Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File:                     t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier:          J5tNUbTkye5cqMw/FDB3rim55TZkKxLMH6iAE+xkufw=
Subject key identifier:   E9:03:C0:18:4B:70:FE:C9:8A:F6:2C:E6:08:DF:E5:20:1B:13:DD:FD
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer:       /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial:       01962E2AE0FC117B554D094E479F355582FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
                          2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: APo/p6tKH75vE8G0Ch/AphIRkdx3HlhWMSpdk5/6Csc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:fc:11:7b:55:4d:09:4e:47:9f:35:55:82:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=e903c0184b70fec98af62ce608dfe5201b13ddfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:40:b8:e4:4a:bb:8e:0d:22:a0:ef:c7:a0:
                    c3:c8:55:6d:fd:04:fc:d7:f8:6b:e7:ae:a7:3a:9b:
                    5f:9a:54:9f:77:6b:10:df:ce:0a:0f:d6:e8:f0:84:
                    d7:2f:58:f7:d1:3c:20:b2:d0:1d:74:eb:bd:01:a0:
                    52:95:36:11:78:c5:f3:f5:3c:5a:c1:a1:c3:d2:e7:
                    bf:80:c5:d8:99:03:08:57:a7:08:2d:c9:98:f2:ea:
                    5b:2d:d4:97:be:87:6b:f9:85:f0:48:8c:a4:6e:a6:
                    f6:ff:f7:30:52:62:c8:5a:03:14:1f:df:3b:d4:63:
                    08:4a:4f:c4:ef:d5:d5:06:1e:70:54:1b:dc:9d:38:
                    53:0e:6a:11:4e:7f:a4:a9:18:05:c4:30:47:5f:54:
                    cf:70:e6:d5:3a:47:29:9f:93:71:43:94:5f:19:1e:
                    2a:6b:89:b0:8b:62:ca:9f:99:57:30:7b:50:1c:69:
                    c6:63:fd:c3:5c:53:4f:b9:90:a3:c1:9e:45:42:eb:
                    3c:6f:ed:1e:d4:e0:cc:a2:85:1d:07:c2:85:7c:db:
                    86:8f:58:ca:08:b0:4c:68:71:41:35:0e:a8:84:db:
                    2d:ec:b7:14:87:92:8a:08:e3:af:2e:9b:05:19:ff:
                    e8:b3:97:9b:e1:d2:64:ff:98:dc:26:25:8e:95:ca:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:C0:18:4B:70:FE:C9:8A:F6:2C:E6:08:DF:E5:20:1B:13:DD:FD
            X509v3 Authority Key Identifier:
                keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dc:e2:bc:ad:14:09:b9:31:d9:f6:79:83:21:49:0f:ac:20:
         a8:4b:58:7c:79:09:e1:f6:2a:51:f3:a0:14:61:3b:14:73:dc:
         a4:63:30:6c:e4:23:ae:e2:8f:f5:fd:1e:59:89:89:67:a3:b3:
         05:47:66:20:d2:20:52:b9:e7:b6:fc:60:f8:68:36:6d:7a:45:
         10:86:71:2f:4b:bf:95:ed:31:e0:8c:10:6d:19:a6:1a:af:48:
         07:37:f1:70:da:03:8b:7f:3c:96:d5:60:b7:24:27:f6:b6:57:
         31:52:2d:8f:3c:89:54:82:dc:78:19:89:2e:b5:1b:2d:9f:4a:
         54:15:90:65:5c:f1:75:c9:d9:ed:ff:dc:e3:07:e9:5a:a8:93:
         8e:4b:bd:58:c6:af:d7:50:eb:e7:0b:70:82:30:a2:cc:b3:12:
         05:d1:e0:ae:b5:e3:bc:a5:5e:60:bf:2d:3b:dc:ce:59:13:32:
         32:a8:1f:ab:78:bd:09:e8:e2:b6:26:06:82:c2:24:aa:74:c8:
         56:6e:9d:75:0d:4c:1a:6a:b3:5c:14:bb:27:f6:56:f2:70:bf:
         a6:29:f3:43:bd:4c:16:fa:c2:38:5b:8b:f0:6f:c6:3c:b7:a6:
         6f:d2:2b:55:a0:c4:0e:b9:ee:90:a2:c3:c7:3b:4a:42:da:69:
         cb:9b:1b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuD8EXtVTQlOR581VYL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl
OGE5ZmIwHhcNMjUwNDEzMDgwMTI0WhcNMjUwNDE0MDgwMTI0WjAzMTEwLwYDVQQD
EyhlOTAzYzAxODRiNzBmZWM5OGFmNjJjZTYwOGRmZTUyMDFiMTNkZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9AuORKu44NIqDvx6DDyFVt/QT8
1/hr566nOptfmlSfd2sQ384KD9bo8ITXL1j30TwgstAddOu9AaBSlTYReMXz9Txa
waHD0ue/gMXYmQMIV6cILcmY8upbLdSXvodr+YXwSIykbqb2//cwUmLIWgMUH987
1GMISk/E79XVBh5wVBvcnThTDmoRTn+kqRgFxDBHX1TPcObVOkcpn5NxQ5RfGR4q
a4mwi2LKn5lXMHtQHGnGY/3DXFNPuZCjwZ5FQus8b+0e1ODMooUdB8KFfNuGj1jK
CLBMaHFBNQ6ohNst7LcUh5KKCOOvLpsFGf/os5eb4dJk/5jcJiWOlcqi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkDwBhLcP7JivYs5gjf5SAbE939MB8GA1UdIwQY
MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt
NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw
LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNzivK0U
Cbkx2fZ5gyFJD6wgqEtYfHkJ4fYqUfOgFGE7FHPcpGMwbOQjruKP9f0eWYmJZ6Oz
BUdmINIgUrnntvxg+Gg2bXpFEIZxL0u/le0x4IwQbRmmGq9IBzfxcNoDi388ltVg
tyQn9rZXMVItjzyJVILceBmJLrUbLZ9KVBWQZVzxdcnZ7f/c4wfpWqiTjku9WMav
11Dr5wtwgjCizLMSBdHgrrXjvKVeYL8tO9zOWRMyMqgfq3i9CejitiYGgsIkqnTI
Vm6ddQ1MGmqzXBS7J/ZW8nC/pinzQ71MFvrCOFuL8G/GPLemb9IrVaDEDrnukKLD
xztKQtppy5sb/w==
-----END CERTIFICATE-----