Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File:                     y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier:          vPcTNEJGiwLoTlNClQqpoQC54Q0goVF3UVHK5ET1qRo=
Subject key identifier:   17:9E:D1:0D:DE:0C:B8:B1:8D:52:52:6C:56:14:5B:B3:53:60:DE:DF
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer:       /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial:       01962E2B417B37083E1FCDE2D28242BAE4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number:          0F87
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
                          2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: g7iXP0lfGuhfxT/EKN7swc16DLrJOdPZVtedEt9KtbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:7b:37:08:3e:1f:cd:e2:d2:82:42:ba:e4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=179ed10dde0cb8b18d52526c56145bb35360dedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:ce:95:57:0f:f2:53:f5:7e:a9:b0:f6:bc:
                    42:c6:d3:cd:4b:57:f5:55:71:a7:66:df:82:be:49:
                    67:3b:10:77:ef:17:a5:be:07:46:0c:c0:55:1d:76:
                    ff:98:18:17:bc:94:12:3f:df:aa:2c:e1:58:45:60:
                    20:12:46:dc:51:bd:00:ae:c4:3c:7f:c2:a7:54:14:
                    16:3f:75:72:f8:bd:70:c0:d2:92:d6:36:02:e5:ca:
                    1d:a9:35:ba:b6:06:ca:5b:7f:17:aa:4c:a1:cf:f6:
                    71:dd:98:79:bf:30:5b:c0:18:61:35:44:c4:20:ee:
                    e1:b7:ff:d7:cc:09:50:0b:7b:34:65:27:0f:91:b8:
                    c9:ba:1b:f8:a3:81:07:28:dc:3e:08:aa:fa:12:2f:
                    94:61:65:4f:21:a3:5d:e6:69:a4:0e:33:35:15:1b:
                    dd:f3:fc:3b:fc:f0:ef:89:39:06:69:47:6c:36:07:
                    67:69:41:5d:94:02:c2:4f:a1:9c:70:93:d9:20:7d:
                    73:a4:6a:55:04:8b:4f:c8:86:06:20:73:e7:5e:6e:
                    43:5e:ee:91:0d:73:58:27:ca:8f:4e:6b:83:68:76:
                    24:fe:e1:40:cd:6b:5c:ce:13:58:7a:6c:99:a4:8e:
                    4d:22:b7:af:bd:48:88:73:0a:f7:df:dd:bc:cb:78:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:D1:0D:DE:0C:B8:B1:8D:52:52:6C:56:14:5B:B3:53:60:DE:DF
            X509v3 Authority Key Identifier:
                keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5d:d8:08:1d:89:0c:57:ff:ef:ce:54:2d:0d:89:b1:9d:a9:
         be:c0:1e:d6:57:84:75:e7:18:cc:83:56:d8:45:16:f4:26:d8:
         e5:71:4c:b7:7f:59:69:00:52:b0:2c:4d:a3:b1:82:13:a1:34:
         d4:e9:98:36:dd:6e:f9:4a:6e:22:f3:7b:0f:e3:fb:99:21:6a:
         76:75:2d:ac:57:f3:fc:dc:cb:32:f9:6c:65:fc:60:e3:05:8b:
         06:0d:15:1c:51:98:62:06:e1:56:54:0d:17:ee:a5:3f:61:f5:
         ea:f2:1c:80:d8:6d:1c:db:e7:31:93:78:a0:4f:37:77:32:40:
         52:cd:69:cb:88:e8:93:61:42:60:60:2b:ed:36:62:47:2b:88:
         01:3f:73:fb:1a:40:3f:fb:d2:5e:2c:91:e5:35:6c:25:32:c8:
         e6:14:c9:96:3c:b5:c8:af:86:74:64:45:af:98:2f:bd:1f:eb:
         95:42:4d:d0:c2:03:0d:20:a3:34:67:51:14:df:40:2c:fb:aa:
         c9:80:0f:1f:cb:4b:df:5e:5c:be:33:38:de:eb:a9:d3:cd:80:
         e0:d1:e4:51:37:6b:9d:8c:d1:e2:3c:65:17:0a:9a:1b:7b:d8:
         a4:f2:cf:b1:67:e2:61:08:e2:6e:ce:a4:33:44:c7:66:3d:3e:
         9b:ca:af:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0F7Nwg+H83i0oJCuuSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EygxNzllZDEwZGRlMGNiOGIxOGQ1MjUyNmM1NjE0NWJiMzUzNjBkZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbfOlVcP8lP1fqmw9rxCxtPNS1f1
VXGnZt+CvklnOxB37xelvgdGDMBVHXb/mBgXvJQSP9+qLOFYRWAgEkbcUb0ArsQ8
f8KnVBQWP3Vy+L1wwNKS1jYC5codqTW6tgbKW38Xqkyhz/Zx3Zh5vzBbwBhhNUTE
IO7ht//XzAlQC3s0ZScPkbjJuhv4o4EHKNw+CKr6Ei+UYWVPIaNd5mmkDjM1FRvd
8/w7/PDviTkGaUdsNgdnaUFdlALCT6GccJPZIH1zpGpVBItPyIYGIHPnXm5DXu6R
DXNYJ8qPTmuDaHYk/uFAzWtczhNYemyZpI5NIrevvUiIcwr33928y3gjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBee0Q3eDLixjVJSbFYUW7NTYN7fMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF3YCB2J
DFf/785ULQ2JsZ2pvsAe1leEdecYzINW2EUW9CbY5XFMt39ZaQBSsCxNo7GCE6E0
1OmYNt1u+UpuIvN7D+P7mSFqdnUtrFfz/NzLMvlsZfxg4wWLBg0VHFGYYgbhVlQN
F+6lP2H16vIcgNhtHNvnMZN4oE83dzJAUs1py4jok2FCYGAr7TZiRyuIAT9z+xpA
P/vSXiyR5TVsJTLI5hTJljy1yK+GdGRFr5gvvR/rlUJN0MIDDSCjNGdRFN9ALPuq
yYAPH8tL315cvjM43uup082A4NHkUTdrnYzR4jxlFwqaG3vYpPLPsWfiYQjibs6k
M0THZj0+m8qvTA==
-----END CERTIFICATE-----