Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File:                     ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier:          2VXXg8itY4m7pj6sjzCnhD1jJQdmUMzMrBcrug993kE=
Subject key identifier:   46:02:95:AA:E9:F1:05:D3:6B:1F:29:B5:B4:AE:18:2E:57:08:37:22
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       01962F742D193BB48A7AA33075AE07F8937E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number:          05C3
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: v0TcBMFhXTK+thtSwies5eBZxDu1BlzL+vwb4+eJf5g=)
                          2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=)
                          3: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (hash: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2d:19:3b:b4:8a:7a:a3:30:75:ae:07:f8:93:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=460295aae9f105d36b1f29b5b4ae182e57083722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:a7:5b:f3:1c:0a:45:0f:1b:9a:2b:43:57:
                    f1:11:12:d6:c1:4d:9a:b6:7f:b8:5d:65:6b:77:60:
                    94:39:aa:eb:5b:da:2f:61:5c:e8:10:35:e9:8e:02:
                    d3:a6:0a:d6:c0:1f:de:17:fd:8f:a5:ce:9f:88:42:
                    f9:8c:c3:57:c8:b8:9c:b1:ff:62:dc:54:ed:55:84:
                    47:ad:15:1c:bd:aa:3d:a8:91:a4:4d:59:b3:7d:5c:
                    f3:62:c2:fc:1c:69:47:62:28:4d:54:1b:42:b6:e1:
                    17:fd:33:5c:86:c8:89:7f:70:7a:c5:c1:76:86:56:
                    ac:e9:7a:f5:cb:54:d8:7d:2f:c2:f9:19:43:0e:e5:
                    c5:26:e8:1e:d5:06:d4:27:c2:f9:37:d9:a4:b7:f3:
                    f1:4c:c2:af:26:61:45:db:a1:15:3a:73:0b:45:d6:
                    e9:41:1e:ec:25:06:41:8a:6c:c1:65:ad:8e:6f:f1:
                    fa:ed:3e:3d:f2:1b:1e:4c:63:e9:3d:97:40:2f:d2:
                    67:34:b5:f4:dd:38:12:14:91:31:cf:8b:a0:09:37:
                    5f:28:30:2d:f5:f4:34:96:13:ff:ad:77:a6:6d:b4:
                    e6:e1:29:5c:fe:06:e1:48:24:33:78:a1:5a:34:78:
                    75:41:07:e2:a5:cf:60:c1:bb:86:e9:8d:30:8e:03:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:95:AA:E9:F1:05:D3:6B:1F:29:B5:B4:AE:18:2E:57:08:37:22
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:4c:fe:f5:d0:f4:a6:80:41:2e:f6:0f:92:6f:35:3e:3f:
         2c:df:8b:50:1c:42:d1:0d:53:a9:60:98:88:9f:46:63:55:f9:
         dd:ce:43:bf:c6:38:9d:df:c5:dc:c5:71:b3:c7:b6:cb:d3:08:
         f2:9e:06:85:9f:85:69:ed:1d:67:0f:93:fe:9d:9f:e6:c4:b7:
         a7:73:62:58:72:bd:42:ac:aa:ee:8e:9e:d3:5b:86:b2:30:f5:
         56:51:b9:fe:aa:82:a5:45:61:26:c5:ac:d6:f5:ec:3c:67:14:
         7f:13:b1:b4:10:c3:59:9f:ba:7a:9e:84:d4:b9:10:cd:67:11:
         ef:be:e3:8c:06:eb:5f:67:70:0d:49:6e:a9:37:73:25:26:b4:
         79:9b:1f:6c:80:40:e7:2b:08:c6:c1:ee:26:4b:87:27:45:36:
         7e:ab:7f:72:dd:9c:c0:0d:75:d0:65:f3:23:11:37:d8:10:59:
         a1:20:d1:c9:b8:3d:3b:e6:44:98:23:d0:bb:fe:24:ed:a8:10:
         2d:8a:fd:22:62:e9:64:e3:c2:ef:b2:e3:8a:8e:f1:99:b8:8d:
         5a:92:c4:b4:39:e7:3f:f5:33:0e:41:2a:24:08:e4:40:46:b6:
         bf:88:82:4d:27:2c:c4:dd:5e:89:ce:20:80:44:37:8b:fc:b5:
         07:85:97:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdC0ZO7SKeqMwda4H+JN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDcwMzhiODNlYjI0N2ZjNjViZGFkMDE5NWI4NjI0NmY4
ZjMwMDYwHhcNMjUwNDEzMTQwMTA0WhcNMjUwNDE0MTQwMTA0WjAzMTEwLwYDVQQD
Eyg0NjAyOTVhYWU5ZjEwNWQzNmIxZjI5YjViNGFlMTgyZTU3MDgzNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLmnW/McCkUPG5orQ1fxERLWwU2a
tn+4XWVrd2CUOarrW9ovYVzoEDXpjgLTpgrWwB/eF/2Ppc6fiEL5jMNXyLicsf9i
3FTtVYRHrRUcvao9qJGkTVmzfVzzYsL8HGlHYihNVBtCtuEX/TNchsiJf3B6xcF2
hlas6Xr1y1TYfS/C+RlDDuXFJuge1QbUJ8L5N9mkt/PxTMKvJmFF26EVOnMLRdbp
QR7sJQZBimzBZa2Ob/H67T498hseTGPpPZdAL9JnNLX03TgSFJExz4ugCTdfKDAt
9fQ0lhP/rXembbTm4Slc/gbhSCQzeKFaNHh1QQfipc9gwbuG6Y0wjgOrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYClarp8QXTax8ptbSuGC5XCDciMB8GA1UdIwQY
MBaAFBDXA4uD6yR/xlva0BlbhiRvjzAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUt
MWM1YmRlMmMxNGY0LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUtMWM1YmRlMmMxNGY0
LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixVM/vXQ
9KaAQS72D5JvNT4/LN+LUBxC0Q1TqWCYiJ9GY1X53c5Dv8Y4nd/F3MVxs8e2y9MI
8p4GhZ+Fae0dZw+T/p2f5sS3p3NiWHK9Qqyq7o6e01uGsjD1VlG5/qqCpUVhJsWs
1vXsPGcUfxOxtBDDWZ+6ep6E1LkQzWcR777jjAbrX2dwDUluqTdzJSa0eZsfbIBA
5ysIxsHuJkuHJ0U2fqt/ct2cwA110GXzIxE32BBZoSDRybg9O+ZEmCPQu/4k7agQ
LYr9ImLpZOPC77Ljio7xmbiNWpLEtDnnP/UzDkEqJAjkQEa2v4iCTScsxN1eic4g
gEQ3i/y1B4WXmg==
-----END CERTIFICATE-----