Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          +2CgAkLd/pzggS8mT04+mlbrTbpuAR2gwmH3NF9YAxY=
Subject key identifier:   21:14:77:D7:25:64:06:B8:B2:ED:CD:1A:76:65:94:70:79:D3:7D:0F
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       01962DF3EB2AA825DE964F1699CE882FFD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          0FAB
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: B4orFeIWC5coFv0DXPFWV6bX2TA.roa (hash: QvvdOu/flX7Du+SLiSNrRfEvw1jIp3bm67X+T+zP1MI=)
                          2: OjOSiVLO01NbQEy7fCWWb1dleI0.roa (hash: 1R3ScnGJJHnWlOylikh2Ppg5Q/7g7edL0CQoeTE72rs=)
                          3: TqGaZ21iO7PpNxKcdbTDvHNWI5w.roa (hash: TA9bnT0BdnbGAPvTvVqQo9iBMjThLUbF7MsSEuMnyLI=)
                          4: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: 4LaxcYS9K5Z0Z/dcLBhbG6DY2qlClCl+tjhosGb0jOA=)
                          5: tNVymaqEMA53YlfZDB8JJ8aafJI.roa (hash: dVF8IWQWb1ioPcMe+UkAzFVliOSu7mCkktpnx4UARn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:2a:a8:25:de:96:4f:16:99:ce:88:2f:fd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=211477d7256406b8b2edcd1a7665947079d37d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:44:59:4f:79:2e:81:b4:ab:2d:a0:9f:6b:
                    4a:7c:bd:dc:95:30:03:9d:48:91:7e:a4:8a:30:cb:
                    c9:a5:1a:33:fe:e5:88:c5:4c:b5:12:40:6b:ed:be:
                    17:c7:5e:72:84:fc:6a:0a:75:26:61:d9:97:da:df:
                    4e:16:c8:d8:e0:71:d1:a1:95:d6:1b:75:37:dd:de:
                    cf:85:4a:87:c1:8e:47:79:08:16:2e:38:ef:02:71:
                    ce:93:03:ee:cc:13:cf:ad:1f:cd:28:2f:0f:b1:2d:
                    ca:7c:55:89:2f:2e:f7:a1:b9:9b:e5:6e:75:dc:da:
                    6a:bd:da:49:78:79:2c:92:1a:22:e1:0e:6a:1e:81:
                    f9:74:94:d2:a2:b8:aa:71:15:01:8f:a5:31:3c:cb:
                    99:79:f1:74:6a:55:f6:3e:24:7f:55:e1:b2:a9:c3:
                    07:e2:c2:8d:29:b3:17:65:09:b4:ba:60:cf:44:5c:
                    c4:fe:55:9a:f4:65:05:79:aa:93:73:c8:f1:76:2a:
                    44:23:43:d8:5b:a8:bd:ac:33:31:b2:81:ea:e1:f4:
                    65:f4:f1:52:24:e8:e4:25:a3:29:55:d8:ae:7f:42:
                    29:31:1c:eb:ae:f7:d8:91:e2:54:24:9d:b8:1c:72:
                    4c:aa:fc:7f:25:9a:f7:e9:92:c7:45:6b:85:64:ae:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:14:77:D7:25:64:06:B8:B2:ED:CD:1A:76:65:94:70:79:D3:7D:0F
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:5c:ec:ec:bf:30:06:81:02:b8:16:b9:8e:a6:c7:7e:57:
         84:60:9b:dd:63:c2:26:f9:0f:64:9b:b0:b0:5a:23:39:b5:23:
         ba:49:fe:ed:d9:1f:8e:b7:c7:68:a9:14:fd:3a:69:6b:58:1b:
         7c:34:7c:94:0a:d2:38:09:8c:ab:f7:ed:ae:04:d1:2d:31:f4:
         f2:f7:4a:91:f7:ac:10:21:cd:6a:47:0f:e9:ff:86:23:8e:72:
         cc:5b:96:8c:0b:7a:d3:9d:f9:78:7a:28:52:12:4f:61:ad:42:
         9f:25:d1:51:5e:d1:79:75:78:5f:6a:55:5b:7a:22:92:d2:86:
         d7:f8:23:bf:57:62:68:17:b4:94:a7:af:f8:c4:e0:ef:19:4b:
         80:a7:8b:a8:7f:78:cd:c4:26:b2:67:30:1d:f6:fa:42:d3:c5:
         07:45:f1:75:01:38:a5:59:9b:30:87:e3:7a:d1:77:dc:39:6a:
         f3:4f:d1:19:b3:d7:90:94:aa:6c:33:31:9f:78:6a:2a:fb:cb:
         19:13:3b:37:19:c1:88:dd:fc:a4:95:68:5a:ad:fc:41:27:44:
         27:5d:31:c0:8e:20:ea:9e:bd:1d:5b:db:69:0c:78:09:4a:8f:
         fe:77:99:39:d8:36:43:38:59:c3:0a:f6:e4:89:2f:6c:c2:15:
         22:ed:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----