Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File:                     ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier:          k4MOE8gxH+LtY6qUcierWwIbjwH4xpsdvB4/9KtheXI=
Subject key identifier:   B7:9E:59:EE:8A:4F:6A:76:75:02:AE:7B:63:95:01:1E:49:00:BB:CF
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer:       /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial:       01962ECFC0E6D64EF997ED715AC877F444A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number:          010B
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
                          2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: m/Kb+1TQghO22RKZiVpdtocIWUc+SG3xjw5rtOrbPD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c0:e6:d6:4e:f9:97:ed:71:5a:c8:77:f4:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=b79e59ee8a4f6a767502ae7b6395011e4900bbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:20:d0:d0:ef:19:af:60:9d:55:73:9b:e3:
                    ab:66:5b:b1:ae:99:0f:9a:3e:f1:49:0a:3a:6d:6d:
                    ee:c1:55:2e:21:16:88:89:f0:ac:e1:19:19:7c:00:
                    af:3d:89:56:5b:b5:0a:06:dc:9f:58:bb:2f:8e:72:
                    d4:7c:b4:8c:12:ea:7e:95:ba:c2:64:87:16:3b:2b:
                    6f:58:85:84:80:89:84:8d:46:45:e6:90:28:08:73:
                    e7:f4:e9:c4:6a:5a:4d:28:04:70:2f:a8:a5:c5:a6:
                    af:9b:71:ba:3a:ed:eb:ad:e1:bb:b7:47:db:ef:cc:
                    f3:cc:53:6c:7b:4b:48:f6:c6:fe:22:07:95:ab:31:
                    90:4c:f2:13:ef:eb:24:99:80:ee:df:51:59:ce:20:
                    56:08:2d:a1:13:b8:d2:54:b2:03:19:9c:0c:9a:10:
                    c6:58:a0:71:06:a4:99:5f:5b:65:1f:63:88:13:2c:
                    ca:70:fa:89:fa:c7:22:ea:1e:a8:ac:d7:23:72:0c:
                    72:b3:2c:de:86:25:5c:e4:38:56:d1:f2:aa:30:86:
                    ef:ff:0d:3b:4d:68:da:a4:b7:79:70:61:1a:37:a9:
                    67:e0:90:34:a2:e0:65:bb:73:f2:e1:b5:d2:8e:84:
                    8b:8c:2c:cb:59:87:6e:80:f6:80:de:92:01:f0:19:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:59:EE:8A:4F:6A:76:75:02:AE:7B:63:95:01:1E:49:00:BB:CF
            X509v3 Authority Key Identifier:
                keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:49:52:ce:84:c0:3c:38:af:97:16:1b:ef:3d:53:8e:aa:89:
         99:a9:e5:50:d2:5c:e1:04:72:e7:ee:57:79:d6:02:d6:84:04:
         ce:88:04:63:4d:87:61:21:45:f2:1f:85:6d:3c:74:8c:c7:80:
         64:39:26:10:22:3b:a3:c8:47:94:db:23:d9:62:bc:b3:e6:57:
         90:16:81:51:f5:6b:b1:ab:6d:4c:ca:42:00:ba:9d:b8:49:8a:
         03:88:8e:59:1f:cb:0d:a3:73:32:98:1f:6f:ae:dd:d5:f2:a9:
         31:29:6a:c3:db:c9:8e:dc:a4:60:a8:d5:b7:35:c0:78:16:1b:
         b1:09:71:b4:de:2b:9c:7f:50:57:79:3c:b6:ba:f7:66:5f:e4:
         c5:fa:53:9d:ea:18:52:19:e3:46:8c:79:8a:4b:3d:d5:3f:05:
         d6:80:0b:5d:36:3f:0a:1f:91:46:fb:e2:54:e7:7d:88:32:09:
         7e:1b:73:b7:b7:6a:bf:b0:a2:9e:5d:af:ae:62:1f:ab:d8:1e:
         04:08:f0:01:00:c9:54:13:60:37:f5:2f:a2:76:1f:55:b9:9b:
         7e:9a:e3:75:01:0e:57:27:b6:6b:6e:89:07:a8:6f:94:cc:fc:
         89:ba:89:4b:48:22:45:34:64:92:e4:43:56:15:99:97:e2:29:
         c9:ce:fa:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8Dm1k75l+1xWsh39ESlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
EyhiNzllNTllZThhNGY2YTc2NzUwMmFlN2I2Mzk1MDExZTQ5MDBiYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqIg0NDvGa9gnVVzm+OrZluxrpkP
mj7xSQo6bW3uwVUuIRaIifCs4RkZfACvPYlWW7UKBtyfWLsvjnLUfLSMEup+lbrC
ZIcWOytvWIWEgImEjUZF5pAoCHPn9OnEalpNKARwL6ilxaavm3G6Ou3rreG7t0fb
78zzzFNse0tI9sb+IgeVqzGQTPIT7+skmYDu31FZziBWCC2hE7jSVLIDGZwMmhDG
WKBxBqSZX1tlH2OIEyzKcPqJ+sci6h6orNcjcgxysyzehiVc5DhW0fKqMIbv/w07
TWjapLd5cGEaN6ln4JA0ouBlu3Py4bXSjoSLjCzLWYdugPaA3pIB8BkCEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeeWe6KT2p2dQKue2OVAR5JALvPMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcklSzoTA
PDivlxYb7z1TjqqJmanlUNJc4QRy5+5XedYC1oQEzogEY02HYSFF8h+FbTx0jMeA
ZDkmECI7o8hHlNsj2WK8s+ZXkBaBUfVrsattTMpCALqduEmKA4iOWR/LDaNzMpgf
b67d1fKpMSlqw9vJjtykYKjVtzXAeBYbsQlxtN4rnH9QV3k8trr3Zl/kxfpTneoY
UhnjRox5iks91T8F1oALXTY/Ch+RRvviVOd9iDIJfhtzt7dqv7Cinl2vrmIfq9ge
BAjwAQDJVBNgN/UvonYfVbmbfprjdQEOVye2a26JB6hvlMz8ibqJS0giRTRkkuRD
VhWZl+Ipyc76Dg==
-----END CERTIFICATE-----