Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File:                     EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier:          JoUsOgZAO6cy4IPV6OffhjgRJGE3305/2IAE79VVJxk=
Subject key identifier:   CB:B9:C0:59:1E:31:AF:DF:8A:92:FF:6A:40:9D:FF:FC:CE:67:CA:02
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer:       /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial:       01962E2B1575A498A46C01029D1D9EDC7D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: Ep/OwUPesKyHk3Yra+RbQy0aW0SvBxN3zXk41qtcweY=)
                          2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:75:a4:98:a4:6c:01:02:9d:1d:9e:dc:7d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=cbb9c0591e31afdf8a92ff6a409dfffcce67ca02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:98:17:28:e8:83:6f:ef:84:d2:67:9c:06:
                    d2:32:b0:3f:8b:d3:6d:7c:ee:e0:1e:fa:9d:99:5e:
                    0c:bd:5a:62:ef:00:71:00:6e:ff:a1:a4:7e:b7:85:
                    4f:4f:ff:1b:52:41:ae:9f:80:d6:96:ca:e1:48:e9:
                    2f:22:0a:3c:4f:42:ce:af:e7:41:f4:dd:d3:1a:cf:
                    42:92:24:33:78:e3:4a:70:a2:40:c7:83:1c:71:44:
                    6c:50:1c:28:62:45:56:bc:7d:d8:df:9f:7f:cf:b8:
                    87:94:32:23:f9:9a:de:c8:5f:01:70:1b:b4:5d:2c:
                    3d:bc:b5:19:c2:3d:da:c1:ca:d9:b0:d8:6b:ad:ea:
                    ce:ce:07:66:0f:02:60:8d:00:4b:06:78:97:d8:19:
                    8a:37:3b:1f:43:ef:bc:8e:99:d0:d8:47:f8:0b:1c:
                    d7:99:46:c5:e0:44:18:e8:26:7a:0c:86:f2:e1:4d:
                    3c:65:8b:91:a0:53:e9:6f:8a:2f:4e:24:ee:91:b3:
                    44:66:1f:18:33:6b:52:3c:a0:b7:36:50:a9:07:ee:
                    e6:7f:7f:f6:1c:a6:b2:a8:56:8d:cf:06:38:5e:47:
                    80:f8:95:18:72:00:7f:26:ed:e1:31:78:56:81:ae:
                    f9:f6:64:92:42:3e:9f:9d:3d:38:41:12:19:d3:b4:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:C0:59:1E:31:AF:DF:8A:92:FF:6A:40:9D:FF:FC:CE:67:CA:02
            X509v3 Authority Key Identifier:
                keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:60:fe:c1:02:d8:b1:1b:52:00:01:24:ef:f2:59:3b:18:
         cb:37:4b:d2:23:6a:0b:51:7b:83:61:29:32:c0:3b:94:ba:79:
         5d:20:e5:86:72:91:92:ce:83:70:67:a7:21:34:b6:dc:1c:7d:
         0e:20:8e:67:f1:9f:a0:6a:bd:0d:89:69:f6:62:b6:fb:2b:8e:
         e9:e5:67:c9:8f:e8:c1:31:12:f1:25:c1:fc:43:5e:3a:a9:9b:
         85:da:f4:06:6c:50:3b:af:cc:dc:8d:ae:ce:dc:d8:84:d7:e7:
         1e:95:02:a8:0c:1c:01:84:e8:6c:ef:46:04:3f:4e:c9:31:6d:
         89:98:41:41:c7:f8:88:09:bf:73:fd:7e:5b:77:14:93:cb:6c:
         7f:ca:ae:bf:5c:32:f5:84:54:a4:f5:71:14:d1:3a:58:35:dc:
         a0:92:ad:d9:33:18:c5:f7:b3:b3:00:e1:59:95:7c:fc:ad:3a:
         f5:46:1a:a6:ff:4a:62:ac:1a:f2:67:56:d1:f9:cc:5d:89:40:
         a0:e2:2c:d1:3f:6a:c2:9f:fa:3c:f8:6a:ac:98:91:a3:f3:5a:
         2e:e6:eb:79:dc:ef:90:25:22:1a:c9:39:84:19:49:1f:d0:5c:
         8f:e4:68:ad:db:9a:e5:63:72:99:d5:f8:30:bc:71:f5:6f:83:
         fe:dd:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----