Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          rJ5DxA+NCXTmfL02LiAqzMo++oDRCCzthbiC9c3fKGM=
Subject key identifier:   94:1C:AC:84:FE:17:58:4D:33:83:8A:A7:22:F9:08:C9:68:A7:77:D8
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       01962FAB8E39CE6D81632C1E57D2831CA46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
                          2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: WT/Dl02JhS0Tb9muRP0/THAIKLCiCyjPhRHTurjmXnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:39:ce:6d:81:63:2c:1e:57:d2:83:1c:a4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=941cac84fe17584d33838aa722f908c968a777d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:0c:65:34:a9:f9:1d:21:df:95:97:13:61:
                    b2:ab:37:26:6c:c5:9b:b1:38:5d:5e:e9:d1:f4:22:
                    c4:91:e2:4b:af:09:54:86:4c:81:db:81:7d:1f:c0:
                    3d:93:92:d5:8d:d4:77:96:4c:52:58:e8:36:7c:f1:
                    e2:9b:c9:ea:b9:0a:ad:7c:bd:ca:43:d9:87:86:2f:
                    59:76:14:4e:97:f7:8c:d6:ea:ce:c9:99:d2:00:29:
                    cf:23:fa:c2:ec:b8:14:26:01:c6:27:26:1f:31:d5:
                    5f:36:f1:bd:a8:7f:1b:b1:e1:04:80:20:04:09:62:
                    0a:0a:d5:7a:83:54:2c:d1:5e:55:58:6e:1c:ca:ad:
                    e6:f3:39:96:11:95:ed:37:8c:06:ff:a5:44:e5:8c:
                    4f:5b:0a:70:bc:81:d0:d5:06:63:3e:9a:de:b1:d3:
                    38:6c:82:16:d7:78:ea:16:13:e5:aa:ea:cc:7c:f6:
                    2e:b1:54:d6:8a:9c:2b:4c:cf:d8:d6:6a:02:d2:cd:
                    bf:d5:f3:53:dd:62:2c:ca:42:9f:e1:08:5d:1d:85:
                    ff:7f:90:ba:90:43:a3:10:4a:22:f7:51:e0:19:ce:
                    e6:a1:a7:f8:ea:e2:34:68:1b:5e:e1:9e:01:ba:4a:
                    02:3d:5d:2a:96:93:b0:97:be:e5:51:53:76:52:cb:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:AC:84:FE:17:58:4D:33:83:8A:A7:22:F9:08:C9:68:A7:77:D8
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:b4:e5:0b:ab:c2:77:ad:8f:b4:a0:8d:03:5b:82:81:ca:
         9f:3b:e9:39:50:30:3c:15:98:0f:53:01:9a:26:5e:79:6f:60:
         3f:96:8c:ac:8b:17:ca:8f:b7:ae:fa:10:e5:3e:e0:32:c5:f0:
         e2:51:02:0b:5e:f0:e7:0d:54:62:c0:05:cf:f6:de:d7:11:c1:
         d2:9b:0a:23:69:1f:f7:49:35:8c:b2:40:dc:3f:69:2e:eb:cd:
         bb:33:2f:97:d0:73:3a:11:5e:a2:30:33:88:a2:e0:be:d0:a4:
         77:d7:5f:09:6d:cc:52:11:71:a4:3e:b5:89:d0:be:cd:5e:e3:
         d2:1b:d7:e8:1a:5d:f9:d3:d6:0c:9d:75:42:18:0d:c1:8f:8f:
         1b:f6:1c:f5:0d:4f:33:13:39:96:24:9b:90:9e:c4:fd:7d:1f:
         a6:40:d0:d0:4c:69:ad:14:ee:09:df:29:41:37:00:a9:34:5f:
         0d:57:e2:5f:63:93:de:fc:9b:d9:8b:72:0a:1b:a6:a4:15:c7:
         75:b4:40:4c:bd:09:84:91:1d:7b:2f:30:25:1f:2f:6c:d8:63:
         4e:6d:93:16:a2:5f:cb:1a:f5:4f:fe:35:4d:e7:40:01:d0:ea:
         24:58:82:95:6e:8e:4a:6f:47:a0:f6:f2:c0:fc:9a:b9:bf:0f:
         b7:a1:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----