Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File:                     EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier:          IACQFqJZVfMxzb99bFc583ETAUNLCOZ0bkInfKXaclY=
Subject key identifier:   33:71:70:5E:33:55:8E:C4:7E:43:B4:0D:0B:90:57:1A:59:C7:41:34
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer:       /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial:       01962E2AED5B36EBA0901C5E4B05AA3C2B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number:          0430
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
                          2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: CYkXNhYd2fByzm3LyM+rJsfaLYjTzGCXTpKDDd01DbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:5b:36:eb:a0:90:1c:5e:4b:05:aa:3c:2b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=3371705e33558ec47e43b40d0b90571a59c74134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:47:9b:dc:3d:05:0e:29:c3:55:46:6d:d1:
                    5a:30:e5:fc:19:8c:25:b4:13:4e:1c:ce:d9:07:3c:
                    dc:4e:15:a1:20:bd:4c:dc:51:a5:1a:5c:e4:85:d6:
                    ef:43:d1:b4:4a:43:b6:bb:90:44:bf:c4:2b:dc:25:
                    60:c6:87:c5:f1:0c:c3:ef:4e:60:6e:4e:97:09:59:
                    e5:26:a3:b8:8f:02:f8:5b:bb:f1:ee:90:e7:0f:38:
                    46:01:2e:c8:72:30:44:0e:2f:14:d4:5f:b1:2b:b9:
                    1d:25:af:9d:f6:70:20:a6:b2:5b:35:c5:42:0c:0c:
                    51:63:3f:d6:f8:1b:b0:3c:22:ee:0d:cb:bc:39:f0:
                    de:9d:74:3f:7e:e3:f5:0d:f5:e7:de:2c:ca:d5:3d:
                    25:e9:9b:85:05:75:78:8a:86:b4:99:ba:40:c3:fd:
                    c9:c2:9f:b6:b7:58:70:f5:ef:4c:2f:af:b0:0c:a9:
                    0b:8d:69:42:aa:02:8d:61:1f:d0:d5:d9:ec:95:ab:
                    2e:49:ee:c7:c3:fb:72:19:c2:c5:72:9e:ba:3b:19:
                    2e:3e:a5:40:f6:60:05:13:b5:97:e6:41:cd:8c:7c:
                    5b:97:94:9f:09:e0:74:65:2c:3f:46:b3:4b:90:8f:
                    58:ac:f3:29:ec:14:07:27:98:ee:1d:67:81:5a:55:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:70:5E:33:55:8E:C4:7E:43:B4:0D:0B:90:57:1A:59:C7:41:34
            X509v3 Authority Key Identifier:
                keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:b8:c8:b9:37:89:8c:c0:5f:c2:39:15:1c:82:96:a3:d1:
         39:8f:65:e9:0a:a9:53:dc:0a:c1:44:82:39:26:ad:69:71:ae:
         d2:77:d6:d2:e7:b9:bb:03:1b:21:35:21:e3:0b:1f:a9:03:bb:
         9d:98:6d:2b:cd:2b:5b:a4:6d:f5:84:e5:1e:cd:8e:0c:17:c4:
         2f:9e:b3:56:03:9a:25:11:ff:26:d1:fb:b4:7b:36:6d:a7:8e:
         3f:a0:4d:09:46:df:4a:74:13:2d:04:40:c4:6e:f5:1d:68:85:
         f4:e3:f2:db:de:21:46:9b:4c:81:21:08:03:af:a2:14:01:5b:
         7c:64:91:a2:19:a7:e6:fc:d7:1a:7b:ac:7d:db:8a:08:57:05:
         15:77:dd:cf:fb:c8:f8:5f:00:4b:31:23:c2:10:ba:4d:88:c1:
         86:fc:f5:83:f1:e7:6e:39:2e:e8:1f:2b:df:f8:fc:30:4e:4d:
         0e:99:36:68:73:f9:de:0a:bb:18:55:ab:61:ba:0a:cf:a5:5a:
         a7:e8:2b:e0:a2:79:c0:f8:4e:40:0b:cc:4a:ff:59:cb:19:c8:
         c5:92:4f:5a:d9:4a:be:1b:ba:2e:8e:4d:a6:7c:23:6e:81:9b:
         68:a4:37:48:db:a6:9d:fb:92:db:54:f6:bb:2c:7a:f3:10:33:
         a7:ec:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----