Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          E0PVA5qdg68iN7+1oVvhsCwIyGHtGFJmenrAMMultkU=
Subject key identifier:   EA:77:59:F2:F6:6F:DE:1B:96:DD:18:B3:66:E2:3D:05:C9:BD:F6:E6
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       0195E046C4B731CA779AA45EF0A75FAF2115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 05:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:29 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: I2vlYOgF5D87debK8dPvgnnZmbGoGqbTznD5YTiKeW0=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (hash: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=)
                          5: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          6: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:c4:b7:31:ca:77:9a:a4:5e:f0:a7:5f:af:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Mar 29 05:01:29 2025 GMT
            Not After : Mar 30 05:01:29 2025 GMT
        Subject: CN=ea7759f2f66fde1b96dd18b366e23d05c9bdf6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:3c:ed:f7:9a:68:95:2f:78:24:84:55:1d:
                    4b:3e:ce:42:39:d7:3d:82:31:48:c7:60:ba:17:b5:
                    2b:c4:f6:8e:1d:50:89:a7:d0:ec:59:83:2f:eb:d0:
                    0b:20:79:30:4a:62:07:45:47:40:5c:e1:cd:03:0a:
                    48:6c:b3:62:6d:dd:06:00:e0:ff:cc:2c:b8:90:2c:
                    35:e1:89:4d:4e:27:b8:1e:12:47:08:5b:23:b6:89:
                    a7:26:10:85:95:b1:83:ce:4c:4c:5f:30:c3:72:f4:
                    c7:5f:0a:4b:ec:1e:20:7a:02:65:50:40:bb:b1:4b:
                    b0:18:8e:2c:ed:6b:b2:55:2b:fd:ff:a8:53:02:bb:
                    6e:ab:44:4c:af:55:66:f4:7f:76:ea:6f:75:68:f4:
                    29:bd:18:52:63:39:68:3a:fa:53:14:a9:18:bc:59:
                    9a:b2:4f:c5:f6:a2:eb:08:38:c7:fe:73:b5:f1:fd:
                    76:99:11:a6:71:21:ca:e9:67:fc:6d:cb:1a:9c:b4:
                    67:6b:5a:16:d9:d8:77:f6:83:a2:a5:39:e2:66:d5:
                    e1:fd:a0:9a:63:30:73:ad:32:95:f7:30:86:d8:8e:
                    b6:1d:5f:64:5b:3e:35:27:3b:60:0a:f7:46:2d:4e:
                    53:2e:5f:32:2b:2b:1a:cd:de:fe:82:8a:97:2b:92:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:59:F2:F6:6F:DE:1B:96:DD:18:B3:66:E2:3D:05:C9:BD:F6:E6
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9a:2d:1b:d1:2a:27:0b:b5:a2:af:0d:35:d6:a9:ac:c5:75:
         80:38:82:e1:d3:fd:59:2d:b1:2b:a4:49:e4:45:41:f0:27:11:
         f6:13:bf:49:5b:de:64:e6:92:53:03:f6:bb:ba:43:56:19:5d:
         aa:3e:af:e7:ae:cc:7d:94:71:1a:5b:9e:f7:20:40:1a:13:c2:
         e4:2e:91:c3:a5:a7:05:06:b9:0d:87:d6:d3:28:ab:67:ce:53:
         2d:18:fd:6a:04:ff:8f:b5:5f:15:56:58:40:1a:37:44:d3:2b:
         38:84:fa:b9:5a:fa:08:73:90:30:91:c6:c8:d9:61:ea:01:40:
         ec:a3:df:ce:44:5e:dd:37:09:08:92:af:d8:67:77:58:cf:b6:
         f4:c2:50:d6:21:54:19:d8:bc:ca:c3:3b:45:21:b6:57:b5:21:
         bd:b8:04:26:43:57:f2:94:d7:fe:c5:af:32:cc:77:d8:6a:36:
         bf:57:96:26:fb:ee:b0:a5:e5:08:4f:bf:d9:d1:9a:d6:5b:0e:
         a8:0b:3e:79:7a:99:5f:41:f5:eb:11:3f:f5:56:31:96:88:22:
         a9:16:36:80:80:b1:85:3b:cb:66:40:a2:fb:84:7b:57:f0:d3:
         79:4e:a1:45:13:5c:13:24:5e:5f:2e:9d:fe:d4:15:60:05:85:
         6e:77:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----