Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          9nfOXSpx7VZUfRnBcozdxRrwJo4E1IecOccNV9PoX7U=
Subject key identifier:   78:8B:61:B9:B9:62:51:FB:0A:AE:97:69:D3:33:05:E7:DD:C4:2C:E6
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       01962E2B4B1FC919F2D562018CC3E4612FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          1267
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
                          2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: THofFzq9VBuSF+z+skszpfNtY5sUS9s8cvpJ1E67AJc=)
                          3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
                          4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
                          5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
                          6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4b:1f:c9:19:f2:d5:62:01:8c:c3:e4:61:2f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=788b61b9b96251fb0aae9769d33305e7ddc42ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:0b:e3:f3:2c:39:88:f7:c0:35:25:44:20:
                    c2:ff:4e:83:e6:b1:6b:8d:cc:2d:13:4b:7d:c9:dd:
                    81:be:81:c4:4c:6f:a8:a3:25:cb:26:a1:50:0d:97:
                    01:c7:1a:e4:57:c2:a3:a5:8f:05:4b:a6:7b:31:e8:
                    4e:7d:02:16:bc:2b:37:11:a2:69:cb:ce:47:28:5c:
                    fd:47:62:37:20:5d:42:de:33:82:66:2a:4a:d7:64:
                    d2:02:ad:6f:74:f1:a4:ce:55:d0:7f:a2:87:1a:59:
                    af:87:10:f9:fc:f2:b6:3e:1c:8a:76:28:c9:e4:f2:
                    ea:9c:2d:3d:3a:de:cb:db:23:1f:3c:6a:35:21:36:
                    93:d0:8b:c5:b5:ac:b1:fd:02:9a:af:72:68:0e:fc:
                    09:43:16:11:ee:79:30:a4:fe:a4:5e:00:91:db:68:
                    39:bd:a8:53:7c:5a:38:bd:58:8b:4c:b6:66:b2:77:
                    52:e5:b6:a2:e3:d7:22:eb:23:d4:89:23:f9:b8:9b:
                    16:ff:fd:91:94:b7:7b:29:1a:ac:19:c4:07:72:34:
                    64:be:c9:18:e3:58:12:2e:83:15:2c:05:d9:a4:59:
                    fd:08:90:a6:ff:82:08:55:77:83:5a:02:bc:fa:d2:
                    c6:58:db:85:ab:c3:8d:d4:ce:2d:9a:4c:31:b4:c6:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:61:B9:B9:62:51:FB:0A:AE:97:69:D3:33:05:E7:DD:C4:2C:E6
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:58:c3:13:12:76:ad:24:34:b7:99:2b:4f:96:d2:84:0f:d8:
         e7:56:c6:62:d9:db:dc:ad:93:b9:bb:89:4a:61:ca:ec:51:18:
         46:b6:31:6f:fc:43:39:bd:5b:30:31:eb:01:df:bf:8a:c2:48:
         bb:ed:8b:67:29:10:ae:66:5c:2f:0a:74:5c:dd:b8:44:60:62:
         15:fa:4f:dd:c5:28:74:25:37:cd:1d:ba:7c:81:23:7f:33:c8:
         84:a6:16:5b:5a:aa:d6:fb:61:2a:1b:2e:3b:20:d4:eb:fa:d2:
         03:cf:0d:11:92:38:98:83:9f:02:37:35:5f:05:35:3b:cf:7a:
         4a:1d:4f:1d:ee:c9:8f:9f:59:8b:30:d8:93:25:e4:db:04:44:
         8f:9e:23:f7:b0:26:64:77:80:01:7b:5a:d8:5b:14:66:9e:eb:
         0f:77:e3:90:53:8f:b1:10:30:5b:9a:85:ea:c5:80:d3:32:30:
         a8:08:3b:94:1f:4e:88:c7:d1:bd:39:f2:4b:59:a6:4e:17:ae:
         7d:de:c4:2c:c4:a7:ed:e8:c3:79:b7:ad:44:da:5b:50:2f:ee:
         ce:ab:68:3b:8c:5a:34:3f:96:8e:82:83:22:b1:c3:4a:4b:c3:
         d0:7b:b7:b7:a0:ca:8c:69:f1:15:33:c3:02:84:49:8d:35:24:
         cb:a8:6d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0sfyRny1WIBjMPkYS//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0
YWUyYzUwHhcNMjUwNDEzMDgwMTUxWhcNMjUwNDE0MDgwMTUxWjAzMTEwLwYDVQQD
Eyg3ODhiNjFiOWI5NjI1MWZiMGFhZTk3NjlkMzMzMDVlN2RkYzQyY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtAL4/MsOYj3wDUlRCDC/06D5rFr
jcwtE0t9yd2BvoHETG+ooyXLJqFQDZcBxxrkV8KjpY8FS6Z7MehOfQIWvCs3EaJp
y85HKFz9R2I3IF1C3jOCZipK12TSAq1vdPGkzlXQf6KHGlmvhxD5/PK2PhyKdijJ
5PLqnC09Ot7L2yMfPGo1ITaT0IvFtayx/QKar3JoDvwJQxYR7nkwpP6kXgCR22g5
vahTfFo4vViLTLZmsndS5bai49ci6yPUiSP5uJsW//2RlLd7KRqsGcQHcjRkvskY
41gSLoMVLAXZpFn9CJCm/4IIVXeDWgK8+tLGWNuFq8ON1M4tmkwxtMb98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiLYbm5YlH7Cq6XadMzBefdxCzmMB8GA1UdIwQY
MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt
NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5
LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFjDExJ2
rSQ0t5krT5bShA/Y51bGYtnb3K2TubuJSmHK7FEYRrYxb/xDOb1bMDHrAd+/isJI
u+2LZykQrmZcLwp0XN24RGBiFfpP3cUodCU3zR26fIEjfzPIhKYWW1qq1vthKhsu
OyDU6/rSA88NEZI4mIOfAjc1XwU1O896Sh1PHe7Jj59ZizDYkyXk2wREj54j97Am
ZHeAAXta2FsUZp7rD3fjkFOPsRAwW5qF6sWA0zIwqAg7lB9OiMfRvTnyS1mmTheu
fd7ELMSn7ejDebetRNpbUC/uzqtoO4xaND+WjoKDIrHDSkvD0Hu3t6DKjGnxFTPD
AoRJjTUky6ht1A==
-----END CERTIFICATE-----