Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File:                     EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier:          zJvOdxuAb9wfNJZ+FhNHRoK+cuumOYdztlCGVAoAdCw=
Subject key identifier:   FA:FF:C0:B9:F1:80:94:96:B0:11:90:11:E7:4E:BA:E1:D6:47:AA:99
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer:       /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial:       01962F3DB41CAFFFAF8E3DC4D6362C5EB40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number:          10FD
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: m426tsXkJu/3BtsFzJGuYOE5T2b9m0BH3UVKb3U1fNY=)
                          2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:1c:af:ff:af:8e:3d:c4:d6:36:2c:5e:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=faffc0b9f1809496b0119011e74ebae1d647aa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:fd:83:86:2f:f0:b4:42:d7:3e:40:13:08:
                    83:1d:0e:e9:d4:ad:e4:b8:4c:66:ff:64:05:36:9a:
                    21:5f:c0:1d:5c:90:ff:78:cc:81:c3:cb:97:de:e7:
                    83:b2:6b:2d:c5:6b:0f:f1:8a:6c:cf:65:82:b7:12:
                    ce:e2:36:ad:74:13:69:a8:df:32:4f:91:0c:4c:38:
                    0f:e8:3f:37:34:a9:11:14:60:2d:a0:5e:91:1f:07:
                    d6:05:1a:70:84:4a:4e:ab:90:e1:46:f7:c8:fc:b5:
                    b2:4b:dc:61:c6:84:93:83:75:09:f9:ba:76:af:c7:
                    ea:f9:5a:58:7f:e2:2b:13:87:c2:8e:7b:90:58:b5:
                    eb:13:db:e1:2c:7f:0d:e7:1c:fc:b2:62:01:d1:22:
                    e4:5e:20:e0:73:0b:8e:cb:b2:6c:df:34:4c:77:b8:
                    96:74:55:13:5b:1e:ed:6d:9e:03:04:ee:66:8c:4c:
                    84:b3:7d:12:fe:97:42:2f:83:6d:3f:4c:61:85:a0:
                    7c:1e:ab:6d:6d:5f:f9:a0:8e:2a:23:b4:e3:df:49:
                    2b:0f:72:7d:d8:28:fb:b6:ef:6a:3f:39:5c:89:6a:
                    22:bf:55:23:ba:db:39:f2:e2:9f:6f:02:74:40:02:
                    43:50:58:1e:d5:23:81:7a:ac:49:2a:b6:42:0c:6b:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:C0:B9:F1:80:94:96:B0:11:90:11:E7:4E:BA:E1:D6:47:AA:99
            X509v3 Authority Key Identifier:
                keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:a9:42:5a:a6:00:d9:d6:a7:5a:99:1e:cc:26:77:bd:71:
         04:73:03:29:fc:48:ae:17:ae:51:9d:22:25:ee:31:f8:a8:41:
         81:63:f0:49:70:c9:ec:40:38:9e:56:d2:50:d0:12:7d:4f:0c:
         7a:2f:78:ef:4b:70:c5:0e:c1:8e:ec:7f:74:a6:1c:06:73:dd:
         41:b7:46:f6:62:46:a2:9a:6d:8c:f0:1e:ac:c7:36:94:55:30:
         cc:45:b1:78:ba:70:f9:21:de:91:73:b4:7c:ff:b0:4a:08:0e:
         6e:31:3a:0a:26:3f:da:97:0b:a7:40:2b:76:68:d0:3c:00:cd:
         68:6b:94:85:dd:c9:1a:4b:fc:fe:0b:12:a6:4b:df:1b:60:5e:
         dd:4d:f8:13:38:46:50:30:b3:25:6e:52:b6:0f:27:10:98:d0:
         30:29:4a:30:06:b8:ab:59:2a:d6:6e:dc:25:32:14:90:55:94:
         fa:51:e6:22:a2:ee:17:b6:eb:73:d6:7e:e9:51:9f:b2:85:1b:
         73:17:6a:f8:e0:0d:3c:48:41:13:c4:70:7c:e7:65:ec:ec:d2:
         0a:c4:11:7d:26:91:6c:67:d0:38:6a:5e:ba:d6:86:9e:87:b7:
         ff:48:75:0d:d7:64:47:ca:00:29:da:0e:a9:b1:99:7f:f0:7f:
         1f:15:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----