Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File:                     cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier:          7b2PE/8HGXxKGy3U7UimUNcgOg2V9aibxaU61Ep/tg0=
Subject key identifier:   5B:28:2D:92:19:AF:0B:16:09:50:CC:4D:85:7A:96:57:B5:3F:0D:2D
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer:       /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial:       01962E2AD585D41D0E0CCA5E4110952B0ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number:          02BE
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: m8Mp4LF7IBhR2WiUMZrpbIaNFTG0lIr7usAsE3xO87A=)
                          2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d5:85:d4:1d:0e:0c:ca:5e:41:10:95:2b:0a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=5b282d9219af0b160950cc4d857a9657b53f0d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:f7:1e:51:21:9a:9a:6f:e1:43:12:ff:13:
                    de:be:5a:c5:19:0f:55:af:49:6a:29:56:c2:f2:ef:
                    90:81:37:1b:ba:fc:8f:7e:5a:cb:e9:5a:7f:00:43:
                    ba:89:8b:02:6f:22:50:b3:83:f4:76:97:ba:75:3e:
                    7c:d9:74:43:c6:db:92:03:8e:48:a5:36:66:cd:ce:
                    2d:57:85:a1:4a:99:1b:3d:0e:0a:fa:e8:36:39:2e:
                    b7:fb:70:a5:cc:bf:5f:cc:08:2e:76:78:d3:a7:42:
                    39:76:60:a5:d9:36:58:c1:8b:69:9d:80:bc:63:21:
                    55:bb:c1:1d:ec:9f:c4:58:6f:36:87:30:46:a4:09:
                    46:a4:56:21:48:dc:a9:07:79:91:30:49:e0:3c:c1:
                    43:68:ab:69:a6:17:bb:b9:8e:1a:91:0f:a4:17:02:
                    ea:9b:50:66:7c:d5:b8:91:66:72:d6:2c:ec:db:8b:
                    51:7a:71:cf:10:71:07:e9:40:a4:6f:24:d4:f2:29:
                    d3:7e:47:3e:39:03:b8:ca:64:f9:67:6b:ad:99:40:
                    c0:cb:fd:3e:4f:e9:f6:f1:43:94:ad:01:4e:39:fa:
                    6b:2a:ee:60:e6:47:74:75:d9:24:5f:74:eb:93:c8:
                    33:44:72:c1:e4:77:c8:cf:d8:c0:36:ec:09:f3:3b:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:28:2D:92:19:AF:0B:16:09:50:CC:4D:85:7A:96:57:B5:3F:0D:2D
            X509v3 Authority Key Identifier:
                keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:0d:67:56:da:bf:56:dc:0c:b8:f3:bc:e1:21:74:a9:c6:
         37:6b:92:28:8a:a7:ed:62:b0:d7:64:77:15:7c:f5:76:0c:57:
         7f:ef:58:ae:3f:7d:ea:57:e2:c5:81:0e:66:21:57:c5:1c:29:
         22:18:2c:8a:9f:c9:b3:6e:c6:16:68:e9:4b:da:5b:40:84:0c:
         d5:5b:1f:c8:b0:97:4b:8e:31:51:1e:38:4b:94:fc:3c:66:dd:
         07:01:54:db:82:88:f3:32:be:48:c3:4a:b2:83:b6:49:4b:1b:
         2f:73:c0:3d:46:d4:be:bd:64:57:18:99:3d:2a:89:27:28:42:
         98:b4:c6:e6:db:3f:f3:8e:34:69:97:74:aa:c7:99:69:e3:d9:
         3a:bc:96:7c:bc:eb:4e:fb:cd:f6:2e:1c:8f:a8:40:d6:8c:6e:
         74:6a:1f:1b:e3:64:d1:eb:14:63:cc:b3:0c:c4:33:ab:d0:3f:
         ce:f4:a2:3f:db:0b:ff:f4:2b:1c:da:8e:72:53:d3:ff:4c:13:
         6d:fa:9b:50:d2:35:2c:13:6b:b9:2e:9d:54:a3:7a:fb:75:f7:
         04:f5:2a:f0:e6:fe:9b:b3:70:aa:d6:4e:43:8b:a1:4e:50:f4:
         89:6c:f5:7a:58:78:3f:35:7f:24:49:0a:a1:87:e0:88:39:ed:
         d5:6d:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----