:3d:24:
         ad:61:a0:c4:66:5f:65:eb:11:e8:85:1c:77:f4:39:08:22:99:
         14:c0:eb:e2:74:ed:65:e3:73:96:01:8b:7b:bc:5d:d2:d8:8c:
         d9:d5:b0:59:c1:ee:c4:60:3e:4d:07:53:6a:21:56:28:94:59:
         08:8f:c4:a9:b1:a5:d8:78:11:7c:88:52:0a:39:c9:3e:d4:77:
         74:af:96:50:89:68:48:dd:c0:19:75:1d:f5:38:50:a9:1a:06:
         fc:a0:d7:a9:50:7f:d3:d9:c3:1a:90:6b:72:45:b1:24:b7:8d:
         4f:ad:9d:a4:6b:bb:78:dc:1a:90:de:11:46:c4:25:1b:f2:3d:
         1e:b1:e3:b3:86:37:99:bb:4f:86:b6:ef:bd:d6:c0:b6:eb:05:
         4a:44:8d:be:71:5c:a0:b2:89:13:8d:fc:be:e9:6d:0a:21:6a:
         b0:6a:50:ed:16:e5:0f:00:98:5a:39:dd:8e:79:63:af:66:d9:
         41:0a:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----