Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File:                     5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier:          xEZB2540yztc8AsCLCgXH6d5JgqXu2HlJBYvujAx+Ok=
Subject key identifier:   A5:0A:22:5D:97:EE:24:A6:9B:9C:EC:B8:EB:EF:B6:78:00:29:B9:AD
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer:       /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial:       01962F0682734F55530B953B060DCD045226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number:          0C6B
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: gKb45dCCIiz/m0MC6q3EfArKnDLgqnyXmpPGfou1WQQ=)
                          2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:73:4f:55:53:0b:95:3b:06:0d:cd:04:52:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=a50a225d97ee24a69b9cecb8ebefb6780029b9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:47:4c:d3:e1:c5:eb:9d:e6:10:76:c0:70:
                    e2:2b:cf:36:f1:f1:55:f3:70:6d:bc:70:ac:f9:b6:
                    9b:f1:5e:e8:f0:21:de:b3:89:ef:30:ce:48:37:2d:
                    f0:eb:7e:45:35:62:71:db:02:23:5a:44:1d:34:48:
                    89:87:3e:ea:31:2c:ab:c9:fa:da:6c:4c:29:d0:73:
                    8a:84:e4:67:58:0c:27:d5:aa:92:51:99:12:72:38:
                    ee:a6:f0:13:d5:36:84:66:3a:82:75:f3:8b:4a:35:
                    a1:0c:64:df:77:05:18:19:71:63:3b:f3:9f:9b:74:
                    6b:74:be:15:0d:fe:1a:c4:ac:0e:37:c5:a3:8a:ed:
                    98:92:39:d1:06:79:93:e3:b9:05:b4:40:18:45:81:
                    75:79:bc:a9:9c:5e:ae:b5:7b:60:f3:f5:a6:d4:b2:
                    0f:27:22:81:e3:4e:53:af:02:3d:49:a5:fb:df:4e:
                    26:38:95:c4:11:6c:e3:d9:9e:8f:53:df:7f:0b:06:
                    37:54:ca:b9:31:62:f0:b0:4b:a2:f4:07:ac:82:ef:
                    54:c0:a3:a2:d5:cf:4d:8d:e9:14:6f:a3:63:9c:8b:
                    14:7a:26:46:07:dc:a8:a3:5a:d7:52:72:d2:51:c0:
                    19:c0:61:d4:33:75:d2:fe:18:d8:07:d4:b4:65:de:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0A:22:5D:97:EE:24:A6:9B:9C:EC:B8:EB:EF:B6:78:00:29:B9:AD
            X509v3 Authority Key Identifier:
                keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:14:e3:cb:ce:d2:d6:fd:84:32:bf:c0:89:d7:bd:46:70:
         0c:49:af:5e:fb:f9:23:54:2b:5e:02:ad:05:15:3c:5a:3f:79:
         5a:79:fa:59:0e:9e:0c:9e:f1:de:65:a1:ed:5c:bb:44:44:94:
         d8:a0:54:63:f4:a1:99:80:88:7d:e3:0f:88:7e:e1:07:7e:bf:
         7d:47:a7:1e:0b:6e:30:8a:a5:9b:13:50:31:81:1e:ed:03:cf:
         ab:14:d5:c8:17:eb:74:b3:bc:42:b0:ff:56:00:31:22:3b:8d:
         d6:b4:f7:d8:6e:58:ab:13:c2:b7:b1:10:a5:86:18:ca:0b:c8:
         87:68:8c:a5:28:80:75:9f:af:d0:d0:30:a1:9c:8f:28:ae:52:
         28:bb:44:91:3b:ef:ff:8d:3a:fb:5e:05:0f:25:69:d7:f2:f9:
         f6:f9:bd:02:37:71:3c:67:a7:df:08:b6:d8:d1:82:52:a4:0c:
         4c:5e:d9:c1:fc:65:22:f6:5e:78:0d:72:5f:5d:e1:10:63:7a:
         95:a2:51:56:cd:84:ec:44:38:87:45:42:1c:9c:17:5e:89:7c:
         7f:df:19:8d:34:89:3a:82:0b:3c:c5:d6:73:d6:e2:d3:11:f5:
         7f:9a:6c:fb:b3:f9:56:e6:53:6e:33:fc:63:0c:0e:80:5e:f2:
         86:10:81:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoJzT1VTC5U7Bg3NBFImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
EyhhNTBhMjI1ZDk3ZWUyNGE2OWI5Y2VjYjhlYmVmYjY3ODAwMjliOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9HTNPhxeud5hB2wHDiK8828fFV
83BtvHCs+bab8V7o8CHes4nvMM5INy3w635FNWJx2wIjWkQdNEiJhz7qMSyryfra
bEwp0HOKhORnWAwn1aqSUZkScjjupvAT1TaEZjqCdfOLSjWhDGTfdwUYGXFjO/Of
m3RrdL4VDf4axKwON8Wjiu2YkjnRBnmT47kFtEAYRYF1ebypnF6utXtg8/Wm1LIP
JyKB405TrwI9SaX7304mOJXEEWzj2Z6PU99/CwY3VMq5MWLwsEui9Aesgu9UwKOi
1c9NjekUb6NjnIsUeiZGB9yoo1rXUnLSUcAZwGHUM3XS/hjYB9S0Zd7nXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUKIl2X7iSmm5zsuOvvtngAKbmtMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbEU48vO
0tb9hDK/wInXvUZwDEmvXvv5I1QrXgKtBRU8Wj95Wnn6WQ6eDJ7x3mWh7Vy7RESU
2KBUY/ShmYCIfeMPiH7hB36/fUenHgtuMIqlmxNQMYEe7QPPqxTVyBfrdLO8QrD/
VgAxIjuN1rT32G5YqxPCt7EQpYYYygvIh2iMpSiAdZ+v0NAwoZyPKK5SKLtEkTvv
/406+14FDyVp1/L59vm9AjdxPGen3wi22NGCUqQMTF7ZwfxlIvZeeA1yX13hEGN6
laJRVs2E7EQ4h0VCHJwXXol8f98ZjTSJOoILPMXWc9bi0xH1f5ps+7P5VuZTbjP8
YwwOgF7yhhCBsA==
-----END CERTIFICATE-----