Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          Qf58kduQNnQRtvzPJWg+r3gjERHqoHOH5EayXhm7+OE=
Subject key identifier:   1E:52:2C:9F:BC:DA:4F:44:DB:7F:77:B6:9B:F4:F3:9C:56:49:AC:FF
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       01962F3D5FDC7143DA1C0888DB9CA5AE6B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 2D5L126rfZDwMe+rZPqxT4hDRtpQJfv/XpE00oerlQQ=)
                          2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5f:dc:71:43:da:1c:08:88:db:9c:a5:ae:6b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=1e522c9fbcda4f44db7f77b69bf4f39c5649acff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:ab:c7:95:7e:f5:1b:31:85:27:b5:1f:82:
                    d3:57:54:db:33:00:d8:66:4e:f5:23:98:7a:25:1e:
                    9f:ad:2a:12:03:ee:35:e7:0a:33:21:e0:0c:82:10:
                    71:d5:6e:bf:6d:db:2a:c5:cb:95:0c:bd:16:23:a7:
                    4f:ee:70:86:a5:56:0b:01:03:d7:ef:85:86:0e:91:
                    9d:40:62:3a:fc:79:4d:02:87:84:ca:24:70:d0:ea:
                    85:63:79:2d:7a:bb:45:b1:71:34:21:fd:cc:21:3b:
                    98:d0:ed:5e:50:58:8e:ee:99:59:44:f4:cc:c3:1e:
                    cd:11:15:b1:51:25:d8:79:e8:96:58:17:f4:39:3e:
                    a7:1e:81:a9:ab:b8:48:d5:27:5c:e2:16:97:8e:69:
                    fe:29:5c:ca:d5:a8:8c:75:ee:88:52:7c:1c:5f:bc:
                    80:ee:6d:b1:95:a6:8f:e1:28:d0:07:25:43:98:c4:
                    f6:c6:41:f4:e7:3e:36:f2:1a:f1:bd:04:a6:18:08:
                    3c:71:43:50:ea:14:b2:48:9c:da:4f:92:59:4f:f1:
                    66:40:ce:31:20:33:b0:ed:ef:fa:83:e1:75:b6:2e:
                    c4:23:9f:5f:5b:52:5a:6b:44:12:04:b7:40:b8:ff:
                    08:33:88:52:60:ee:c2:0d:28:07:e2:a2:f4:0e:5b:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:2C:9F:BC:DA:4F:44:DB:7F:77:B6:9B:F4:F3:9C:56:49:AC:FF
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:9d:8b:75:3d:09:31:20:27:95:57:45:cc:b2:5c:3d:b2:
         ed:df:e0:95:e2:af:d8:a1:c7:d4:b8:9f:e7:96:70:17:b1:0c:
         d4:2d:06:84:d7:cd:71:3a:87:64:ba:2b:6e:6f:a7:87:40:9e:
         53:f8:be:de:33:02:a7:3e:b8:75:78:ba:45:6e:b3:f8:e0:7e:
         d2:68:df:89:bf:10:7e:21:11:0f:8d:18:8a:b7:52:74:78:7d:
         07:c4:f8:69:72:ee:af:9c:e2:93:ea:14:f9:99:12:af:43:5c:
         31:fb:fd:1a:c5:cb:04:00:5b:17:2e:5e:a5:b1:59:0c:77:ce:
         64:d5:74:2d:06:d9:66:78:d5:ad:0c:e3:bb:50:b5:0e:80:52:
         39:f3:07:71:69:df:50:da:a6:5b:98:cd:9a:d7:55:34:e4:24:
         d4:fb:2a:cf:c7:8c:91:36:d0:fe:40:57:31:2c:9c:cf:20:c4:
         ba:30:a9:ad:46:fc:7d:69:f1:b7:a4:c0:f4:1f:4c:7f:ef:ff:
         8d:1b:8b:9e:76:80:2b:63:64:f2:8f:a8:a8:57:ca:10:66:c2:
         34:88:0f:91:30:2b:60:27:5a:80:5a:24:fa:a6:f2:99:ed:c6:
         14:46:8a:9b:02:49:8d:e5:07:c6:72:c4:d9:83:95:50:99:bb:
         3f:1d:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----