Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          XLGEE0wfXyQfEvElLQsFx8DU1D9NeOgdlCtIP3psZak=
Subject key identifier:   52:58:0D:C2:4E:0A:5C:A7:E1:BF:F4:19:44:CA:BC:E5:A1:E6:45:7C
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       01962DF3E45E487F5CA1FE0814C1A6C0F6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: djN0IQSci1lpzNE+spY0hP9kZMaLfSukMFyWsDleAaI=)
                          2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:5e:48:7f:5c:a1:fe:08:14:c1:a6:c0:f6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=52580dc24e0a5ca7e1bff41944cabce5a1e6457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:2c:64:94:90:3f:1f:fb:cf:dc:28:15:b3:
                    d2:0a:e4:05:f2:eb:93:bd:e5:60:3d:38:07:fa:d7:
                    88:bb:cf:d2:55:1f:58:c7:65:1b:20:a3:62:fd:98:
                    cd:f2:d6:e1:77:6c:37:4d:7d:04:91:7d:7a:2c:b8:
                    2c:68:8f:34:6c:6d:e2:79:79:e3:ed:86:58:9a:b4:
                    30:26:8d:fb:ae:71:58:aa:11:4a:4b:ef:26:1d:e1:
                    7a:42:70:ac:61:88:83:4f:47:0e:df:b0:32:fd:e2:
                    aa:0f:4a:66:eb:e4:40:c4:78:3d:1b:96:26:30:92:
                    16:c4:7b:1b:b8:d4:59:c3:11:76:90:df:8c:26:25:
                    61:9e:15:ff:13:c6:24:47:fb:ad:6a:20:09:17:c6:
                    a7:ed:b6:4f:de:46:c4:66:91:09:b1:3d:ac:be:7e:
                    c1:0f:fa:7f:50:69:bd:98:09:74:e2:93:b4:41:e4:
                    8b:97:7d:7c:bb:1a:5d:3c:8c:d4:a8:e9:f8:4f:98:
                    3c:4d:74:da:dd:88:a6:6f:ad:73:11:41:00:35:80:
                    d4:65:59:84:65:a4:2c:2a:78:3f:2f:21:85:9d:48:
                    6c:09:82:1e:5f:eb:09:ee:a5:98:2f:aa:91:e5:cb:
                    d0:6b:17:70:8a:2e:a7:d8:30:69:3f:da:f0:fc:4d:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:0D:C2:4E:0A:5C:A7:E1:BF:F4:19:44:CA:BC:E5:A1:E6:45:7C
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:da:67:d4:9a:e0:30:f8:93:f2:55:60:00:5b:81:16:96:29:
         c8:1b:24:5d:d5:60:d7:e0:4a:1d:28:7d:2a:fa:ea:0b:4a:e6:
         f7:71:8b:03:fc:48:20:2b:b9:e3:9e:1c:ab:64:dc:91:0c:89:
         23:c6:24:47:6c:03:71:79:d5:cc:d2:a7:0c:41:66:fe:a5:3b:
         85:cc:11:16:e5:87:6a:16:23:d0:e6:e2:a9:d5:a2:11:5a:14:
         5c:51:f3:07:0b:a6:48:bc:bb:f7:27:4c:07:c1:ab:be:17:78:
         12:4b:ea:6c:46:5c:6d:6f:ab:74:34:b1:6f:78:86:7e:7a:a1:
         9d:17:f7:c9:40:11:c8:45:0f:18:d0:26:35:5d:c5:a8:ac:73:
         d4:1a:c2:44:26:10:b5:11:e9:e7:15:d1:bf:81:c6:3a:fb:1e:
         5e:f2:2f:a5:f0:6f:fa:41:71:35:50:f5:11:59:93:59:af:1a:
         b2:e4:ec:da:fe:3c:71:cd:46:96:30:da:19:66:42:5d:a9:f0:
         1d:34:1c:92:c4:14:5d:c5:5f:72:57:95:7c:a2:90:4e:46:43:
         a8:a9:e1:9a:20:34:03:25:18:e9:43:5c:3a:43:c2:e8:55:77:
         0e:48:0b:d7:3d:2a:aa:32:b5:8a:8d:30:eb:84:70:0d:28:20:
         5f:ce:83:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+ReSH9cof4IFMGmwPbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh
NTExY2MwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
Eyg1MjU4MGRjMjRlMGE1Y2E3ZTFiZmY0MTk0NGNhYmNlNWExZTY0NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT4sZJSQPx/7z9woFbPSCuQF8uuT
veVgPTgH+teIu8/SVR9Yx2UbIKNi/ZjN8tbhd2w3TX0EkX16LLgsaI80bG3ieXnj
7YZYmrQwJo37rnFYqhFKS+8mHeF6QnCsYYiDT0cO37Ay/eKqD0pm6+RAxHg9G5Ym
MJIWxHsbuNRZwxF2kN+MJiVhnhX/E8YkR/utaiAJF8an7bZP3kbEZpEJsT2svn7B
D/p/UGm9mAl04pO0QeSLl318uxpdPIzUqOn4T5g8TXTa3Yimb61zEUEANYDUZVmE
ZaQsKng/LyGFnUhsCYIeX+sJ7qWYL6qR5cvQaxdwii6n2DBpP9rw/E0mWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJYDcJOClyn4b/0GUTKvOWh5kV8MB8GA1UdIwQY
MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt
ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy
LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9pn1Jrg
MPiT8lVgAFuBFpYpyBskXdVg1+BKHSh9KvrqC0rm93GLA/xIICu5454cq2TckQyJ
I8YkR2wDcXnVzNKnDEFm/qU7hcwRFuWHahYj0ObiqdWiEVoUXFHzBwumSLy79ydM
B8Grvhd4EkvqbEZcbW+rdDSxb3iGfnqhnRf3yUARyEUPGNAmNV3FqKxz1BrCRCYQ
tRHp5xXRv4HGOvseXvIvpfBv+kFxNVD1EVmTWa8asuTs2v48cc1GljDaGWZCXanw
HTQcksQUXcVfcleVfKKQTkZDqKnhmiA0AyUY6UNcOkPC6FV3DkgL1z0qqjK1io0w
64RwDSggX86DIQ==
-----END CERTIFICATE-----