Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          G3fj3eLJdduoS9+eAdNbxERmz7QXVYgEXmMEGRcJgVg=
Subject key identifier:   42:AA:F9:EB:B2:67:97:5D:1D:1B:2D:C9:25:AD:C9:B0:B3:FD:6C:70
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       01962F3D6A7F53AEB157059E04C6104DAF0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          0D82
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: /AiYFI6ATEoKI62J0PTfZlI/UYWMxImEgb59sarqc+c=)
                          2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6a:7f:53:ae:b1:57:05:9e:04:c6:10:4d:af:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=42aaf9ebb267975d1d1b2dc925adc9b0b3fd6c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:4a:f5:38:63:bd:86:a1:96:84:4c:ca:c1:
                    03:98:2b:40:86:4c:1e:e5:17:a6:91:1b:26:bc:01:
                    f6:d2:fc:ef:4e:23:1d:e9:67:21:f2:2a:13:f4:d5:
                    01:c3:b2:88:88:30:ff:53:cc:d8:58:79:82:5a:c0:
                    40:03:e5:fe:8d:e8:15:c4:df:d5:63:8c:0a:11:20:
                    0a:03:8c:28:36:ff:16:69:04:ad:27:b2:dd:a9:67:
                    11:38:64:3d:0e:6a:1f:ce:c2:4f:b2:ea:63:40:43:
                    1a:8e:92:56:98:1a:76:31:34:e8:81:0f:4d:a2:19:
                    c4:5f:b0:27:8b:3e:d9:00:51:93:f2:72:e3:58:ee:
                    2a:0d:3d:d8:9f:82:d0:06:9c:a2:4e:49:8f:fe:e8:
                    47:31:f4:7f:b4:8c:77:cc:14:b7:92:26:22:f9:2f:
                    01:86:45:c1:da:44:5c:ec:52:b1:df:03:e8:f9:a2:
                    12:07:51:e2:d8:08:f7:82:0a:c3:09:2f:63:17:3d:
                    2b:71:a2:5f:92:07:52:bc:92:37:dc:9f:2a:7b:40:
                    6f:3a:77:bd:ca:02:6c:43:c7:11:50:f5:57:6f:b9:
                    7a:8d:b1:f5:c3:66:80:b9:3d:38:20:50:8d:3f:cc:
                    49:94:69:ac:b4:b8:48:71:e7:a0:f1:61:65:ef:ae:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AA:F9:EB:B2:67:97:5D:1D:1B:2D:C9:25:AD:C9:B0:B3:FD:6C:70
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:62:ba:bf:5e:e7:e8:d6:ed:7a:1e:35:eb:e4:20:a2:b5:
         22:1e:c8:92:46:db:8d:a7:39:a8:6d:d9:eb:d8:9f:b0:0a:fb:
         5f:5f:65:bc:21:91:05:2d:f8:cc:ad:bd:f1:27:2c:b3:f9:67:
         70:d2:f8:48:83:2c:05:72:38:6f:df:25:59:5b:88:45:9f:1e:
         9b:ec:aa:ff:16:b8:49:5d:3e:df:e5:cf:b9:1a:4f:96:22:c2:
         3d:1c:0e:d2:a3:df:d4:40:ef:98:1b:5e:f1:a0:78:0e:88:1e:
         72:4f:f7:2e:4a:9c:b2:63:70:c8:a2:0a:64:78:9a:bb:c3:59:
         b4:b0:09:8f:dd:f6:03:b2:e9:a6:61:fa:87:bc:2c:77:30:47:
         d7:69:3a:17:47:f2:50:e2:e0:36:25:e4:52:af:7e:20:45:20:
         58:05:86:ac:a7:24:b1:5e:d6:28:d5:c4:fb:73:c3:e9:49:8f:
         ea:d3:d1:e7:eb:0e:04:28:85:19:ed:ed:83:ca:24:99:69:22:
         6b:0d:15:25:82:1a:7b:30:eb:25:b3:29:54:22:91:eb:bb:3e:
         aa:55:e0:f0:fb:be:f7:a7:6a:d6:2d:1d:da:5e:59:15:a0:b9:
         f2:c9:ff:01:91:ab:76:8e:e9:ba:c9:e4:0f:9a:13:4c:3d:48:
         75:5f:70:41
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvPWp/U66xVwWeBMYQTa8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3
YzMwNmUwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg0MmFhZjllYmIyNjc5NzVkMWQxYjJkYzkyNWFkYzliMGIzZmQ2YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA459K9ThjvYahloRMysEDmCtAhkwe
5RemkRsmvAH20vzvTiMd6Wch8ioT9NUBw7KIiDD/U8zYWHmCWsBAA+X+jegVxN/V
Y4wKESAKA4woNv8WaQStJ7LdqWcROGQ9DmofzsJPsupjQEMajpJWmBp2MTTogQ9N
ohnEX7Aniz7ZAFGT8nLjWO4qDT3Yn4LQBpyiTkmP/uhHMfR/tIx3zBS3kiYi+S8B
hkXB2kRc7FKx3wPo+aISB1Hi2Aj3ggrDCS9jFz0rcaJfkgdSvJI33J8qe0BvOne9
ygJsQ8cRUPVXb7l6jbH1w2aAuT04IFCNP8xJlGmstLhIceeg8WFl764/9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEKq+euyZ5ddHRstySWtybCz/WxwMB8GA1UdIwQY
MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw
LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy
OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY31i
ur9e5+jW7XoeNevkIKK1Ih7Ikkbbjac5qG3Z69ifsAr7X19lvCGRBS34zK298Scs
s/lncNL4SIMsBXI4b98lWVuIRZ8em+yq/xa4SV0+3+XPuRpPliLCPRwO0qPf1EDv
mBte8aB4Dogeck/3LkqcsmNwyKIKZHiau8NZtLAJj932A7LppmH6h7wsdzBH12k6
F0fyUOLgNiXkUq9+IEUgWAWGrKcksV7WKNXE+3PD6UmP6tPR5+sOBCiFGe3tg8ok
mWkiaw0VJYIaezDrJbMpVCKR67s+qlXg8Pu+96dq1i0d2l5ZFaC58sn/AZGrdo7p
usnkD5oTTD1IdV9wQQ==
-----END CERTIFICATE-----