Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          IlvAyDxsPVkhv9r2A/yynR2NnLhMRDOqaLPDyw1p3mY=
Subject key identifier:   1B:0B:14:EC:3F:DA:53:5E:77:E6:58:AB:92:44:93:6A:D2:B8:CF:0E
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       01962E61890A638E5718D79A5C04FCCC0783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          094D
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: +qtvhHBY12hJI/dY8AjA0+Y4lzeCHnzZraySNVluxuk=)
                          2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:0a:63:8e:57:18:d7:9a:5c:04:fc:cc:07:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=1b0b14ec3fda535e77e658ab9244936ad2b8cf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:fc:80:e0:44:ec:bf:21:f4:33:19:f6:06:
                    f0:bf:3e:50:a8:b1:da:3b:5c:c4:60:e4:3c:5f:9c:
                    69:7f:0e:d2:3f:bf:84:a4:34:8e:5a:a4:04:59:a6:
                    6b:06:a5:ec:c7:bb:35:57:e2:01:47:38:f4:c3:5e:
                    c9:ef:66:87:9f:60:b3:a4:75:cb:a9:d6:d0:17:a7:
                    b7:8b:c6:3b:fc:c3:f7:ad:7c:d2:4c:fc:9f:a4:a1:
                    cd:58:60:60:da:0d:0c:b8:1f:39:8e:0a:45:30:24:
                    71:96:4a:6c:b1:db:16:ae:29:ab:ac:5f:c3:13:51:
                    43:f7:60:9e:86:fb:8e:63:ee:40:01:9f:7a:6a:b7:
                    49:fb:f1:94:7f:ee:aa:ca:ce:76:ce:35:a5:85:80:
                    43:6a:9a:7d:59:b5:1c:3e:9b:5b:ca:38:15:2b:6d:
                    08:f8:59:70:0e:91:58:34:92:68:4a:85:39:21:2b:
                    79:07:79:34:f9:bd:fe:cb:bb:39:2d:9f:31:f5:e1:
                    f5:1a:c4:01:41:d6:32:b2:65:f5:69:77:7a:f3:34:
                    85:da:7e:a5:6c:2f:22:9d:79:57:7f:8a:93:34:39:
                    1e:d4:76:f7:01:dc:c2:c5:9e:7e:9a:8a:6d:2b:c8:
                    20:e3:f6:93:03:15:7a:28:6f:39:b3:e3:72:b4:99:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:14:EC:3F:DA:53:5E:77:E6:58:AB:92:44:93:6A:D2:B8:CF:0E
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:1e:12:85:c6:ba:7c:b4:f3:70:7b:c2:a6:82:55:21:8a:
         25:90:ef:50:da:4b:c1:3f:22:ca:32:68:3b:56:f0:64:35:82:
         16:25:48:2b:74:fd:04:a4:bf:3f:5a:63:87:f2:63:ee:fb:38:
         91:f1:f0:3d:da:bf:4e:d6:a0:e5:b9:ac:43:4d:1a:65:d9:4e:
         a4:dd:72:a6:fc:bb:c5:9b:87:4d:cb:e1:46:08:3d:91:e3:37:
         66:b4:c5:50:8c:83:b5:3b:bb:b9:02:65:4c:30:64:64:3e:02:
         fa:96:b8:86:f2:0b:2d:4c:1b:e1:aa:f2:43:10:16:0a:74:a7:
         b6:57:88:28:de:3d:91:ea:52:14:5f:08:a0:b5:d9:49:53:de:
         bd:99:c2:f8:95:ca:33:59:e8:31:da:ad:e8:8f:dd:fd:00:c3:
         5c:13:0a:74:3e:ad:48:a8:52:d3:42:10:78:5c:02:6b:a7:21:
         f3:e8:83:8c:22:81:10:bb:56:22:8b:9e:6f:8a:29:cf:39:3b:
         8a:03:5e:3e:b0:68:05:4d:54:9a:7b:97:9b:c1:df:94:33:e1:
         13:a9:45:a3:58:d9:2a:a8:26:60:30:c5:f0:d0:7b:64:cc:4e:
         bf:a8:93:55:3a:05:72:1c:3d:cb:55:f5:d5:ca:2c:31:cd:bf:
         9c:2b:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----