Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File:                     Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier:          JSGF2NWTntB/27G+e9SjTwcxMFZxH6urajL+yVWz8sc=
Subject key identifier:   43:CC:78:17:9A:E2:B1:1F:04:C7:E4:81:5F:B3:89:12:CD:F9:D0:F1
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer:       /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial:       01962E619578D49D0F01FD621D46D09FC21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number:          0765
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=)
                          2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: ZB2k/47fTljVrfE3loov+dfus7Y+v0AXDLwDyXJ7nGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:95:78:d4:9d:0f:01:fd:62:1d:46:d0:9f:c2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=43cc78179ae2b11f04c7e4815fb38912cdf9d0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:08:0c:b3:32:ca:73:f9:de:7f:2c:04:ea:
                    ec:9c:32:85:ce:1b:a6:4c:ab:15:91:e0:81:16:8f:
                    95:92:44:26:36:68:b7:f1:69:43:9c:3b:29:14:cd:
                    87:bd:11:6a:2e:4f:cb:ba:81:3c:db:c5:f6:17:46:
                    be:01:8a:02:b3:5b:43:5e:97:da:4c:90:26:0a:b0:
                    2d:1a:50:ca:96:95:2c:c7:c0:06:44:cc:54:84:56:
                    e9:d0:28:a2:ac:48:ab:3a:b8:8b:81:cf:85:fa:e5:
                    1d:7d:e5:d8:fb:f9:24:7e:e9:e8:8e:91:39:57:08:
                    97:36:c9:9a:17:1d:39:77:4b:ee:85:de:87:fc:47:
                    39:e1:61:0a:32:c9:aa:be:a3:b8:9f:ad:6b:02:1c:
                    a5:93:31:64:f5:8e:77:71:20:35:9f:8a:c6:37:a0:
                    2b:91:ed:e9:df:98:77:aa:e8:0a:c7:38:aa:7c:e6:
                    f4:59:30:66:ca:a1:81:3a:e9:9d:eb:09:64:15:14:
                    c6:1d:73:c3:b4:46:a9:37:ec:c5:05:6e:a9:d1:19:
                    91:dd:88:d4:9a:b6:02:ae:d1:23:dd:0a:30:2f:38:
                    ec:eb:f8:90:52:b5:dd:56:35:dd:df:a8:9a:a2:47:
                    63:7e:28:30:cf:1d:49:0d:5c:c1:71:da:9e:b3:21:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CC:78:17:9A:E2:B1:1F:04:C7:E4:81:5F:B3:89:12:CD:F9:D0:F1
            X509v3 Authority Key Identifier:
                keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:a8:b0:da:86:fa:a5:5a:d9:d3:4f:91:16:6f:3f:60:ed:
         90:4e:f8:b3:e7:ec:0f:e7:44:41:03:5c:93:73:e3:d8:bb:06:
         5a:2f:37:f2:1c:65:3e:9f:fb:a8:9c:4c:b7:7b:d3:72:82:a4:
         47:b2:f5:20:22:55:30:a1:20:60:84:38:67:e4:e1:b1:f3:ba:
         0b:51:1d:3e:c1:47:cf:9a:58:98:d9:80:50:69:b8:9b:5b:ff:
         c4:4f:f0:d2:02:42:91:1a:75:4a:44:84:7d:ee:8d:a3:fa:de:
         5e:97:40:af:9c:2e:bc:f2:20:25:19:e2:2e:82:87:9d:f0:ad:
         dc:05:14:d1:8c:90:a6:6e:12:d6:89:31:67:7f:fd:3b:39:ab:
         4c:c9:70:be:af:03:fa:55:1b:98:97:54:b9:47:ef:22:ae:71:
         12:bc:d8:39:42:25:fd:8f:09:73:63:61:90:3d:16:e4:19:ac:
         c0:45:e0:65:d2:9c:80:8b:6a:60:38:16:0a:66:0b:66:8c:d9:
         c3:1d:54:1c:69:f7:61:e8:a4:a7:64:78:16:f2:03:13:ef:86:
         3b:df:d8:97:b0:25:01:b1:bd:af:98:fb:8e:4e:c0:9b:0f:0a:
         47:05:0c:44:58:1b:2a:07:b0:a0:39:c2:2e:d4:a9:d0:1d:b0:
         72:c7:6a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZV41J0PAf1iHUbQn8IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi
NWUxOWUwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
Eyg0M2NjNzgxNzlhZTJiMTFmMDRjN2U0ODE1ZmIzODkxMmNkZjlkMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZkIDLMyynP53n8sBOrsnDKFzhum
TKsVkeCBFo+VkkQmNmi38WlDnDspFM2HvRFqLk/LuoE828X2F0a+AYoCs1tDXpfa
TJAmCrAtGlDKlpUsx8AGRMxUhFbp0CiirEirOriLgc+F+uUdfeXY+/kkfunojpE5
VwiXNsmaFx05d0vuhd6H/Ec54WEKMsmqvqO4n61rAhylkzFk9Y53cSA1n4rGN6Ar
ke3p35h3qugKxziqfOb0WTBmyqGBOumd6wlkFRTGHXPDtEapN+zFBW6p0RmR3YjU
mrYCrtEj3QowLzjs6/iQUrXdVjXd36iaokdjfigwzx1JDVzBcdqesyGSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPMeBea4rEfBMfkgV+ziRLN+dDxMB8GA1UdIwQY
MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt
YWIxZWE0MzUzYjdmLzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm
LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY2osNqG
+qVa2dNPkRZvP2DtkE74s+fsD+dEQQNck3Pj2LsGWi838hxlPp/7qJxMt3vTcoKk
R7L1ICJVMKEgYIQ4Z+ThsfO6C1EdPsFHz5pYmNmAUGm4m1v/xE/w0gJCkRp1SkSE
fe6No/reXpdAr5wuvPIgJRniLoKHnfCt3AUU0YyQpm4S1okxZ3/9OzmrTMlwvq8D
+lUbmJdUuUfvIq5xErzYOUIl/Y8Jc2NhkD0W5BmswEXgZdKcgItqYDgWCmYLZozZ
wx1UHGn3Yeikp2R4FvIDE++GO9/Yl7AlAbG9r5j7jk7Amw8KRwUMRFgbKgewoDnC
LtSp0B2wcsdqDw==
-----END CERTIFICATE-----