Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File:                     es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier:          faueXjXWoUmbrd7qx+KOiimYIHY/y6qvZmNqm7noxxY=
Subject key identifier:   1C:B6:E8:6D:DB:25:2F:8D:AE:E6:21:6F:51:4E:84:85:F2:88:CF:70
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer:       /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial:       01962F75021BCE97CABD8887FA01CA9E7D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:59 +0000
Files and hashes:         1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: gJSt+OeLQHAtwQ/7JCHw1XEkq6mImNyzKe3A+ac4SBs=)
                          2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
                          3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:02:1b:ce:97:ca:bd:88:87:fa:01:ca:9e:7d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
        Validity
            Not Before: Apr 13 14:01:59 2025 GMT
            Not After : Apr 14 14:01:59 2025 GMT
        Subject: CN=1cb6e86ddb252f8daee6216f514e8485f288cf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:ff:1c:28:61:71:d2:09:0e:ef:73:db:b9:
                    7c:65:17:94:0f:f7:cd:9c:e4:84:58:99:19:5c:24:
                    cf:d3:ef:a0:bf:7e:84:bc:c7:a6:e7:6d:b8:68:a8:
                    45:23:ed:a1:54:52:3b:59:a4:d4:34:7d:17:be:48:
                    35:1c:08:11:5f:52:87:42:b3:78:b2:44:c7:c5:83:
                    ba:0d:bc:bd:ac:d7:a7:26:2b:b5:81:cd:06:c0:4a:
                    d2:19:80:13:1b:32:2d:36:f4:f8:1f:50:86:08:f0:
                    ed:f3:88:07:75:d6:54:33:98:04:af:1b:a1:70:4e:
                    74:2a:3e:e5:05:b9:23:ad:e3:4f:a7:ea:6f:fa:0f:
                    78:d2:6e:2c:57:83:32:05:7d:76:27:41:09:e2:86:
                    d1:7c:47:76:54:bd:bd:ef:c1:c6:d4:14:dd:0e:9b:
                    e1:17:b2:62:5a:09:17:3c:87:b3:a5:5f:62:33:49:
                    0b:1e:aa:1f:3f:7a:a9:a3:0c:5b:2c:54:12:53:ee:
                    2b:15:99:12:b0:f3:68:79:00:27:6e:23:41:1d:4f:
                    f3:9f:40:c5:39:da:69:f0:c7:74:60:cb:3d:4c:6c:
                    94:3d:bf:ad:4f:14:4e:56:75:69:9d:83:3c:03:8c:
                    42:b8:13:d8:9b:bf:ab:66:74:7f:7c:05:23:62:29:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:E8:6D:DB:25:2F:8D:AE:E6:21:6F:51:4E:84:85:F2:88:CF:70
            X509v3 Authority Key Identifier:
                keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:f1:26:de:0a:eb:13:6f:ee:1e:49:9f:3d:03:ba:90:9e:
         46:e7:58:fa:14:59:cb:6b:d3:89:62:b7:03:2c:8f:db:28:06:
         54:e2:af:88:75:31:10:8f:95:19:3c:08:28:85:6c:1b:32:0f:
         e3:cc:8f:64:fe:04:e9:79:61:2a:71:cb:cd:4c:ef:01:1d:07:
         c3:91:d2:b6:53:b4:12:2b:6a:b5:1c:10:39:71:d2:af:a0:bf:
         9e:8a:2a:85:81:37:f7:bc:ae:ba:42:6d:fd:16:b2:93:1c:d3:
         10:d8:76:37:e0:f1:91:f9:97:a2:93:54:ad:a6:a9:16:c9:6c:
         99:af:15:7b:cb:c4:56:b4:73:2c:0d:1b:3f:6b:b4:3e:98:86:
         4a:b6:b7:8e:d2:df:a4:ca:9e:28:b5:58:f6:a3:e5:6b:08:fa:
         6d:2d:51:14:65:fd:a6:46:8d:f5:ff:62:ae:16:fc:bd:06:87:
         a6:9f:d0:a4:64:01:e7:57:0d:7b:4a:ab:bc:fe:2d:2c:93:47:
         67:d1:48:d0:d7:aa:00:c9:9e:09:57:ce:f2:3f:ff:d5:4a:19:
         97:c3:0e:9c:3b:15:17:1a:9c:7c:b4:d2:aa:c8:7e:10:56:ac:
         bd:02:93:81:94:83:d9:0c:5d:46:48:bf:03:eb:7f:f2:60:62:
         69:fb:b5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQIbzpfKvYiH+gHKnn1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjUwNDEzMTQwMTU5WhcNMjUwNDE0MTQwMTU5WjAzMTEwLwYDVQQD
EygxY2I2ZTg2ZGRiMjUyZjhkYWVlNjIxNmY1MTRlODQ4NWYyODhjZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGf/HChhcdIJDu9z27l8ZReUD/fN
nOSEWJkZXCTP0++gv36EvMem5224aKhFI+2hVFI7WaTUNH0Xvkg1HAgRX1KHQrN4
skTHxYO6Dby9rNenJiu1gc0GwErSGYATGzItNvT4H1CGCPDt84gHddZUM5gErxuh
cE50Kj7lBbkjreNPp+pv+g940m4sV4MyBX12J0EJ4obRfEd2VL2978HG1BTdDpvh
F7JiWgkXPIezpV9iM0kLHqofP3qpowxbLFQSU+4rFZkSsPNoeQAnbiNBHU/zn0DF
Odpp8Md0YMs9TGyUPb+tTxROVnVpnYM8A4xCuBPYm7+rZnR/fAUjYil1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy26G3bJS+NruYhb1FOhIXyiM9wMB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ7xJt4K
6xNv7h5Jnz0DupCeRudY+hRZy2vTiWK3AyyP2ygGVOKviHUxEI+VGTwIKIVsGzIP
48yPZP4E6XlhKnHLzUzvAR0Hw5HStlO0EitqtRwQOXHSr6C/nooqhYE397yuukJt
/RaykxzTENh2N+DxkfmXopNUraapFslsma8Ve8vEVrRzLA0bP2u0PpiGSra3jtLf
pMqeKLVY9qPlawj6bS1RFGX9pkaN9f9irhb8vQaHpp/QpGQB51cNe0qrvP4tLJNH
Z9FI0NeqAMmeCVfO8j//1UoZl8MOnDsVFxqcfLTSqsh+EFasvQKTgZSD2QxdRki/
A+t/8mBiafu1GQ==
-----END CERTIFICATE-----