Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          lCA6Wziad3E1J8BpzNpglUe/6PBtXnRDlYs49ADkJSo=
Subject key identifier:   0B:9B:E0:B3:12:AA:90:CE:6D:CF:7C:31:60:1C:B4:09:6B:03:BE:AD
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       01962E6186223E7FAE8AC630E28B6FBBA57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: oZzGihBGu26n+S0BVu4i/YqtZIeiOCkiZBLO37v6O4g=)
                          2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:22:3e:7f:ae:8a:c6:30:e2:8b:6f:bb:a5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=0b9be0b312aa90ce6dcf7c31601cb4096b03bead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:a9:d2:46:35:7e:38:5a:ae:6a:b0:2c:d4:
                    50:e1:1a:9d:49:29:92:56:02:af:9f:91:f6:cb:c3:
                    5f:15:fa:ff:4d:e8:99:de:c6:88:4e:ec:b6:58:99:
                    fb:2c:ae:ed:34:82:d6:1b:fe:7b:bf:37:65:3a:a1:
                    df:a0:7e:0c:27:b4:cd:85:3a:e1:3a:62:63:84:87:
                    8d:5c:d0:e4:46:ea:99:a6:55:3d:79:fe:df:d5:f5:
                    9d:c7:62:8f:60:d3:a0:f3:56:4b:12:08:57:bb:6c:
                    06:da:1f:61:26:d5:42:45:f2:75:33:fa:55:c9:36:
                    61:19:de:a2:c4:4a:7c:51:fe:0f:56:0b:ba:f6:b6:
                    42:2a:d6:06:71:d6:53:0a:a6:03:d5:5c:99:dd:40:
                    0c:01:02:44:65:a0:14:d9:0b:c2:a3:dc:e1:2e:f8:
                    58:e3:cf:f6:bc:57:70:0b:9e:84:b5:5e:5a:f4:4a:
                    11:e2:fc:ba:08:40:f7:44:3a:52:e3:11:e8:8f:23:
                    66:c6:8f:d6:97:b3:34:95:71:60:ff:7d:6f:0b:a8:
                    5d:dc:df:e0:7a:08:f9:14:44:3b:6e:3c:52:a2:26:
                    67:c6:0a:94:4f:96:8f:aa:f1:47:83:f7:fc:12:7a:
                    a9:9d:af:8b:0a:4c:68:f9:92:d4:4f:66:e1:de:00:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:E0:B3:12:AA:90:CE:6D:CF:7C:31:60:1C:B4:09:6B:03:BE:AD
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9f:00:ca:af:32:97:31:85:b4:4e:38:91:7f:34:22:80:56:
         44:97:00:a5:db:95:c1:54:d5:d5:68:c2:af:9d:66:c9:05:05:
         a5:71:94:f3:c3:ad:3b:be:16:ca:86:c7:b4:59:01:46:74:ec:
         4d:54:47:52:e8:22:c8:bb:f9:2d:cf:da:af:8b:26:51:dc:9c:
         1f:b5:5f:0b:e4:4b:87:d5:d3:ed:f7:8e:e6:97:3d:91:36:ba:
         23:2e:3c:72:85:2a:52:ab:68:16:e0:4b:e4:32:3b:f5:f6:26:
         9c:cb:92:a3:2e:43:75:9e:52:4a:46:7a:11:b8:64:28:c7:cf:
         28:2d:a1:9d:c3:e9:d5:9b:48:a1:c1:cd:53:a5:71:ce:28:47:
         39:6b:40:c0:f5:6c:2c:cf:a9:61:47:fa:23:65:98:30:7a:42:
         54:0c:6a:32:6d:d4:de:1a:90:c7:24:d2:66:c1:0f:57:4d:7d:
         fc:c0:2c:10:fc:b7:4f:b5:83:70:27:db:26:27:4b:12:4b:84:
         6b:25:e0:a3:a7:06:ef:a6:c0:8c:47:e8:bd:0b:14:5d:6e:90:
         ec:17:73:e1:64:1b:6f:d8:29:88:bb:6f:95:a8:56:7e:90:ef:
         d2:65:94:d9:29:39:88:6c:b8:82:fe:78:5d:1b:de:5b:32:6b:
         0a:ef:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----