Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File:                     H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier:          ++N2w/4KLUJo83HekkFEheTNPNzy+vjd8hu1v5HRNNw=
Subject key identifier:   B6:95:C6:0B:EB:48:3E:10:9A:29:19:42:E6:32:25:CB:18:E7:6B:1F
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer:       /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial:       01962DF398E5723826E842FE6CFCBEF8436A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number:          09EE
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: 1i5yeIxROY3M6jm3Vm6qLJW8ycuqjlGSebNjGiFrHlI=)
                          2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:98:e5:72:38:26:e8:42:fe:6c:fc:be:f8:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=b695c60beb483e109a291942e63225cb18e76b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:b9:4b:53:d7:30:19:d5:dd:83:21:b7:2b:
                    77:26:44:65:21:56:91:3c:69:c5:7e:ec:74:55:8e:
                    d1:a1:32:99:ee:ae:96:ca:41:97:e5:91:0d:a0:cb:
                    c7:e5:d4:ca:a6:a7:58:a8:50:ff:7d:a2:00:4a:10:
                    08:c0:f9:7e:57:f9:34:78:59:5f:a4:a2:93:98:26:
                    30:92:55:1e:5e:51:79:8d:26:9e:1d:c8:56:21:75:
                    dd:7f:53:60:4e:8c:7c:e8:b2:dc:c5:29:86:6f:44:
                    cb:2b:68:e6:2a:00:9e:3d:59:65:a0:dd:cc:81:aa:
                    b6:7c:b0:7a:7f:23:cc:a3:0a:a9:28:c6:83:d4:5d:
                    92:99:fc:ea:77:8b:56:89:ee:c1:57:c3:cc:c3:09:
                    6f:93:9f:1a:31:92:e1:79:93:7e:97:b0:11:05:4f:
                    52:6d:34:98:7f:68:42:02:8d:95:fe:ed:91:03:4b:
                    5b:7e:08:0e:ed:36:f6:7e:9b:62:39:b0:5b:a6:1c:
                    0b:4a:85:6b:f0:22:a1:90:48:1f:77:7d:a9:3a:1b:
                    51:61:d9:11:73:ad:56:64:64:7e:04:37:86:97:84:
                    bc:3e:ed:37:54:25:a2:bd:ed:a5:df:cf:c8:6b:33:
                    a6:ec:a2:53:9a:50:e9:16:30:4d:4b:f9:2e:35:1d:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:95:C6:0B:EB:48:3E:10:9A:29:19:42:E6:32:25:CB:18:E7:6B:1F
            X509v3 Authority Key Identifier:
                keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:08:12:79:f8:e6:0f:d6:cd:39:2c:9a:8a:19:22:84:ef:35:
         9a:4e:a2:b7:f9:36:f4:e2:fe:32:67:47:0c:d3:d4:f0:cf:e3:
         2c:70:a0:a8:8c:53:39:46:3b:f5:70:1c:07:4d:df:e2:fb:d3:
         df:9c:9f:b8:a8:02:a1:4d:a6:98:6b:10:63:42:94:77:d9:cd:
         be:46:5a:32:c7:ce:11:ed:1b:46:17:45:4c:d7:ba:a5:48:c2:
         51:88:ab:e9:75:82:c0:6e:50:37:8f:53:d7:66:a3:93:ff:be:
         94:0c:a3:fd:48:a6:d8:4d:cf:e2:7b:65:8e:20:7b:70:06:d7:
         bf:e1:a5:87:63:a6:ad:25:24:2a:6a:11:3c:d7:1d:e5:93:4a:
         e6:f6:e2:95:b9:9b:ff:11:88:23:48:23:96:57:ed:0a:6b:59:
         37:df:45:32:7f:e1:91:f8:8f:f0:72:5f:34:f7:02:ca:34:51:
         72:95:63:e7:80:b5:dc:39:7e:84:98:ff:9c:a4:27:fc:51:9e:
         6c:0e:15:5b:77:58:a3:6f:32:e0:27:54:ed:b8:f1:fe:d0:f3:
         d4:68:26:2d:f0:61:e3:c1:56:5e:87:8c:0a:24:46:ef:f5:fc:
         d6:de:81:63:a4:37:71:b4:8e:27:7b:1f:3d:f6:e9:57:a7:0e:
         57:ce:9d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85jlcjgm6EL+bPy++ENqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw
YWNkZjUwHhcNMjUwNDEzMDcwMTAxWhcNMjUwNDE0MDcwMTAxWjAzMTEwLwYDVQQD
EyhiNjk1YzYwYmViNDgzZTEwOWEyOTE5NDJlNjMyMjVjYjE4ZTc2YjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMa5S1PXMBnV3YMhtyt3JkRlIVaR
PGnFfux0VY7RoTKZ7q6WykGX5ZENoMvH5dTKpqdYqFD/faIAShAIwPl+V/k0eFlf
pKKTmCYwklUeXlF5jSaeHchWIXXdf1NgTox86LLcxSmGb0TLK2jmKgCePVlloN3M
gaq2fLB6fyPMowqpKMaD1F2Smfzqd4tWie7BV8PMwwlvk58aMZLheZN+l7ARBU9S
bTSYf2hCAo2V/u2RA0tbfggO7Tb2fptiObBbphwLSoVr8CKhkEgfd32pOhtRYdkR
c61WZGR+BDeGl4S8Pu03VCWive2l38/IazOm7KJTmlDpFjBNS/kuNR25GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaVxgvrSD4QmikZQuYyJcsY52sfMB8GA1UdIwQY
MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt
NDk2YWJlZTdjZTc5LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5
LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswgSefjm
D9bNOSyaihkihO81mk6it/k29OL+MmdHDNPU8M/jLHCgqIxTOUY79XAcB03f4vvT
35yfuKgCoU2mmGsQY0KUd9nNvkZaMsfOEe0bRhdFTNe6pUjCUYir6XWCwG5QN49T
12ajk/++lAyj/Uim2E3P4ntljiB7cAbXv+Glh2OmrSUkKmoRPNcd5ZNK5vbilbmb
/xGII0gjllftCmtZN99FMn/hkfiP8HJfNPcCyjRRcpVj54C13Dl+hJj/nKQn/FGe
bA4VW3dYo28y4CdU7bjx/tDz1GgmLfBh48FWXoeMCiRG7/X81t6BY6Q3cbSOJ3sf
PfbpV6cOV86dAQ==
-----END CERTIFICATE-----