Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File:                     5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier:          7yMzL0GLx8dIOv9URW/Csq4EZ1KXB4BbOjXOicqdJ4k=
Subject key identifier:   EA:53:6A:7A:88:88:EA:B7:87:2C:57:E1:D0:32:14:E5:6E:56:7D:B1
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer:       /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial:       01962E98D574383E1BF83EB91C2970A2A7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number:          0120
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: mZgLEUlJBaUYJbIHelaRqEb+iLylI3LHIG1D1743TwI=)
                          2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:74:38:3e:1b:f8:3e:b9:1c:29:70:a2:a7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=ea536a7a8888eab7872c57e1d03214e56e567db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:21:bc:54:d5:f7:57:2f:87:26:e1:8f:97:
                    d3:c4:50:1c:5d:b8:00:12:53:98:70:bd:64:43:86:
                    3f:95:01:87:b9:52:75:22:41:46:9b:22:74:b9:4e:
                    dd:cf:28:58:90:4a:6f:de:af:78:fc:74:aa:14:18:
                    d0:3d:fd:cb:8b:8d:8b:88:ca:f3:78:b5:12:e8:4d:
                    98:ba:68:30:c7:52:98:6f:83:82:c0:78:d7:79:5d:
                    c1:57:2b:e4:27:ca:90:f9:ae:46:f4:72:32:5a:15:
                    0b:dc:25:7c:be:2c:07:c8:14:74:b2:ca:7c:88:7f:
                    cc:84:8b:7e:6f:33:ca:0a:a7:b6:08:6e:9f:f4:d5:
                    3e:11:cd:ed:55:95:ac:79:70:55:fa:0d:e0:57:b4:
                    71:08:83:29:28:d8:ff:31:31:05:de:57:6b:03:1d:
                    c3:f9:22:06:20:81:95:49:f2:1a:5d:66:3a:76:5a:
                    b2:ef:3f:99:79:f1:86:68:2b:8f:4a:e8:14:54:14:
                    22:5f:10:17:07:51:2d:09:d0:f5:c9:71:fc:18:9d:
                    62:cc:a6:a0:63:22:34:27:65:02:8c:72:d2:75:bc:
                    61:0b:7b:9a:ed:6a:01:c4:30:d4:b1:b1:1c:89:d9:
                    97:f5:6b:00:6e:f9:fb:24:d4:b3:ab:ef:f9:4f:56:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:6A:7A:88:88:EA:B7:87:2C:57:E1:D0:32:14:E5:6E:56:7D:B1
            X509v3 Authority Key Identifier:
                keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3b:47:dc:ed:81:cc:42:00:fb:49:ac:80:8f:c7:52:6e:44:
         52:d4:07:15:3d:3d:89:ae:4a:8e:b9:d0:96:15:64:5f:25:58:
         34:55:52:c4:85:95:1d:7b:13:ee:32:c5:83:6f:6b:b4:3c:c9:
         04:92:da:6f:5e:b7:69:c5:14:14:8b:4e:36:8b:3a:a4:d8:28:
         eb:c7:d9:0a:51:c8:76:56:bb:84:ff:6c:8b:f1:17:6f:ad:09:
         12:23:c8:32:f5:6e:7b:ce:5b:99:68:16:55:b8:01:7a:e5:50:
         29:0c:f9:73:3f:98:33:e9:82:da:f2:71:59:24:9e:5f:22:98:
         b1:34:c1:fd:9b:1f:5e:41:72:ec:7d:08:e9:2b:2a:52:dc:db:
         7a:b9:65:db:0c:36:7f:6b:78:68:f2:7d:0f:4e:9e:8a:cf:fe:
         ef:16:e9:54:24:fe:65:59:dc:b5:a4:57:f2:02:4d:7c:db:cd:
         77:55:ba:01:67:e1:ba:1f:9d:d4:c9:ba:28:4a:ba:9b:82:f0:
         90:33:2a:04:bb:46:aa:b5:8e:c5:cc:bc:ca:c6:2f:4f:36:31:
         ac:b2:7b:25:19:c5:c7:c9:25:07:87:c1:ec:29:7a:23:5a:01:
         0e:f6:57:4e:e9:2f:5d:1a:7d:bd:22:0c:3a:25:00:f5:86:e0:
         45:ae:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----