Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File:                     63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier:          b23W+dV6+sxLhd6WgDN6xJ+QqmRVy2QIRpbD73IdSsA=
Subject key identifier:   D4:2F:D9:84:E9:C3:B8:80:0A:86:FC:6B:97:5E:F8:91:F6:B8:76:39
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer:       /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial:       01962ECF64758C34CDF9B891A31E7AAA64F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: jPnLvxySVlphaJR0tslCfjmZoYANdVx0dzfcGvmbTNA=)
                          2: Hped2Nzw9BDgcMc7ThR7ZTJVfxo.roa (hash: EKotSeR3NXVLufe9gjVtCFUvkJNJlOJcwE3m9ndLGj4=)
                          3: hEjknnJNpRTS-Fn_xua20G61iFo.roa (hash: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:75:8c:34:cd:f9:b8:91:a3:1e:7a:aa:64:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=d42fd984e9c3b8800a86fc6b975ef891f6b87639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:ba:31:75:32:78:fe:14:0a:68:6b:d2:a7:
                    61:b8:99:e6:e5:2d:55:15:a5:2e:3c:95:7c:30:a6:
                    f3:aa:c3:44:a2:43:47:b6:f5:13:f6:85:1e:a6:ab:
                    a7:dc:25:55:41:6d:c2:cc:27:14:e5:3d:57:55:2d:
                    7d:90:6b:e6:ed:4d:a6:73:c3:35:ad:c1:cc:93:dd:
                    54:27:08:53:b3:68:b4:7a:d7:73:ff:41:ec:9d:90:
                    04:4a:fc:af:51:42:cb:cd:f2:f6:d9:bf:d7:50:c5:
                    b3:43:e3:08:de:20:c4:be:c4:1a:a9:39:64:3a:50:
                    df:00:d4:5f:71:e7:d2:dc:3e:03:eb:8e:e6:0b:34:
                    8e:5c:7e:5e:62:2f:7d:37:6a:1e:b0:6e:95:29:3b:
                    1a:aa:5d:ba:9a:d3:be:d6:22:17:b7:f0:5c:b4:60:
                    98:d1:09:d5:77:85:3d:76:6c:6d:c6:66:da:82:7b:
                    27:3f:c4:5e:a2:30:dc:98:51:20:02:28:49:0c:96:
                    ec:50:06:e4:3a:ef:1f:2f:17:8a:52:75:ad:51:fe:
                    0e:4f:05:96:0c:54:70:28:44:50:45:0a:90:8a:e5:
                    2f:4f:59:cf:f4:01:64:a4:54:a2:e1:53:74:16:16:
                    b9:81:f0:9a:11:5a:56:63:36:8b:01:d8:9b:31:ab:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2F:D9:84:E9:C3:B8:80:0A:86:FC:6B:97:5E:F8:91:F6:B8:76:39
            X509v3 Authority Key Identifier:
                keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:8d:45:ad:fa:8e:93:fc:73:5c:57:ac:b9:ba:cc:25:e6:
         71:8d:5f:42:29:19:b0:16:21:57:c6:c8:fd:58:a2:75:d3:5c:
         46:1c:4a:49:81:af:37:8b:e1:d6:7b:fa:b1:35:62:ec:6b:4b:
         fc:58:b6:1b:59:6f:07:01:39:b9:78:85:7c:69:79:27:ec:54:
         b2:ac:67:8e:77:8d:f2:a7:f6:ad:d0:2e:52:7e:78:68:49:48:
         9b:fd:62:cd:a4:fb:08:fd:47:70:74:7e:44:6f:0f:28:a8:b9:
         6d:06:30:65:1e:a4:10:d6:41:15:8f:10:94:40:3a:6e:0d:05:
         6d:b5:3a:ed:9e:fa:6b:ce:e3:42:fa:21:99:ee:7d:51:6d:a5:
         b1:3c:24:67:5b:05:5c:86:c3:87:81:b3:80:50:ef:af:75:60:
         8a:60:ef:dc:05:33:5e:8d:3c:58:0a:74:2c:93:66:8d:28:60:
         10:ee:b2:ed:d7:65:8d:c6:09:ce:48:3d:00:d8:17:7e:d4:82:
         2f:d2:93:70:47:4d:f0:f3:72:7d:3d:70:44:cc:1c:fa:47:2b:
         23:1b:e7:f6:18:98:e6:8b:ed:ef:9c:3d:9f:5f:42:57:24:5d:
         0d:41:c5:a6:b9:db:fd:d0:0c:26:10:5d:89:26:fb:ea:87:cc:
         86:c2:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----