Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          itEdSWRyvTbVOg3dUh4rkgxuHekEAYp3hN118aXD1ls=
Subject key identifier:   B4:02:65:00:BB:D2:1E:B5:32:46:F7:05:4B:39:19:C2:DE:82:87:97
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       01962E61A5A53106DBABF079E4E415BCBF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: QhfkfHrbFhg75IgiA7i1zZ7MuNRtcBTm02SrxWc2//4=)
                          2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
                          3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
                          4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
                          5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:a5:31:06:db:ab:f0:79:e4:e4:15:bc:bf:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=b4026500bbd21eb53246f7054b3919c2de828797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:d5:bc:c8:90:5b:16:b6:30:a8:05:0f:9f:
                    21:24:61:2d:1c:7f:df:c9:14:b1:3e:6c:66:da:44:
                    5f:2c:b0:8b:2a:e0:1c:2f:00:5a:15:68:c2:c9:a5:
                    0f:72:1c:29:0d:be:ff:bb:fc:92:6d:56:57:52:9e:
                    b5:46:27:f3:fa:32:9f:66:c1:a6:e5:47:c8:bc:e8:
                    2b:e9:fd:f9:c3:93:ae:76:e6:4a:23:fe:98:cc:7d:
                    fa:fc:6a:aa:16:6c:e3:e9:81:68:da:8f:63:8b:7f:
                    7f:56:ec:36:73:cf:cf:fc:0a:dd:cf:69:31:78:21:
                    8c:21:49:35:fe:64:93:52:f0:ab:7e:55:29:96:bc:
                    ca:5d:40:50:f0:24:fb:57:95:75:57:44:de:45:25:
                    2c:db:a7:19:c6:bf:1b:93:c0:c9:68:02:2e:41:37:
                    34:57:f8:99:90:bb:0c:bb:b0:d7:7d:18:d0:36:ec:
                    97:fe:e5:47:fc:ab:02:c9:58:74:bc:a9:38:bb:4d:
                    80:47:8a:bc:ae:6c:7c:b1:eb:72:b0:71:e2:15:12:
                    74:dd:fe:48:9f:38:09:c0:a5:23:5c:27:7b:99:d3:
                    3d:40:fb:f7:a8:63:0d:df:7c:bc:12:e5:f3:18:0c:
                    29:42:c7:d0:b3:04:09:3e:ae:ca:f7:2f:dc:39:a9:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:02:65:00:BB:D2:1E:B5:32:46:F7:05:4B:39:19:C2:DE:82:87:97
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:59:bf:eb:28:7b:40:56:fd:e6:3e:0a:d2:78:79:a0:7a:
         f2:42:48:f3:b4:bb:0e:ea:6c:bc:46:4c:f1:dd:f4:9d:08:74:
         53:99:f1:e9:4b:f6:dc:f2:23:cb:4e:46:c3:f7:cc:cc:07:57:
         f6:fc:ad:c4:ab:b1:0f:04:43:ee:77:ca:cc:9e:ed:7e:58:73:
         81:0c:11:fe:0a:56:6d:c7:9e:3d:da:12:d0:89:66:25:66:d6:
         6f:42:18:9e:6e:15:cd:c4:2b:47:f6:32:3c:ff:bb:1c:93:d4:
         3d:7b:dd:bb:24:12:e8:c1:4a:33:4f:92:00:0c:0d:25:f0:5b:
         3c:bb:e5:23:98:7c:0f:17:a9:5f:35:3a:6a:35:73:4e:b9:aa:
         aa:4d:2e:9a:32:e1:99:28:51:b4:8a:69:ec:d2:a0:b2:0a:a4:
         64:39:9e:24:85:09:23:60:94:6e:53:25:41:ee:bf:1d:c0:4b:
         78:e9:a6:59:98:51:95:e2:9b:5e:78:49:cb:58:4f:51:25:b2:
         8e:d9:87:e1:7b:77:7a:e8:cd:e6:ea:af:ad:16:ba:a8:9e:ea:
         3f:c9:f8:37:7d:e6:52:7e:f0:da:09:06:22:1b:1f:2f:40:21:
         ce:12:a0:f0:73:a9:cc:97:0a:0b:06:d2:ab:47:10:3f:f3:01:
         e3:5d:64:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaWlMQbbq/B55OQVvL+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl
YjdhZjQwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
EyhiNDAyNjUwMGJiZDIxZWI1MzI0NmY3MDU0YjM5MTljMmRlODI4Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstLVvMiQWxa2MKgFD58hJGEtHH/f
yRSxPmxm2kRfLLCLKuAcLwBaFWjCyaUPchwpDb7/u/ySbVZXUp61Rifz+jKfZsGm
5UfIvOgr6f35w5OuduZKI/6YzH36/GqqFmzj6YFo2o9ji39/Vuw2c8/P/Ardz2kx
eCGMIUk1/mSTUvCrflUplrzKXUBQ8CT7V5V1V0TeRSUs26cZxr8bk8DJaAIuQTc0
V/iZkLsMu7DXfRjQNuyX/uVH/KsCyVh0vKk4u02AR4q8rmx8setysHHiFRJ03f5I
nzgJwKUjXCd7mdM9QPv3qGMN33y8EuXzGAwpQsfQswQJPq7K9y/cOalNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQCZQC70h61Mkb3BUs5GcLegoeXMB8GA1UdIwQY
MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct
YmRlNjQ0OGI3ODZjLzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj
LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW9Zv+so
e0BW/eY+CtJ4eaB68kJI87S7DupsvEZM8d30nQh0U5nx6Uv23PIjy05Gw/fMzAdX
9vytxKuxDwRD7nfKzJ7tflhzgQwR/gpWbceePdoS0IlmJWbWb0IYnm4VzcQrR/Yy
PP+7HJPUPXvduyQS6MFKM0+SAAwNJfBbPLvlI5h8DxepXzU6ajVzTrmqqk0umjLh
mShRtIpp7NKgsgqkZDmeJIUJI2CUblMlQe6/HcBLeOmmWZhRleKbXnhJy1hPUSWy
jtmH4Xt3eujN5uqvrRa6qJ7qP8n4N33mUn7w2gkGIhsfL0AhzhKg8HOpzJcKCwbS
q0cQP/MB411k9w==
-----END CERTIFICATE-----