Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          s6qtTj7Ga46tQ1MngKtOD3dugror5dcmX6+GwWVUPnU=
Subject key identifier:   AB:3D:FD:AB:2D:04:DF:1E:03:FD:BC:0E:7D:61:D0:59:F9:70:B5:1B
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       01962F06E75E0ACA2BB1E57FFF1CFE5D6D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          0889
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=)
                          2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: X3Rf/9jnR0Bx2aMjeT3pam1Oq9ug6ebb0cBu8zeorI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e7:5e:0a:ca:2b:b1:e5:7f:ff:1c:fe:5d:6d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=ab3dfdab2d04df1e03fdbc0e7d61d059f970b51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:fb:cb:b5:89:88:d5:9c:96:e3:3c:11:f7:
                    3d:6a:3f:dd:57:ab:14:e1:e1:47:05:4b:81:a5:54:
                    b7:aa:9c:6c:c1:3c:21:e0:16:6b:f2:c6:1a:76:74:
                    3a:28:a9:b4:3e:07:e4:1a:44:e6:aa:61:f1:19:f3:
                    2c:4e:21:d0:11:8a:19:7a:82:61:91:55:5f:8a:e1:
                    1b:7f:c1:29:40:15:ce:f0:a0:30:bb:53:e7:5f:8e:
                    a0:ae:25:a2:58:cc:54:85:32:37:c8:af:c8:f1:eb:
                    48:49:f0:3b:56:47:1d:8e:68:0a:df:b6:00:09:e2:
                    10:22:f9:45:8c:2a:55:c6:9b:c3:6d:95:48:3e:7a:
                    c4:a0:68:33:62:b2:f3:55:5b:81:2b:7e:8a:bf:7a:
                    2c:d7:7e:a6:75:1e:f7:c1:7a:0b:9a:ce:af:be:64:
                    ba:cc:a8:5b:a4:46:2a:d6:73:4b:f6:5e:2c:b9:12:
                    70:d9:78:0c:f7:1d:84:fa:f1:37:e2:eb:f6:f1:c9:
                    c7:92:33:ac:57:92:45:1b:7c:26:54:f2:d5:1d:6e:
                    e0:00:4d:e0:ba:64:23:9a:b5:05:c8:6b:39:55:6a:
                    81:1c:64:58:33:52:2b:8c:96:71:6d:95:91:fb:16:
                    5c:e0:f0:e6:ff:ad:39:31:22:df:03:ef:da:93:ad:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:FD:AB:2D:04:DF:1E:03:FD:BC:0E:7D:61:D0:59:F9:70:B5:1B
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a8:6b:c0:3c:4d:2e:a0:b1:c9:43:9e:01:e5:fb:13:ee:53:
         0b:07:a4:78:76:29:14:e5:6d:34:72:c5:75:6b:f4:76:35:96:
         6e:52:9f:bc:7b:1d:0d:fa:55:fc:aa:77:97:4b:70:21:44:cf:
         c4:5f:2f:bc:2c:64:0f:f2:a3:d4:38:c7:8c:ca:36:85:85:46:
         42:1f:55:0b:cf:47:2a:50:77:5e:b4:24:f4:42:d0:bf:b4:92:
         59:db:34:70:3f:4c:26:5e:57:dc:74:3e:1f:15:b6:99:fe:cf:
         20:78:e8:a3:54:98:6b:74:3d:01:88:1e:d6:50:7b:62:c4:0f:
         c9:06:c1:f4:2d:7a:33:d4:ad:f8:a1:67:1b:a9:7e:16:cb:da:
         dd:96:07:b7:d6:6f:0b:9e:9b:fd:99:24:b0:35:26:66:ea:64:
         ac:9f:a9:b8:7a:59:3b:7b:34:26:40:c7:bd:78:e3:6a:84:bd:
         ad:05:e8:1b:b2:35:28:55:16:c8:17:a2:ff:ce:cd:f0:14:5e:
         08:a7:1b:a8:3e:de:3b:c3:83:d1:d3:4c:92:e0:55:d6:8e:5b:
         b2:a0:c5:1e:eb:41:85:0b:6a:ab:02:6b:4d:db:db:f3:f7:e6:
         b7:4f:cc:51:da:81:a5:ce:2c:c2:d9:10:f0:46:97:56:c8:66:
         b9:ed:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----