Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File:                     EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier:          t+AlX9vUhmR1qERYIifzXSIePRoIpyRHj0OnFZaFhmY=
Subject key identifier:   2B:E7:95:8E:72:9E:76:C2:D7:9E:75:24:70:C7:90:77:66:82:C2:4A
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer:       /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial:       01962F06B21F0626CD01A710D1597CF32F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number:          0A97
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: JFD/BHxtEepO2ltwL5BvtNyymAwchwMVYgozofjyEig=)
                          2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
                          3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:1f:06:26:cd:01:a7:10:d1:59:7c:f3:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=2be7958e729e76c2d79e752470c790776682c24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:90:f8:8b:40:6c:1c:9f:94:37:93:c5:0c:
                    68:7a:7d:de:d8:a0:f4:15:5c:a0:fb:af:e9:c0:aa:
                    b3:29:f4:c6:db:14:02:3f:78:89:81:54:62:7f:02:
                    8d:ea:a7:1d:13:93:22:54:9c:95:45:03:2c:72:2b:
                    6b:83:b7:3a:0d:38:4b:fd:cb:43:53:c9:5f:66:51:
                    65:07:f2:07:57:75:a9:d6:c9:75:85:d0:3a:c5:f0:
                    bb:20:69:04:67:ab:bb:74:dc:a8:e9:70:69:81:23:
                    33:72:e1:1d:4a:07:91:14:68:0a:77:86:65:1a:44:
                    00:57:7a:bc:22:b3:4b:ef:68:a1:6f:ce:c8:56:2a:
                    18:ad:95:65:cd:8a:19:56:8f:0a:8c:7c:9d:8f:da:
                    ad:35:bb:48:a7:a6:a1:a1:2b:0c:17:55:79:13:d5:
                    a2:a6:da:f7:95:44:cf:bb:c9:28:26:e1:8a:41:7f:
                    e7:fb:5f:16:66:44:dc:85:d6:26:52:c0:6d:6e:e0:
                    c5:3a:74:77:09:c4:9d:da:ce:a6:8d:13:9e:3d:bc:
                    40:07:48:8a:33:f6:bb:c0:dc:88:d9:67:bc:ab:94:
                    0a:00:d4:89:12:bb:4a:77:0e:71:92:11:c9:b5:9e:
                    a8:2b:13:ac:fe:50:e1:1c:e8:00:bc:9c:f4:80:b2:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:95:8E:72:9E:76:C2:D7:9E:75:24:70:C7:90:77:66:82:C2:4A
            X509v3 Authority Key Identifier:
                keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:4d:b3:22:f7:41:e3:2a:91:25:57:5a:02:c3:4e:0a:9a:
         28:ec:03:30:7b:ab:54:68:fc:17:96:8c:c9:33:8c:3a:47:8d:
         3a:27:d5:6a:6c:4e:7b:54:34:f8:7d:c0:d0:91:6a:16:ea:63:
         97:6f:3d:39:de:08:29:b0:ba:57:15:8e:b1:a2:b5:9b:f6:fd:
         d5:5a:ad:7c:8e:a1:62:c3:36:4f:d3:0b:fc:50:22:02:10:9b:
         a6:11:fe:44:ab:68:32:4f:51:63:dd:20:5b:ce:a7:f3:aa:29:
         35:3e:b8:57:6b:b2:66:6f:b1:4b:cb:4d:7c:de:54:ed:92:e2:
         2e:95:5a:41:0e:96:85:38:ea:70:d4:93:14:18:dd:dd:3d:c6:
         ab:85:b0:7f:20:ff:d8:24:b4:87:5c:26:08:2e:9d:99:7f:c4:
         28:ee:97:8e:d1:22:97:92:98:5c:8a:e1:9f:7d:1d:ff:02:5d:
         39:d0:b8:6d:bd:e0:d0:55:8a:f4:57:cd:5d:ba:77:df:c2:2f:
         84:b8:dc:93:e6:40:cb:c1:ff:94:2d:8f:ac:c5:9b:d3:ce:de:
         04:59:5c:5c:2d:2f:1a:56:06:ad:95:b6:cc:39:c7:b4:dd:6f:
         8a:64:60:c0:5d:75:ff:18:b1:bf:1a:46:f6:a4:58:a3:2d:b5:
         4d:e5:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----