Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File:                     X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier:          wyav31HE9M0Y5XskXeu2Q/Go0usKYWxSXOfl62MwsEk=
Subject key identifier:   25:D6:0C:BB:82:C8:56:88:4F:79:B2:78:0F:38:DB:63:3F:BB:77:9D
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer:       /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial:       01962F0749A9E50EE053DDB0A52131CFD04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
                          2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
                          3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: lCApXhqSVlB4voVVtTto4OZ0QyxAhB8t5usK7bX/FdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:49:a9:e5:0e:e0:53:dd:b0:a5:21:31:cf:d0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=25d60cbb82c856884f79b2780f38db633fbb779d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:52:89:80:1b:7b:32:c2:9a:ec:70:46:db:
                    1f:0e:dd:d5:62:b5:53:ba:6c:e2:27:ad:2b:9a:e5:
                    c3:96:d7:37:90:03:0e:7d:3a:2e:c2:a5:6d:66:8d:
                    47:f3:a4:35:2a:e4:71:eb:83:7e:3d:cd:72:83:b8:
                    a4:78:87:3a:12:63:00:f7:2e:50:b2:0f:95:cf:dd:
                    57:5a:91:26:bb:6b:58:44:de:50:97:39:e9:dc:a7:
                    f9:ae:4a:d8:df:cf:ee:5d:d3:7f:5e:fe:9d:13:12:
                    64:d3:96:40:c5:98:f0:41:48:68:c8:43:f7:96:8e:
                    5f:54:8f:51:58:ce:78:06:ea:d2:d7:00:69:15:7e:
                    58:a9:7d:62:05:94:d6:b5:1e:87:65:08:e7:b9:eb:
                    70:51:91:e1:df:40:e6:4a:bd:dc:1e:dd:f5:87:d6:
                    d2:a2:29:01:10:18:ef:f7:6c:a7:f0:b5:4b:6a:14:
                    aa:dc:a6:de:43:04:27:5e:b6:ce:0b:67:7a:8b:22:
                    06:f3:6d:5f:94:df:cd:e1:03:e4:42:15:43:d7:6e:
                    dc:b7:dd:94:9e:ba:54:82:5c:69:a6:c5:ca:89:77:
                    c0:ee:af:91:c6:ee:4f:3b:34:1b:8e:0b:fe:ec:c6:
                    73:0e:f7:92:6e:e7:e5:e5:d8:33:08:9f:97:d9:99:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:0C:BB:82:C8:56:88:4F:79:B2:78:0F:38:DB:63:3F:BB:77:9D
            X509v3 Authority Key Identifier:
                keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:0e:7c:e0:ab:63:ae:63:dc:5d:3f:90:ae:b6:42:e7:62:
         48:9a:82:3a:af:0d:fd:38:6f:49:2c:5f:70:99:57:7b:cf:60:
         06:42:8b:f5:c1:01:3a:3a:aa:fb:26:30:b5:3c:1b:98:2c:fc:
         16:2f:89:b4:e5:12:77:ff:a3:58:67:41:65:57:be:a9:9a:70:
         dc:f0:e2:32:07:59:50:36:d8:a6:3f:79:1a:91:06:06:40:c2:
         a4:2d:53:1c:77:de:eb:8a:e4:85:11:f2:ff:66:98:40:ab:54:
         74:79:c1:d6:ec:01:1f:27:c3:d4:f9:fc:ed:8f:77:2a:b7:0a:
         33:f1:9a:c4:90:37:4d:76:b7:39:d7:50:84:8e:b2:25:c9:74:
         52:a6:9e:b5:b0:b9:b5:32:25:21:ed:67:c2:34:a6:dd:eb:c5:
         35:3d:29:32:0c:f4:ea:bd:8c:b7:3f:04:b8:62:be:30:f6:91:
         00:ad:b5:f4:13:a0:8a:87:77:46:0b:59:7d:b4:f9:9a:5e:68:
         0c:c2:b5:16:1d:a2:93:03:66:ad:0b:49:af:00:59:a5:c0:45:
         23:66:72:36:f7:32:c6:99:3e:4d:27:44:8e:41:b9:eb:55:5b:
         ec:d8:77:18:28:50:87:02:9d:b2:50:2b:6e:ef:89:2c:9f:06:
         9e:cc:19:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0mp5Q7gU92wpSExz9BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5
ZTZlYWUwHhcNMjUwNDEzMTIwMjA4WhcNMjUwNDE0MTIwMjA4WjAzMTEwLwYDVQQD
EygyNWQ2MGNiYjgyYzg1Njg4NGY3OWIyNzgwZjM4ZGI2MzNmYmI3NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwJSiYAbezLCmuxwRtsfDt3VYrVT
umziJ60rmuXDltc3kAMOfTouwqVtZo1H86Q1KuRx64N+Pc1yg7ikeIc6EmMA9y5Q
sg+Vz91XWpEmu2tYRN5Qlznp3Kf5rkrY38/uXdN/Xv6dExJk05ZAxZjwQUhoyEP3
lo5fVI9RWM54BurS1wBpFX5YqX1iBZTWtR6HZQjnuetwUZHh30DmSr3cHt31h9bS
oikBEBjv92yn8LVLahSq3KbeQwQnXrbOC2d6iyIG821flN/N4QPkQhVD127ct92U
nrpUglxppsXKiXfA7q+Rxu5POzQbjgv+7MZzDveSbufl5dgzCJ+X2ZmUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXWDLuCyFaIT3myeA8422M/u3edMB8GA1UdIwQY
MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt
MDA1Y2I0ZGNhNjNmLzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm
LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcwOfOCr
Y65j3F0/kK62QudiSJqCOq8N/ThvSSxfcJlXe89gBkKL9cEBOjqq+yYwtTwbmCz8
Fi+JtOUSd/+jWGdBZVe+qZpw3PDiMgdZUDbYpj95GpEGBkDCpC1THHfe64rkhRHy
/2aYQKtUdHnB1uwBHyfD1Pn87Y93KrcKM/GaxJA3TXa3OddQhI6yJcl0UqaetbC5
tTIlIe1nwjSm3evFNT0pMgz06r2Mtz8EuGK+MPaRAK219BOgiod3RgtZfbT5ml5o
DMK1Fh2ikwNmrQtJrwBZpcBFI2ZyNvcyxpk+TSdEjkG561Vb7Nh3GChQhwKdslAr
bu+JLJ8GnswZlg==
-----END CERTIFICATE-----