Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
File:                     4wzJQptjOC6bFxTSGzyW0uXr4lc.mft (raw, json)
Hash identifier:          M6EIKLcIEUTX/8Bn/OqMdmPdVTjaD0GGWHASfslabaY=
Subject key identifier:   21:F7:92:71:D3:E0:6B:78:DA:34:8C:A8:0F:B0:39:D1:F1:26:E7:ED
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       01962ECFB1C4A6D65DEC3F9937E7BB682A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 0Efo2x6sOPETsj-22hP07U1zWsY.roa (hash: OgAUZjtS9ZnkCG32qF7WTz7BpSyV5BH58J/2I983ulI=)
                          2: 0eEVYCOV3q-TnlqCd-lA81klPTQ.roa (hash: 9ZKMa4fp3AZbASYXZsxduUDTW6eWMZUhVwfsooDXEq0=)
                          3: 1X9xFK5JsqTeyade1aBsNXK2jqM.roa (hash: ch4xBMsoiK3FTWlpXULNfZSQTt2yA75MNr9CkIVKekw=)
                          4: 4wzJQptjOC6bFxTSGzyW0uXr4lc.crl (hash: eG1u1FvEHfII+Az5vSrxUIIMxHWvutiMdk66UtX3GIc=)
                          5: 9YNXt3yQQqC0sVShhssVk4vWd94.roa (hash: yctTbfDXnKqt6WUe7CbUwKgzc4xUGWWCc6SxcKiS1ZU=)
                          6: BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa (hash: ziZpuMSjd6A+xtjmxRjQ3AIfV1jnwc+C8brSkPRY6r8=)
                          7: C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa (hash: TuiyxpJbSDuJVA46q1OwVWDbQ+P+V9/ytlLI0YTziqM=)
                          8: DQfIEoXTsX4hjARlWuTZqThAeA0.roa (hash: BiGW3GsERqTMcmti5d4+0u8B8YdLVW43FxSBCXsifjw=)
                          9: EB2TK7Kl1_U9G680gxkKAmpjGp4.roa (hash: kgiFTDRrvUC7IWGnYTR3Mzqi96aLc0f21YS8F6+YYy4=)
                          10: EJhirdIUoLNzmOue7FES6MTfC-0.roa (hash: Xuw71OYfiNCPQrZen32SWEw0XBOhe82dHbmW00wdcjI=)
                          11: NAF6Z4_T0_TYlccHHv8I27pnsls.roa (hash: BanlPClOty3fv3FRrxc6WAC0XspY3oKsshA2789RZD0=)
                          12: NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa (hash: MGzWWHplkDXG7D7+FooNLM82DyBUVFREYbaGbqGESUU=)
                          13: OefhlKYo6vOQTYw9JGAbJUf09Sk.roa (hash: YuBCl+xpfi3ktOJBBB7eY9Cg/51zn2iQPwPzNbSiPdg=)
                          14: Ons9AaoAyvCYcIUP25LyIcwhhcU.roa (hash: 85miehMSdKEq0Wk2FNSFlFGMnw81ViE6nWiSyaYwlMk=)
                          15: RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa (hash: GbklX/DslaRHNgj+v88YxTV/QFH2n/vHFOxV9Z6p4Ls=)
                          16: WsFPLGBSypHWEB7UbM91SGy8ynQ.roa (hash: mIBI4AzXtsH68szPGKhUBCWZanQ1+SMQ//7TMev+wH8=)
                          17: cRx5X6IhRT4TGGyntem5wN-e6hw.roa (hash: yPAxnOnpXhe7f+3HKZRzpk/rpOcCsLAbvqxnozbBZBg=)
                          18: cbHbwJmIogC6tnK-Vvps1TrEKFY.roa (hash: 7bgS71lEpX9738OE+Zkglbw2D6SDEgsmUJoaGhmN0Ew=)
                          19: cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa (hash: YAJzypx1b34Ery1+o2PRzp+uU+C6QB41uq0KGi8MgMc=)
                          20: ethcODOgY_YKJ1d66LjrxzHbTVc.roa (hash: laPLYBB26BdDYnG1uSNifPQM2luIB4Ti0YbHVqjNaeE=)
