Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          u5ltRApH+Le2SDCzmRh85K9n1ZvpFCC4Ck5rsECFvvg=
Subject key identifier:   E0:E4:69:32:31:65:76:84:FE:D9:D9:09:12:92:D2:CF:E2:0A:FF:6E
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       01962F067A548E0A9485E2DFB4B3DFD296C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
                          2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: aqMuEYLfqx9Ik7bnwxw5CEru2WRa+QFnSxeE3KadMUU=)
                          3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
                          4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:54:8e:0a:94:85:e2:df:b4:b3:df:d2:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=e0e4693231657684fed9d9091292d2cfe20aff6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:a4:f7:e3:c5:0a:ff:ec:d3:88:4d:8d:ce:
                    e2:93:7a:13:18:75:b4:86:e9:cc:b1:d6:a4:c6:ff:
                    a4:f2:8f:ed:64:fa:7b:dc:0c:b8:1d:99:8c:4e:1e:
                    56:0d:da:7a:74:3e:28:94:e8:41:65:1d:94:04:04:
                    c0:be:05:2a:6f:46:74:44:44:08:0f:22:ca:39:10:
                    cf:f4:4f:31:4e:66:80:b6:b6:24:ae:a8:c4:cc:fd:
                    11:e6:d8:3d:84:f8:26:13:3f:5d:18:10:64:22:d3:
                    8a:40:e0:1e:b3:ba:aa:12:3c:8e:e1:46:99:7c:17:
                    82:cd:71:fe:a9:68:33:e3:22:3a:9a:13:dc:ae:ef:
                    47:bd:b5:21:d1:24:9d:4d:a2:02:15:3a:3a:e5:d9:
                    dc:9d:e2:0a:22:cf:59:82:4d:d9:d7:1a:cb:b4:a6:
                    5e:d4:d6:e1:b7:dc:59:f5:5c:b7:68:b4:b0:c4:c0:
                    4b:8e:01:b7:fb:fb:a0:6f:cd:59:13:12:ae:46:63:
                    5d:77:b8:7e:6c:6b:24:c8:a8:7a:3a:3f:71:40:5f:
                    ea:8d:99:48:54:d1:02:cc:a6:67:00:6c:ca:1e:a9:
                    c4:0f:a1:38:5d:cb:45:61:54:8d:22:73:e1:65:00:
                    d7:ad:fe:39:ce:04:a7:88:10:ad:c6:d1:b6:25:29:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:69:32:31:65:76:84:FE:D9:D9:09:12:92:D2:CF:E2:0A:FF:6E
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:b0:e4:48:84:ab:f5:2b:df:f2:46:dd:6b:8f:b6:7a:22:
         3e:ac:27:34:2a:16:44:07:d9:53:41:98:77:31:48:8a:38:4e:
         b7:98:3a:6e:56:a7:0e:4c:43:b9:4f:59:91:a1:f1:15:36:82:
         04:d7:f2:26:35:54:34:d9:b1:69:01:11:f9:f9:97:b6:4a:1e:
         a9:fe:33:70:e3:48:13:0e:61:1e:18:9a:06:b7:ee:d2:7e:c0:
         d3:5e:05:c7:3e:88:12:10:fc:c9:bb:fe:f6:ef:ed:04:d4:81:
         47:9b:db:b7:68:66:6a:51:f5:70:79:d0:e0:fd:55:cd:06:db:
         dd:b4:ec:2f:73:d0:6e:67:c2:39:82:c3:8d:09:87:a5:be:a6:
         c2:67:ad:50:63:28:85:ae:52:28:83:b0:f2:99:4c:63:07:99:
         06:27:7c:29:fa:dd:b4:61:92:60:15:b4:be:29:9d:14:0d:d5:
         d7:ec:4a:92:a3:0e:45:8e:c5:93:a6:ad:f4:aa:21:37:62:04:
         ce:8a:08:9a:65:15:a3:50:15:28:5c:0a:e7:ab:28:fe:e6:69:
         4f:a1:78:ed:52:97:d3:06:f4:8f:d9:7e:fe:e8:4f:79:1c:a0:
         31:2c:04:37:ab:ea:fa:7f:db:a3:3a:73:f4:e1:01:8c:9e:65:
         b3:61:f7:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnpUjgqUheLftLPf0pbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1
ZjI4OTgwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
EyhlMGU0NjkzMjMxNjU3Njg0ZmVkOWQ5MDkxMjkyZDJjZmUyMGFmZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc2k9+PFCv/s04hNjc7ik3oTGHW0
hunMsdakxv+k8o/tZPp73Ay4HZmMTh5WDdp6dD4olOhBZR2UBATAvgUqb0Z0REQI
DyLKORDP9E8xTmaAtrYkrqjEzP0R5tg9hPgmEz9dGBBkItOKQOAes7qqEjyO4UaZ
fBeCzXH+qWgz4yI6mhPcru9HvbUh0SSdTaICFTo65dncneIKIs9Zgk3Z1xrLtKZe
1Nbht9xZ9Vy3aLSwxMBLjgG3+/ugb81ZExKuRmNdd7h+bGskyKh6Oj9xQF/qjZlI
VNECzKZnAGzKHqnED6E4XctFYVSNInPhZQDXrf45zgSniBCtxtG2JSnqQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODkaTIxZXaE/tnZCRKS0s/iCv9uMB8GA1UdIwQY
MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt
ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh
LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcWw5EiE
q/Ur3/JG3WuPtnoiPqwnNCoWRAfZU0GYdzFIijhOt5g6blanDkxDuU9ZkaHxFTaC
BNfyJjVUNNmxaQER+fmXtkoeqf4zcONIEw5hHhiaBrfu0n7A014Fxz6IEhD8ybv+
9u/tBNSBR5vbt2hmalH1cHnQ4P1VzQbb3bTsL3PQbmfCOYLDjQmHpb6mwmetUGMo
ha5SKIOw8plMYweZBid8KfrdtGGSYBW0vimdFA3V1+xKkqMORY7Fk6at9KohN2IE
zooImmUVo1AVKFwK56so/uZpT6F47VKX0wb0j9l+/uhPeRygMSwEN6vq+n/bozpz
9OEBjJ5ls2H3pg==
-----END CERTIFICATE-----