Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File:                     zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier:          X2TdQXJ96ECyb89pgT/a+xwXnSVACPt1IZUvO0vCkpk=
Subject key identifier:   EE:D7:9E:69:54:35:57:CA:D6:43:0A:9C:7C:D1:FB:2C:9F:8F:56:5A
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer:       /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial:       01962E9898EC480B289AD781F1BA1FAF9DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
                          2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
                          3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: YoocFtc1KJ1KfmcUUE+erEEP+Oq62VlKJwXcKJBMMxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:98:ec:48:0b:28:9a:d7:81:f1:ba:1f:af:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=eed79e69543557cad6430a9c7cd1fb2c9f8f565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:89:e0:a7:96:73:33:49:11:aa:72:1a:41:
                    38:b6:3d:89:ed:b2:ea:26:0a:8d:2f:c8:f6:bb:5d:
                    68:97:a9:8a:36:8f:12:d5:74:55:f6:24:87:ff:6e:
                    ff:38:75:33:e9:de:80:ad:aa:97:f1:69:28:1e:c5:
                    cd:20:dc:57:0c:8a:b9:1e:1f:14:6d:4c:a6:c6:9c:
                    8a:9d:f7:8b:e3:67:a9:0a:96:45:3f:12:7c:1a:58:
                    34:2d:d5:c9:89:b7:fd:f4:db:9a:31:d3:22:39:e1:
                    f0:12:79:a4:f7:cc:03:d2:f2:6d:67:77:64:2a:25:
                    30:7b:45:03:19:ee:4d:70:58:ab:0b:0b:8b:ae:64:
                    96:1b:26:1e:e0:5a:9c:9e:06:c2:38:8c:4a:1b:d7:
                    d0:e6:f4:16:37:81:aa:48:9c:92:66:4b:8e:7d:52:
                    66:55:34:df:0a:c4:56:18:a8:7f:fa:52:3a:00:78:
                    93:cd:29:85:f7:72:f9:3c:13:4e:f8:cc:f2:52:09:
                    c8:f4:75:e4:73:cb:b1:44:a4:36:4e:e7:0e:14:26:
                    94:6f:83:2b:9b:a4:f0:39:5a:89:5a:7a:65:61:a4:
                    ed:7a:0e:b5:6a:b5:b6:dd:d6:10:f3:93:d6:27:48:
                    a4:bf:6f:65:7a:0b:66:aa:cb:70:a0:f0:40:87:46:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:9E:69:54:35:57:CA:D6:43:0A:9C:7C:D1:FB:2C:9F:8F:56:5A
            X509v3 Authority Key Identifier:
                keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:60:d6:a2:c2:83:09:4a:1b:72:3b:7c:e6:7c:57:6a:cf:
         1f:dd:c0:f1:11:dd:ff:ee:fe:89:51:b2:42:3e:d8:44:b2:98:
         de:23:14:2c:c5:ec:82:00:19:e6:22:76:e3:d2:9c:ec:41:e6:
         17:63:a1:c1:cc:a7:66:d1:44:f3:1e:32:82:9b:38:f2:85:1f:
         1a:5c:c1:bd:78:61:f5:c4:d9:7d:f3:58:ad:13:b1:73:da:1a:
         e0:01:8e:ac:b7:47:fe:51:23:94:b9:f6:e9:52:70:4c:dd:28:
         86:d3:93:13:af:9e:be:9e:15:de:e7:a0:ea:e8:4d:43:bd:99:
         85:1a:f2:12:ce:fa:5f:78:d8:3c:73:7d:25:21:a5:99:03:fb:
         7a:d4:60:54:a5:b9:52:cb:63:54:44:22:16:cf:e7:b9:b0:80:
         73:6d:b2:b5:80:d9:a9:2a:0b:48:d9:62:2d:89:3e:ae:08:72:
         30:8c:b8:70:9a:a2:6a:f4:40:01:09:2c:48:01:8b:49:0a:89:
         25:a1:9f:b0:3f:91:c7:84:15:88:c9:b0:c1:bc:06:bd:f0:ee:
         c6:9c:1c:e5:1a:62:c8:96:ad:de:35:44:8b:aa:ce:c2:7a:6e:
         a2:bc:31:3b:1c:f3:c7:8d:b0:c1:ae:7c:5e:36:e7:55:56:51:
         44:f5:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----