Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File:                     cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier:          1HmXTaddQhOfDUzUxjzCqA1S5FUT5QjudIOXXev7suo=
Subject key identifier:   0E:F8:2C:A8:85:66:0F:36:0E:87:23:62:40:7E:74:C7:36:1D:FA:7D
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer:       /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial:       01962F3D2F8476D13465FB95EEAB37E87019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number:          0ED0
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=)
                          2: KDjWBtfUWmvzACa57cUDNtkrdUA.roa (hash: /glLy7mZaGaTX2OWyQgPV2Cf31NNes0oBZbekJoIYok=)
                          3: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=)
                          4: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=)
                          5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: fDPzhI0o5/6sfaxkpnwu/TS0piJ6VkUd/jMbkjtWdzA=)
                          6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=)
                          7: mx_lz5ePGWdFvRNKMpVlzKIOYgA.roa (hash: g9PhpMZ1NQ6VmU7t7tiyo0S5wdLyY0k3bkBy2uqD7Q8=)
                          8: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=)
                          9: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=)
                          10: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=)
                          11: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2f:84:76:d1:34:65:fb:95:ee:ab:37:e8:70:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=0ef82ca885660f360e872362407e74c7361dfa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:bc:6e:5f:50:b6:47:93:cc:5d:97:ea:36:
                    08:f8:34:dc:92:2a:db:eb:6d:de:6f:bd:a6:5c:d4:
                    66:9f:dc:c2:dd:ed:bc:72:e6:5c:5e:5a:e5:e3:36:
                    92:4c:ba:86:ae:aa:ae:20:41:53:51:b2:54:fa:78:
                    72:4d:d0:d7:d9:aa:f8:25:cc:c9:a7:91:c7:e1:9b:
                    7b:26:1c:be:8c:6d:bd:8d:05:13:91:1a:78:f1:c5:
                    1e:5d:26:08:fb:2f:0c:b2:c0:b9:49:7f:3d:55:2f:
                    29:c2:49:8b:34:01:c7:d6:41:64:d5:ee:d3:f2:e3:
                    31:07:3e:12:6b:0c:a8:52:de:9a:ac:68:e5:a1:e2:
                    ff:ee:da:6b:d1:d3:ce:39:da:cf:0a:f6:7e:03:88:
                    61:a6:bc:d8:d5:39:52:f3:c5:0c:f6:78:0f:12:fe:
                    7e:55:68:8a:61:cd:63:5c:8a:95:4c:9a:7e:b8:a0:
                    1e:c6:b1:09:3d:36:4b:61:7d:d9:a3:4e:ad:33:58:
                    f8:b0:cd:f7:c7:12:48:1f:d7:6e:43:96:2d:c4:33:
                    44:d4:f8:31:fd:cb:1f:33:02:71:94:5c:43:db:3d:
                    4e:61:0c:fc:06:9e:54:2a:e1:8f:ed:45:f8:f6:24:
                    35:d3:4c:20:51:5f:cb:95:9b:b9:15:0d:ac:0f:e2:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:2C:A8:85:66:0F:36:0E:87:23:62:40:7E:74:C7:36:1D:FA:7D
            X509v3 Authority Key Identifier:
                keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:fb:77:5d:26:3e:3d:cc:a0:b7:44:40:a5:1c:0c:dd:59:
         bc:1c:9b:1d:f3:3b:cb:33:75:72:de:1f:a4:34:87:3d:dd:5b:
         27:2e:76:11:64:8f:bc:77:2b:70:84:eb:bd:3d:4a:23:89:dd:
         30:43:3e:bd:74:7f:82:11:04:c7:be:81:19:64:87:7c:b6:a1:
         79:9b:9d:a8:d8:1f:47:5d:7e:aa:52:08:2a:a3:62:3f:c8:d7:
         0e:54:df:32:8f:95:c2:43:32:83:f1:28:0c:2a:88:84:55:50:
         26:c5:1a:09:90:38:28:95:35:b1:0b:54:1b:e4:12:6d:93:71:
         f5:5d:ea:f0:e4:26:d0:4a:77:96:90:07:d5:70:33:41:24:be:
         2b:3a:38:8f:3a:d9:62:19:8d:db:16:6d:d0:56:de:dd:9c:38:
         20:bd:3b:36:9d:53:e7:4f:1c:8f:38:99:7c:f2:a3:1f:c3:b5:
         a7:c0:f3:f5:4f:f0:a2:01:a2:e0:4f:9f:9e:46:b0:88:7d:38:
         8b:b0:26:dc:22:9f:fb:0f:2c:5a:43:1d:eb:47:a2:1a:35:08:
         89:24:85:d2:b3:98:c5:c9:d7:b8:78:d6:62:c6:72:46:97:26:
         e0:92:01:bf:82:48:cb:df:cd:9e:6a:6d:63:ba:63:ab:2d:c6:
         ac:80:4d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPS+EdtE0ZfuV7qs36HAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjUwNDEzMTMwMTAxWhcNMjUwNDE0MTMwMTAxWjAzMTEwLwYDVQQD
EygwZWY4MmNhODg1NjYwZjM2MGU4NzIzNjI0MDdlNzRjNzM2MWRmYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wa8bl9QtkeTzF2X6jYI+DTckirb
623eb72mXNRmn9zC3e28cuZcXlrl4zaSTLqGrqquIEFTUbJU+nhyTdDX2ar4JczJ
p5HH4Zt7Jhy+jG29jQUTkRp48cUeXSYI+y8MssC5SX89VS8pwkmLNAHH1kFk1e7T
8uMxBz4SawyoUt6arGjloeL/7tpr0dPOOdrPCvZ+A4hhprzY1TlS88UM9ngPEv5+
VWiKYc1jXIqVTJp+uKAexrEJPTZLYX3Zo06tM1j4sM33xxJIH9duQ5YtxDNE1Pgx
/csfMwJxlFxD2z1OYQz8Bp5UKuGP7UX49iQ100wgUV/LlZu5FQ2sD+JNmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA74LKiFZg82DocjYkB+dMc2Hfp9MB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmj7d10m
Pj3MoLdEQKUcDN1ZvBybHfM7yzN1ct4fpDSHPd1bJy52EWSPvHcrcITrvT1KI4nd
MEM+vXR/ghEEx76BGWSHfLaheZudqNgfR11+qlIIKqNiP8jXDlTfMo+VwkMyg/Eo
DCqIhFVQJsUaCZA4KJU1sQtUG+QSbZNx9V3q8OQm0Ep3lpAH1XAzQSS+Kzo4jzrZ
YhmN2xZt0Fbe3Zw4IL07Np1T508cjziZfPKjH8O1p8Dz9U/wogGi4E+fnkawiH04
i7Am3CKf+w8sWkMd60eiGjUIiSSF0rOYxcnXuHjWYsZyRpcm4JIBv4JIy9/Nnmpt
Y7pjqy3GrIBNZQ==
-----END CERTIFICATE-----