Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          a4RxUkkhWeF+7sgY9gsz1WenFM/4B7OdlxgQ6WnAzbM=
Subject key identifier:   F3:21:29:2C:0B:31:F7:2B:4F:9C:78:C9:07:FC:62:29:D6:CF:69:EC
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       01962ECF79B125C477666A81C74A792CDD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: vJTPiiOSjRbvIpIezYYngt/07TZitRp9JzRZVmZ419o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:b1:25:c4:77:66:6a:81:c7:4a:79:2c:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=f321292c0b31f72b4f9c78c907fc6229d6cf69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:ec:11:9d:a1:ab:85:12:10:50:01:09:b1:
                    99:d9:11:be:16:a6:3d:82:ac:08:f9:89:fa:4c:bf:
                    90:98:2f:8a:71:9c:45:21:f5:24:83:19:c0:bf:93:
                    1f:f3:4a:9a:c2:39:5b:fa:3f:6a:6f:5a:2a:28:d1:
                    c9:20:37:0f:a7:17:58:bf:63:6f:35:83:8c:07:c7:
                    47:8d:d4:ff:bc:cf:ae:30:d4:79:d0:6f:5d:40:3c:
                    09:86:c1:c6:47:16:bc:e8:9b:57:ee:54:da:a9:29:
                    84:7e:97:a8:20:07:0f:57:e4:58:fa:19:57:b7:75:
                    b1:74:02:c0:7b:a8:fa:fd:83:c6:ab:fd:6e:b5:ab:
                    06:6a:cc:37:5f:0c:1f:b2:83:4b:b2:af:5d:30:56:
                    a1:fe:98:48:bd:6b:0a:c8:7a:bc:cf:a3:28:0f:2b:
                    4d:88:16:4c:11:60:0e:f5:1a:06:31:af:9a:c4:72:
                    64:4a:93:66:c2:1d:a7:79:8a:0f:e4:67:9e:a6:e6:
                    64:80:77:e3:8c:43:c5:68:f8:c7:9e:a3:3e:48:f9:
                    88:44:d1:77:7a:77:a9:08:6d:10:4b:e2:e1:35:9a:
                    11:ca:3e:81:76:af:1d:96:ed:84:e0:e3:9d:38:e3:
                    4b:34:df:67:9c:3f:70:d6:07:3c:e3:b8:0c:68:62:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:21:29:2C:0B:31:F7:2B:4F:9C:78:C9:07:FC:62:29:D6:CF:69:EC
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:2e:ab:7c:88:77:94:9c:7e:08:30:8c:9f:85:f2:f3:96:
         e7:17:be:94:b0:b8:cf:5f:b5:b7:b1:4e:f6:bf:da:b1:9f:4e:
         17:c8:bc:e9:57:74:2e:a6:2b:4a:7c:1a:31:50:e9:b6:cd:9d:
         b1:05:fb:f3:a9:2e:d7:bf:ca:cc:5a:c2:54:d1:3c:b6:5a:50:
         7a:ef:32:de:7d:bf:6e:b7:68:fe:30:93:83:02:4d:13:ce:0f:
         23:c8:51:82:4c:43:9c:24:62:4c:fb:46:4f:f2:56:07:8e:95:
         9f:e5:eb:95:7f:bf:79:17:0d:46:c9:3c:c7:a0:6f:a3:c8:62:
         40:ad:5a:de:d9:5a:ae:e3:7b:bb:de:b9:ab:ce:0e:fd:5b:a9:
         f4:a2:53:e3:cf:68:3b:dc:03:e3:31:c3:84:f8:0b:0e:16:a5:
         83:3a:43:08:18:3d:df:94:a3:a9:9a:64:dd:95:1c:6b:af:bd:
         44:c7:d5:88:2a:98:a0:66:04:76:a0:27:a4:f9:87:34:3c:48:
         d9:5a:92:68:a7:4b:3d:d2:4b:aa:e8:cd:ab:e1:0f:f4:39:84:
         f7:12:db:57:05:f5:37:67:53:7a:e0:06:78:d4:7a:d7:25:66:
         f0:ea:35:84:74:b6:da:8c:db:3d:da:0b:57:72:1f:e1:41:59:
         d5:f6:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----