Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          Aw4Vh/1/5I3eLEbJjz4TgwNuJTpXJtDyCyJ2ES8ra98=
Subject key identifier:   B4:13:BB:52:4D:9E:A1:56:7C:E6:73:F5:7E:B6:01:78:1C:D0:80:DD
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       01962E2B2412C5B2E16867F8F4ABADDB9BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: nEc+lavj1Z4Dq7ybjloUBtj+X/g7PSsPj4RFdFQpQlA=)
                          2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:24:12:c5:b2:e1:68:67:f8:f4:ab:ad:db:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=b413bb524d9ea1567ce673f57eb601781cd080dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:f9:b3:c0:82:27:0d:15:07:18:9a:8e:cd:
                    84:4a:54:89:f8:e9:9d:1d:8d:ba:8d:39:c5:49:3f:
                    f5:e8:86:93:00:16:0a:18:00:6b:6f:11:71:a0:f5:
                    af:df:0a:59:9c:a2:21:80:dd:a2:94:c7:d7:14:ff:
                    47:9f:78:48:3c:fd:66:aa:cf:05:fc:54:d9:25:11:
                    74:7b:4d:58:b2:61:97:50:d8:6f:d1:50:bb:bd:b2:
                    19:e7:23:43:65:36:1d:8f:50:ff:8f:24:6c:2f:80:
                    e8:7b:9c:55:3d:4c:28:07:29:7c:32:97:94:12:99:
                    03:87:aa:1d:c4:7e:d6:f1:fd:41:e3:61:4e:d4:ac:
                    50:5a:2b:6b:5d:a5:4f:f4:fa:59:45:ad:07:a5:b8:
                    94:1d:a3:14:9e:8d:02:9d:5a:89:48:f2:f4:f7:b5:
                    77:38:12:cf:bf:50:da:c7:e4:6e:fe:53:9e:41:75:
                    3f:d6:85:2c:3a:53:49:ef:9d:fe:a2:dc:83:f7:16:
                    8d:c9:4a:de:09:37:18:5b:39:42:b4:58:e8:c9:12:
                    08:c7:cf:7c:87:8a:56:76:b4:25:8c:50:f4:8d:d2:
                    95:e4:43:48:db:f1:2e:52:7b:6b:85:eb:be:a4:1c:
                    81:36:9c:bb:56:e4:f4:af:7d:79:30:bb:0e:51:1d:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:13:BB:52:4D:9E:A1:56:7C:E6:73:F5:7E:B6:01:78:1C:D0:80:DD
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:0c:ae:a8:b5:10:39:a9:b9:f5:ec:17:84:cb:c7:68:de:
         7f:bf:8c:83:55:fd:70:7a:f3:7a:45:59:e9:9c:0f:57:b7:fd:
         84:36:64:c7:1a:cc:74:c1:97:61:9e:55:9f:2a:97:f9:1e:7d:
         59:3e:7e:24:43:2c:d5:37:16:1a:5a:33:12:e5:a6:4b:fd:f3:
         9b:2a:19:9b:42:3c:b0:00:0a:a0:70:5a:03:c2:12:24:a7:61:
         12:cc:4e:d3:3a:a2:58:ac:86:0b:36:68:38:e6:5d:5e:82:0c:
         63:db:02:de:d6:d8:06:63:90:ad:16:93:6b:63:07:95:9d:62:
         d5:94:b6:85:a5:0f:94:3c:c4:62:d4:38:a1:69:36:17:01:e0:
         34:58:b8:83:3d:6a:42:22:af:9f:70:f7:fb:4d:27:93:27:0c:
         5c:7e:6b:5b:0b:71:05:a5:18:8a:b7:92:66:ab:2c:d2:ef:05:
         72:4a:64:d3:9d:3f:f4:e7:5a:56:34:79:27:c1:58:8b:eb:69:
         a5:7a:e8:e6:57:f1:b6:f4:c5:69:9c:42:f4:e9:ef:ea:6c:d6:
         28:25:4a:50:d9:43:03:88:d3:a1:88:7c:4c:f0:73:78:fb:81:
         9d:30:ef:03:f0:d4:c2:09:41:3f:b8:d1:a9:e1:92:b3:70:85:
         eb:7f:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----