Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File:                     T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier:          Ttj5OhHlKbWsGSkHlFQj5GosvWV9HCbXyVE2ipaZ+M0=
Subject key identifier:   6A:D4:B7:12:9D:6B:D7:00:09:8E:D6:5E:17:E5:44:48:BB:39:7E:F9
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer:       /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial:       01962F74CB820FF99D83DC609BDC66423A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: PHtHgmSOY6QlNjsIyECg_KW7ZYU.roa (hash: cSzW9+Tdn6riD70yyykVu3Jxk7SzmVYuL8aIL6ZeXmM=)
                          2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: 8YIcJnJRQEDKk5Ws7JgNVMX3Vb8xl89KCOXX1GoB6uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:82:0f:f9:9d:83:dc:60:9b:dc:66:42:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=6ad4b7129d6bd700098ed65e17e54448bb397ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:a2:e4:29:ae:81:27:3a:9c:3b:41:64:44:
                    bc:45:f7:a4:c0:58:53:ae:69:f9:f6:87:6c:20:8c:
                    34:2a:91:31:bb:8c:64:ea:68:93:9d:d8:1f:90:af:
                    2d:93:25:c5:09:2b:2a:69:02:f5:94:eb:6d:9a:62:
                    9c:dd:5d:54:fc:e1:a2:a6:42:dd:4d:05:37:ff:7b:
                    94:c4:68:cc:0e:36:5c:1f:a4:28:79:98:48:bd:d9:
                    e2:52:ea:dd:24:41:88:d0:59:92:67:d3:64:a4:cf:
                    ee:35:d0:8a:96:57:d8:1d:a6:72:ee:8f:e8:82:db:
                    28:cd:be:89:0f:fc:68:05:31:40:9c:1e:ca:d8:4e:
                    3a:1c:c9:8f:66:0f:f3:eb:5f:f9:c6:76:89:0d:2f:
                    f1:7b:6e:70:7e:7b:a9:ee:7d:da:42:b3:59:13:2f:
                    8a:ed:1f:cf:46:13:ce:a0:35:e9:75:59:e4:a4:e7:
                    9d:8b:3b:77:34:41:51:dc:a8:bf:2b:f0:6b:da:b9:
                    4d:79:19:ae:cc:f7:fe:2d:aa:01:9a:f3:29:4e:d8:
                    74:f7:9d:e2:a9:ab:b1:f1:2b:23:7a:42:2d:a7:06:
                    62:54:c9:4e:4f:04:c2:5b:b7:d1:8d:f0:75:97:1e:
                    ae:a1:b3:7a:4c:8c:66:1c:ca:42:f4:a3:82:24:fb:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:B7:12:9D:6B:D7:00:09:8E:D6:5E:17:E5:44:48:BB:39:7E:F9
            X509v3 Authority Key Identifier:
                keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:99:24:0f:8f:76:79:83:79:15:f0:dc:f8:65:f7:10:3e:6e:
         0e:10:29:e9:ad:e4:a3:97:de:cd:3e:81:55:8a:3c:54:fb:5e:
         e2:74:29:d1:f7:a1:fc:47:54:16:27:1d:2a:73:1c:e4:2f:cf:
         88:47:71:d3:4a:7c:d5:7e:3f:05:1f:93:d7:1d:aa:e4:ef:93:
         dd:70:7b:f2:bd:b7:fe:05:cb:4d:0d:a3:d7:52:30:3a:5c:2b:
         1d:fc:22:d3:a7:c4:de:af:b2:e8:ed:e8:56:81:ee:ff:e0:f7:
         c7:eb:45:1c:fb:da:64:ae:bd:b6:81:de:8b:1c:c7:21:e0:3f:
         eb:04:27:d4:d0:e3:96:ab:36:f4:dc:b0:a8:de:f8:32:2d:53:
         a7:dd:48:14:8c:65:0f:9d:f2:82:76:57:94:5e:3a:d3:27:a4:
         78:8f:2a:61:43:f6:a4:23:10:eb:d2:c0:db:d7:ae:ba:2a:8a:
         aa:6b:ad:07:3c:57:67:04:ba:23:64:eb:95:c7:2d:47:2d:d3:
         59:67:91:b5:29:e4:ff:26:70:fd:5d:00:5e:09:18:a9:32:69:
         dd:0c:ac:4b:1d:6f:91:68:73:9f:f7:be:48:ab:08:1f:12:c3:
         57:49:38:77:72:fd:68:d0:cd:86:94:f7:b5:2d:7c:39:0b:c3:
         b8:b9:d6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMuCD/mdg9xgm9xmQjprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm
OTYxYTQwHhcNMjUwNDEzMTQwMTQ1WhcNMjUwNDE0MTQwMTQ1WjAzMTEwLwYDVQQD
Eyg2YWQ0YjcxMjlkNmJkNzAwMDk4ZWQ2NWUxN2U1NDQ0OGJiMzk3ZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuqi5CmugSc6nDtBZES8RfekwFhT
rmn59odsIIw0KpExu4xk6miTndgfkK8tkyXFCSsqaQL1lOttmmKc3V1U/OGipkLd
TQU3/3uUxGjMDjZcH6QoeZhIvdniUurdJEGI0FmSZ9NkpM/uNdCKllfYHaZy7o/o
gtsozb6JD/xoBTFAnB7K2E46HMmPZg/z61/5xnaJDS/xe25wfnup7n3aQrNZEy+K
7R/PRhPOoDXpdVnkpOedizt3NEFR3Ki/K/Br2rlNeRmuzPf+LaoBmvMpTth0953i
qaux8SsjekItpwZiVMlOTwTCW7fRjfB1lx6uobN6TIxmHMpC9KOCJPv2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrUtxKda9cACY7WXhflREi7OX75MB8GA1UdIwQY
MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct
NDM2YWI0YWRlMGE3LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3
LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpkkD492
eYN5FfDc+GX3ED5uDhAp6a3ko5fezT6BVYo8VPte4nQp0feh/EdUFicdKnMc5C/P
iEdx00p81X4/BR+T1x2q5O+T3XB78r23/gXLTQ2j11IwOlwrHfwi06fE3q+y6O3o
VoHu/+D3x+tFHPvaZK69toHeixzHIeA/6wQn1NDjlqs29NywqN74Mi1Tp91IFIxl
D53ygnZXlF460yekeI8qYUP2pCMQ69LA29euuiqKqmutBzxXZwS6I2TrlcctRy3T
WWeRtSnk/yZw/V0AXgkYqTJp3QysSx1vkWhzn/e+SKsIHxLDV0k4d3L9aNDNhpT3
tS18OQvDuLnWXg==
-----END CERTIFICATE-----