Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          WW1LqkhN6RyU+W503ghCulao9YEC+SNsGmQeYo5Ak44=
Subject key identifier:   10:1E:3D:AF:6D:12:88:28:9B:9F:F4:87:AF:15:46:69:15:F0:5D:EE
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       01962ECF71483F8AA0739E6C7AF06B5EBFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          DC
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: 7oCOzzl5ZWoQtrsiekI9Fmeum/ljngL/Wct8lo0ZATY=)
                          2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:48:3f:8a:a0:73:9e:6c:7a:f0:6b:5e:bf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=101e3daf6d1288289b9ff487af15466915f05dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:77:1d:3e:97:34:5b:43:54:57:14:1d:81:
                    70:2c:7e:9e:49:7c:8e:8f:5c:5b:d9:b7:be:85:69:
                    b8:73:1d:24:66:b7:0c:96:3d:23:2a:12:96:ac:08:
                    04:a1:13:d8:b4:82:24:af:eb:f2:87:a9:ba:97:69:
                    02:12:8a:d9:73:b0:09:46:f0:6e:89:1d:13:e1:29:
                    a5:54:95:69:d7:e1:10:20:2e:9a:6c:21:89:0d:24:
                    74:94:35:fd:28:b4:fe:28:80:ae:aa:21:92:31:f9:
                    e2:d4:22:3f:02:cd:b2:91:7f:a6:64:01:6c:2c:39:
                    17:71:5f:5e:54:0d:96:6c:18:59:d4:29:66:76:af:
                    9f:17:fc:6f:dc:fa:44:92:82:b8:a0:3d:7a:61:39:
                    da:a6:9f:86:3e:b2:15:7f:c7:f9:51:d0:09:a5:70:
                    65:dd:3c:bf:a7:a0:8b:72:84:77:06:dc:5c:c8:20:
                    73:ee:b6:9c:df:06:52:33:b5:b5:d5:d3:bd:41:e9:
                    35:d3:2f:db:27:ac:f8:10:30:af:16:fc:a9:83:b7:
                    35:32:52:50:de:5c:ef:ca:5d:c6:b1:44:6d:a6:57:
                    30:45:d5:c5:c4:1c:ae:c2:45:9a:54:43:c0:a2:48:
                    e3:3e:e8:19:75:53:78:50:d1:c9:81:bd:4f:0c:5a:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1E:3D:AF:6D:12:88:28:9B:9F:F4:87:AF:15:46:69:15:F0:5D:EE
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:23:d5:80:50:9a:ee:41:ec:a3:3f:86:14:d8:42:15:c6:
         91:85:2d:6d:82:d5:a6:19:a3:4e:28:2d:3e:39:15:f0:ef:35:
         3b:a2:2a:97:a7:f1:b7:6b:88:11:80:12:7b:45:8f:6b:94:e1:
         bb:0d:f9:af:e2:0e:52:3e:d3:fc:eb:b9:53:5a:27:e6:aa:c7:
         ce:ef:d9:e8:3c:da:9f:bf:fd:d2:ac:2c:96:34:cf:f5:cc:b1:
         9d:c2:c5:47:29:c3:54:de:29:1f:1a:f1:6e:47:f4:48:a4:7d:
         d9:09:9f:ee:53:c2:97:85:ef:b4:f2:87:d5:7c:a3:6b:c0:fe:
         1c:3f:49:c7:1d:0f:08:9c:c9:0d:26:74:62:d7:c4:78:21:9a:
         97:a4:06:50:df:8c:3c:8c:44:a8:09:b5:49:96:cf:f7:22:53:
         e4:84:05:59:ca:6c:b4:50:99:a3:40:2d:40:0c:8e:5e:01:b4:
         6b:1d:49:c6:d6:70:39:c5:1f:57:de:75:26:0b:ca:66:ac:e3:
         ba:a0:b7:fa:6f:50:03:fe:01:c5:0d:44:1e:ff:af:ea:da:23:
         b5:e1:d7:6f:d5:f3:55:b3:03:75:e4:3d:05:6a:d4:c3:1a:8e:
         b0:75:d9:c5:6a:ac:21:a4:49:6b:93:82:be:ee:79:7c:59:97:
         e2:d5:69:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3FIP4qgc55sevBrXr++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi
MmY5ZmUwHhcNMjUwNDEzMTEwMTA4WhcNMjUwNDE0MTEwMTA4WjAzMTEwLwYDVQQD
EygxMDFlM2RhZjZkMTI4ODI4OWI5ZmY0ODdhZjE1NDY2OTE1ZjA1ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQF3HT6XNFtDVFcUHYFwLH6eSXyO
j1xb2be+hWm4cx0kZrcMlj0jKhKWrAgEoRPYtIIkr+vyh6m6l2kCEorZc7AJRvBu
iR0T4SmlVJVp1+EQIC6abCGJDSR0lDX9KLT+KICuqiGSMfni1CI/As2ykX+mZAFs
LDkXcV9eVA2WbBhZ1Clmdq+fF/xv3PpEkoK4oD16YTnapp+GPrIVf8f5UdAJpXBl
3Ty/p6CLcoR3BtxcyCBz7rac3wZSM7W11dO9Qek10y/bJ6z4EDCvFvypg7c1MlJQ
3lzvyl3GsURtplcwRdXFxByuwkWaVEPAokjjPugZdVN4UNHJgb1PDFr9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAePa9tEogom5/0h68VRmkV8F3uMB8GA1UdIwQY
MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt
Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3
LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTYj1YBQ
mu5B7KM/hhTYQhXGkYUtbYLVphmjTigtPjkV8O81O6Iql6fxt2uIEYASe0WPa5Th
uw35r+IOUj7T/Ou5U1on5qrHzu/Z6Dzan7/90qwsljTP9cyxncLFRynDVN4pHxrx
bkf0SKR92Qmf7lPCl4XvtPKH1Xyja8D+HD9Jxx0PCJzJDSZ0YtfEeCGal6QGUN+M
PIxEqAm1SZbP9yJT5IQFWcpstFCZo0AtQAyOXgG0ax1JxtZwOcUfV951JgvKZqzj
uqC3+m9QA/4BxQ1EHv+v6tojteHXb9XzVbMDdeQ9BWrUwxqOsHXZxWqsIaRJa5OC
vu55fFmX4tVpTA==
-----END CERTIFICATE-----