Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          ouPgWll7BDOqQ1jvmt26IHDD/X05ExtoLy5jX4etPFU=
Subject key identifier:   53:CF:79:30:26:50:65:FE:AE:84:60:01:43:C5:3B:3D:3A:E7:CA:45
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       01962E9887FA7D7724DFF3AEAAEB55F5CA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          1392
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: N9wwwHITjbootWPW9fPSM4odFJSkdDONXbPM9R1FO+s=)
                          2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:fa:7d:77:24:df:f3:ae:aa:eb:55:f5:ca:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=53cf7930265065feae84600143c53b3d3ae7ca45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:ec:8a:f5:51:5b:75:27:cf:95:93:d8:4f:
                    19:2f:16:62:b6:97:8a:a8:0a:e0:8f:8c:34:9e:75:
                    aa:1e:1c:7b:74:24:f2:4c:e7:ce:dd:8e:30:b2:a4:
                    68:26:e1:96:b3:1a:5e:e1:92:b1:ca:a4:ce:13:a9:
                    a6:3c:ec:30:44:a7:21:36:d6:96:f6:76:9d:43:15:
                    3b:f1:6e:cf:35:4e:bc:1a:25:73:8f:d8:66:40:d6:
                    fe:33:df:97:22:7a:f7:1e:4f:b5:7a:20:1d:9a:4a:
                    ff:1f:cc:69:74:ef:e6:db:2e:61:8b:5b:7a:2c:be:
                    a9:28:74:70:8d:14:6c:9e:03:85:95:ab:80:b9:64:
                    90:41:51:2d:94:74:7c:1e:28:55:35:f1:7d:09:db:
                    e4:bb:d4:e0:0d:a0:ee:cf:9b:af:7a:bc:25:52:9f:
                    2b:f4:f6:f1:08:77:41:76:55:fd:a7:26:e4:45:a1:
                    8a:1d:fa:39:15:a7:1e:04:90:43:67:f4:50:2d:ed:
                    57:90:3f:a9:08:d7:f1:49:b9:b8:f9:6c:ac:fd:a8:
                    9c:db:d1:22:85:c4:98:5b:a6:81:2e:c3:91:ae:6e:
                    9a:e6:b1:2b:a0:9b:3e:43:19:5e:b2:93:8a:fb:d7:
                    79:a9:99:5a:25:aa:e4:dc:4a:0c:3f:2b:63:ce:4b:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CF:79:30:26:50:65:FE:AE:84:60:01:43:C5:3B:3D:3A:E7:CA:45
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:2b:f0:f0:ad:9e:5b:89:82:3a:34:98:8b:f2:c0:9c:55:
         75:0a:34:a1:0a:3c:e5:03:84:05:ea:c7:7b:db:8e:ca:1c:98:
         e4:2c:17:38:e2:83:a0:5a:14:8d:fd:57:a0:66:57:0a:de:c4:
         91:5e:13:3f:b3:2d:0b:70:3a:77:97:fa:36:58:5b:35:f6:57:
         c4:40:c1:d7:ac:81:41:4a:42:6f:10:f3:e4:a7:b4:5c:03:82:
         64:12:99:ba:b0:39:0c:16:86:15:00:c9:4e:7f:41:cb:9c:b4:
         52:7d:5d:da:a2:3d:a8:26:1f:3a:d1:91:1e:38:cd:9e:00:36:
         c5:7b:cb:3a:5b:99:b8:fd:a7:60:83:90:7c:1f:0e:7f:f8:48:
         2b:a4:b3:c5:f6:bf:30:dd:47:9a:a4:6e:40:3b:88:c8:12:da:
         c5:23:00:7b:0f:28:42:87:a8:51:2f:05:6d:9e:b0:0c:38:80:
         6a:56:b8:82:e1:12:d5:7f:19:f9:08:c0:06:48:7c:39:20:8a:
         78:e6:ff:35:df:e5:07:49:88:d3:ea:53:1b:bf:60:85:c5:11:
         43:a7:90:1b:7d:31:f5:5a:d8:f4:f6:82:df:aa:de:db:17:3e:
         07:b1:ef:12:06:b6:d7:4c:5c:46:16:58:ef:2f:dc:0f:2e:f3:
         be:b0:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----