Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
File:                     RDTtvhtBAbKKviMvK88qAUiXglo.mft (raw, json)
Hash identifier:          AullAmGn3NEeklYc1ebyXl1poPtpPLa6SId3qSkkU5g=
Subject key identifier:   E9:D2:40:97:F1:F7:47:37:FB:19:E7:FE:5C:8C:9F:B5:4A:C7:75:FA
Authority key identifier: 44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
Certificate issuer:       /CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Certificate serial:       01962ECF655D115F27316B9B363DA585AA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
Manifest number:          0ED5
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: MBnjR0q6eR7PujQYuvXc6EY3kbo.roa (hash: HNqzyjDd+TtlMN5tniTDAwjj1tssNX0++6C4Wyg438o=)
                          2: RDTtvhtBAbKKviMvK88qAUiXglo.crl (hash: h36ABknqY0ZgO+VwhQqNHeg4N2RUN3BcmirIAP4AJ/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:5d:11:5f:27:31:6b:9b:36:3d:a5:85:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4434edbe1b4101b28abe232f2bcf2a014897825a
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=e9d24097f1f74737fb19e7fe5c8c9fb54ac775fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b2:87:06:28:54:0b:ad:b7:21:39:9d:df:21:
                    c9:f0:c0:d6:e5:f4:df:3d:39:fb:16:51:4f:c8:ed:
                    d5:9a:ba:21:68:43:50:33:f8:72:d8:f4:bb:18:47:
                    ee:14:e1:41:97:b0:7c:ac:cc:b2:7b:1e:14:b3:06:
                    c3:2b:46:e7:43:6e:e6:7d:72:fe:69:09:65:1e:04:
                    d9:ab:37:a6:f0:8e:4e:86:96:fd:c4:ce:7d:6e:21:
                    cf:7e:9e:56:6c:01:59:76:42:e4:b5:0a:1e:2a:3f:
                    c9:11:c4:00:eb:71:ed:6b:5a:ea:84:cd:90:98:d1:
                    3d:9b:46:ba:3a:51:3e:bd:64:3f:1f:2b:75:31:3e:
                    64:70:12:a2:d3:73:09:49:5b:04:0b:2a:fd:da:fe:
                    dd:6a:23:b0:16:48:64:7e:8e:fd:23:dc:f3:8c:b1:
                    4b:f1:69:d5:f8:47:92:e9:23:9c:70:5a:6d:1c:82:
                    7c:e8:a6:29:3a:d0:06:06:c0:64:e6:5b:85:7a:6d:
                    be:28:31:9d:32:3e:df:d2:f0:37:1a:89:7b:d9:69:
                    93:fa:97:37:9d:0c:2c:88:bb:aa:a3:ee:8c:c1:d8:
                    37:09:a7:ab:11:dd:7d:f1:af:3d:7b:0d:36:56:6b:
                    ae:d5:52:70:f6:40:72:f6:b9:4a:92:38:6c:d3:b6:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D2:40:97:F1:F7:47:37:FB:19:E7:FE:5C:8C:9F:B5:4A:C7:75:FA
            X509v3 Authority Key Identifier:
                keyid:44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e1:ea:cb:ac:5b:b8:22:44:41:83:84:44:12:39:14:80:d0:
         88:ce:3a:30:c5:04:85:51:2b:33:3f:73:bc:a8:38:90:13:35:
         33:e4:9f:47:01:14:7c:3d:b0:6a:18:89:c1:6b:87:21:84:04:
         73:45:cf:a4:5b:19:95:a8:a8:33:e8:6c:a5:d9:ed:ee:c1:e0:
         68:d3:2e:18:6e:05:40:a0:86:4b:d6:bd:8c:c6:38:09:2b:98:
         00:53:0b:b1:8a:bf:1d:33:e4:e2:2b:a0:a7:b9:56:a0:38:6a:
         ed:ed:8c:0a:68:26:c6:12:e6:5f:fc:6d:e3:26:08:33:31:c7:
         23:b8:e4:28:73:8b:d2:23:ec:9e:59:8f:7d:a7:64:ad:ca:5d:
         2f:44:7d:a6:08:5a:b0:25:bb:45:e2:ac:f3:22:b3:a5:7f:db:
         ef:d1:16:e3:29:85:30:29:d2:f7:35:e2:46:72:02:dd:ab:4b:
         d9:35:f8:59:a7:94:6b:9a:0b:62:3d:98:08:2b:67:bc:7e:d9:
         ab:97:ce:ab:4b:29:fb:29:2e:00:52:03:cb:a4:52:c5:95:b4:
         2e:57:fb:2f:df:fd:39:a1:31:14:20:e1:74:ea:29:64:a0:a2:
         f4:f7:1b:19:9b:64:cb:b7:32:ae:d7:10:7f:2d:58:4e:bf:e8:
         1f:19:7a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2VdEV8nMWubNj2lhapfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzRlZGJlMWI0MTAxYjI4YWJlMjMyZjJiY2YyYTAxNDg5
NzgyNWEwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhlOWQyNDA5N2YxZjc0NzM3ZmIxOWU3ZmU1YzhjOWZiNTRhYzc3NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77KHBihUC623ITmd3yHJ8MDW5fTf
PTn7FlFPyO3VmrohaENQM/hy2PS7GEfuFOFBl7B8rMyyex4UswbDK0bnQ27mfXL+
aQllHgTZqzem8I5Ohpb9xM59biHPfp5WbAFZdkLktQoeKj/JEcQA63Hta1rqhM2Q
mNE9m0a6OlE+vWQ/Hyt1MT5kcBKi03MJSVsECyr92v7daiOwFkhkfo79I9zzjLFL
8WnV+EeS6SOccFptHIJ86KYpOtAGBsBk5luFem2+KDGdMj7f0vA3Gol72WmT+pc3
nQwsiLuqo+6Mwdg3CaerEd198a89ew02Vmuu1VJw9kBy9rlKkjhs07aRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnSQJfx90c3+xnn/lyMn7VKx3X6MB8GA1UdIwQY
MBaAFEQ07b4bQQGyir4jLyvPKgFIl4JaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MzlmNjQtMWRmMS00NmQ1LWFkZDkt
MTBjYWY1NDk4NmZmLzEvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82MzlmNjQtMWRmMS00NmQ1LWFkZDktMTBjYWY1NDk4NmZm
LzEvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+Hqy6xb
uCJEQYOERBI5FIDQiM46MMUEhVErMz9zvKg4kBM1M+SfRwEUfD2wahiJwWuHIYQE
c0XPpFsZlaioM+hspdnt7sHgaNMuGG4FQKCGS9a9jMY4CSuYAFMLsYq/HTPk4iug
p7lWoDhq7e2MCmgmxhLmX/xt4yYIMzHHI7jkKHOL0iPsnlmPfadkrcpdL0R9pgha
sCW7ReKs8yKzpX/b79EW4ymFMCnS9zXiRnIC3atL2TX4WaeUa5oLYj2YCCtnvH7Z
q5fOq0sp+ykuAFIDy6RSxZW0Llf7L9/9OaExFCDhdOopZKCi9PcbGZtky7cyrtcQ
fy1YTr/oHxl6vQ==
-----END CERTIFICATE-----