                          21: gdCSnbZJLxOMbI3QOJK28GKTchM.roa (hash: XZ5ufvEuylBWh1SZLFjMYpTt+DrSCF2g31mb80zO5n4=)
                          22: hZ538f0QuQLVC8g75zE0FHfThyE.roa (hash: 6BFx6l28ZY2v5hI+MaoxcL0mUkGye2JVbNG/AHF+rNY=)
                          23: nI1TRtfAQPCn1lgkr462b3T_edc.roa (hash: XCo0bPbm1J2DIp735svYGPkoyfY4WnDsfVIOBM0uci8=)
                          24: oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa (hash: Bwym/gIrVcU0O/Ncby+0s/9O4c5bJ460ZOKgsQXLq6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:c4:a6:d6:5d:ec:3f:99:37:e7:bb:68:2a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=21f79271d3e06b78da348ca80fb039d1f126e7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:ca:6d:7a:5e:4d:75:84:2f:6a:1c:e0:b6:
                    e3:ad:d0:e1:96:3f:a1:9f:7c:d1:7a:27:09:cc:d3:
                    77:53:16:81:2b:c1:50:6c:d3:68:57:49:9e:76:87:
                    4b:ad:93:17:6a:b7:4c:a0:ef:3a:35:4f:0a:35:d8:
                    fa:d7:17:a3:f0:27:d8:69:25:f8:56:29:07:ce:8f:
                    91:a2:0a:f2:8a:21:f7:a2:07:35:5d:90:78:fc:4b:
                    94:50:dc:1f:5a:d6:0d:d5:83:31:a4:0a:fc:eb:72:
                    90:cb:fd:8c:50:4b:53:c4:20:f1:0b:ef:ea:87:f8:
                    c9:a1:70:6c:da:9a:40:13:6d:1e:4b:e6:dc:e4:4b:
                    48:34:21:db:b7:39:cc:c4:4c:75:3e:3b:69:29:c9:
                    a6:56:42:af:87:79:49:e2:3d:ce:63:dc:bd:13:f1:
                    51:5c:64:71:fa:04:70:ee:71:74:bf:73:06:33:6f:
                    20:a1:ad:34:7f:1a:ce:04:46:f2:2d:d9:cb:c6:cc:
                    09:c1:31:c0:6b:3d:d1:80:bf:81:c7:44:3f:5a:59:
                    39:f1:ad:2e:c4:74:dc:07:cd:2f:e1:36:23:a5:5f:
                    22:75:94:57:7a:b5:92:19:af:88:55:7d:7e:6a:b3:
                    75:20:df:79:33:66:70:57:2c:a4:dc:84:41:be:7d:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:92:71:D3:E0:6B:78:DA:34:8C:A8:0F:B0:39:D1:F1:26:E7:ED
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8c:34:26:5e:af:f9:1b:bd:b9:a5:8f:72:fa:d8:80:9d:4f:
         18:9d:d8:84:d8:54:00:25:a8:59:5d:3a:d3:ef:d6:f7:5f:b2:
         bf:ad:24:5e:d2:4b:3f:15:36:61:85:d3:33:2e:ef:e2:a4:0b:
         fb:41:28:99:fa:ff:47:8f:46:6d:a3:6e:d1:3c:e1:f8:c3:6b:
         22:96:0a:53:fd:3c:34:d9:51:fb:f9:d1:73:19:d3:5b:99:1a:
         c9:e3:20:f2:d6:b2:eb:43:49:a8:a3:67:2a:20:b9:01:87:4b:
         2f:bd:95:7d:a9:38:8b:cf:07:23:3c:d8:cd:3f:a6:40:aa:3c:
         ec:eb:97:1b:f1:81:58:32:a1:19:27:90:60:b9:d3:67:a5:91:
         79:e2:ed:ca:ef:83:4f:77:10:4e:08:f9:fd:f0:65:50:c7:3d:
         e7:13:42:ec:15:9e:2d:ed:95:14:f7:6d:86:03:a9:e0:f7:af:
         ec:02:9e:a4:18:79:23:1a:9f:7b:24:98:26:29:60:cb:b1:6a:
         53:d8:8f:3f:a1:5c:97:c2:de:05:59:24:28:9e:89:dc:e8:41:
         02:0b:91:4a:6e:8a:4a:4a:34:55:1c:79:06:c9:7f:76:51:db:
         ff:6c:7f:10:16:d6:c4:13:cf:72:30:1a:ca:16:38:e7:e9:13:
         5c:99:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----