Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File:                     5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier:          lf4kZB333ikzApKKIJTxZFf5LryrUaq7BcqkjrOX70o=
Subject key identifier:   8D:22:69:5A:5B:11:CC:BA:0F:E6:F9:15:5A:01:65:AA:BC:BA:D2:3E
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer:       /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial:       01962F0653C50AD23090B4CE28D5B33442DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: bT54ZQqNQgZHOh7KhJZy5Cq9/syPhnq0gt3569l8qQE=)
                          2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:53:c5:0a:d2:30:90:b4:ce:28:d5:b3:34:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=8d22695a5b11ccba0fe6f9155a0165aabcbad23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:2c:04:b1:ab:29:95:b8:3a:b1:c5:4b:2c:
                    63:62:b3:40:a9:33:a9:57:63:7d:dc:a7:a9:1f:54:
                    9b:2c:1a:fb:2e:df:57:7c:2d:31:67:44:c0:17:2c:
                    c1:9e:61:50:fb:32:ab:df:8b:76:7a:12:e8:ee:81:
                    36:09:e8:d6:7f:1b:0a:14:5e:fd:d4:5b:29:10:04:
                    dc:f0:4a:69:fd:96:31:b5:e9:44:26:69:36:50:cc:
                    95:02:45:9e:9d:8c:93:8c:37:f7:ad:b1:70:cb:3b:
                    11:a5:dc:9f:a0:ce:c8:84:81:ad:80:13:a3:84:2a:
                    ad:9d:72:00:c6:f9:db:f0:40:9e:6e:5e:b9:68:21:
                    49:cb:c5:e1:07:11:51:c8:bc:3e:ea:32:e9:f6:97:
                    35:98:d7:f7:5f:b2:07:36:b9:87:31:d4:07:b0:4c:
                    98:f8:41:96:c4:e2:3e:d2:04:77:cf:ea:e7:09:c9:
                    fb:82:9a:71:0e:59:c7:a7:94:ab:69:4a:b3:5f:b9:
                    83:0e:8c:bf:75:0d:07:34:2c:96:db:0a:1c:73:be:
                    08:00:76:c7:ba:8f:fd:da:92:a7:0e:91:92:55:56:
                    5c:ef:f7:f2:3b:f5:b0:37:58:5a:1c:24:95:7c:fc:
                    1e:74:5f:c6:f6:cc:eb:48:72:db:21:be:bf:66:d0:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:69:5A:5B:11:CC:BA:0F:E6:F9:15:5A:01:65:AA:BC:BA:D2:3E
            X509v3 Authority Key Identifier:
                keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:b8:b7:cd:d2:82:d3:87:fc:8a:73:7b:c7:8d:bf:5a:bd:
         3b:91:e4:9b:5b:c3:e1:a9:8d:13:e9:aa:6c:17:f1:b7:3c:2f:
         9c:1c:98:7b:76:10:90:6d:c0:f3:04:98:17:d2:a9:fe:85:e6:
         d9:c5:f0:75:1f:79:f2:b0:19:b2:37:15:67:3a:3d:b2:27:2e:
         d8:b5:2c:4f:fb:24:8f:8e:a9:c1:32:cc:bf:d7:0b:f0:dc:e2:
         a2:18:12:34:29:c0:bd:fe:3b:a7:bd:9e:ff:5a:bb:f7:85:7e:
         57:2d:c3:0b:c4:0c:90:66:2a:b2:ed:a2:37:e9:4d:2d:ad:41:
         4d:56:86:dc:02:83:df:f0:d8:aa:9e:92:81:7c:40:d5:a7:c1:
         ae:fe:47:2a:2e:96:f2:7a:84:db:b6:ba:be:65:e1:22:93:bb:
         e1:5e:80:09:31:36:a3:45:fc:53:9f:c6:ef:73:51:68:bc:19:
         c8:fc:bc:5f:d8:19:99:4e:ea:14:da:53:bc:75:9f:eb:0f:a4:
         6e:5e:bc:bb:b0:ee:24:0f:c6:f1:e5:34:33:65:ce:61:9d:36:
         77:05:0a:ca:f1:17:ea:db:3c:db:c8:05:a5:11:7c:5f:6d:5d:
         c4:a0:08:0a:72:07:20:86:b8:87:55:d7:81:d1:63:34:a5:05:
         33:af:04:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlPFCtIwkLTOKNWzNELfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh
ZDZiZTYwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDIyNjk1YTViMTFjY2JhMGZlNmY5MTU1YTAxNjVhYWJjYmFkMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ksBLGrKZW4OrHFSyxjYrNAqTOp
V2N93KepH1SbLBr7Lt9XfC0xZ0TAFyzBnmFQ+zKr34t2ehLo7oE2CejWfxsKFF79
1FspEATc8Epp/ZYxtelEJmk2UMyVAkWenYyTjDf3rbFwyzsRpdyfoM7IhIGtgBOj
hCqtnXIAxvnb8ECebl65aCFJy8XhBxFRyLw+6jLp9pc1mNf3X7IHNrmHMdQHsEyY
+EGWxOI+0gR3z+rnCcn7gppxDlnHp5SraUqzX7mDDoy/dQ0HNCyW2wocc74IAHbH
uo/92pKnDpGSVVZc7/fyO/WwN1haHCSVfPwedF/G9szrSHLbIb6/ZtDrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0iaVpbEcy6D+b5FVoBZaq8utI+MB8GA1UdIwQY
MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt
OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi
LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEu4t83S
gtOH/Ipze8eNv1q9O5Hkm1vD4amNE+mqbBfxtzwvnByYe3YQkG3A8wSYF9Kp/oXm
2cXwdR958rAZsjcVZzo9sicu2LUsT/skj46pwTLMv9cL8NziohgSNCnAvf47p72e
/1q794V+Vy3DC8QMkGYqsu2iN+lNLa1BTVaG3AKD3/DYqp6SgXxA1afBrv5HKi6W
8nqE27a6vmXhIpO74V6ACTE2o0X8U5/G73NRaLwZyPy8X9gZmU7qFNpTvHWf6w+k
bl68u7DuJA/G8eU0M2XOYZ02dwUKyvEX6ts828gFpRF8X21dxKAICnIHIIa4h1XX
gdFjNKUFM68Etg==
-----END CERTIFICATE-----