Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File:                     xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier:          SKL/QfYh89sSjY5diBAcgUGHw6ZCxw66Z7SkzV5jiIo=
Subject key identifier:   A7:A8:4D:F3:95:22:B5:A0:76:D3:94:F1:14:36:12:F3:74:5B:71:8A
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer:       /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial:       01962E9942CED5C3ED3FE6984C78CFAF4073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (hash: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=)
                          2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: pTWol0fAv2Ai5Foiui53hlLV+yaprK+brJVj/Tv0l2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:42:ce:d5:c3:ed:3f:e6:98:4c:78:cf:af:40:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=a7a84df39522b5a076d394f1143612f3745b718a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:23:1a:c8:73:bd:55:8a:bf:05:b3:00:0d:
                    e1:f2:ba:65:48:d6:fc:80:37:a0:26:5a:fa:80:c1:
                    74:ad:39:2c:7b:01:76:c8:bf:c7:45:8c:a5:36:28:
                    77:a7:53:5f:08:cd:dd:00:67:19:ec:ce:f8:55:fc:
                    15:6f:a7:4c:a8:02:6e:59:b1:52:79:04:3d:7f:dc:
                    db:a9:f3:f0:52:4d:a3:2c:e8:de:a8:a3:42:0b:bf:
                    c3:82:6e:47:a1:bb:01:a8:4d:1f:b7:8a:d2:b1:ad:
                    87:ee:44:19:ed:43:a4:60:0e:7c:6a:39:5a:f9:4b:
                    6d:56:05:53:4e:83:1b:ca:06:bc:09:49:71:f4:0f:
                    e5:79:44:2f:aa:33:17:cc:38:ea:13:03:ad:31:71:
                    7f:3c:5f:16:27:69:b1:63:c9:14:12:52:85:f5:9f:
                    58:c9:bf:e2:b5:f9:7c:39:7a:11:e3:77:04:ff:e6:
                    a6:9b:37:50:5f:3f:31:ef:eb:fd:a8:ec:4f:2f:21:
                    d8:80:70:5a:5c:d8:9f:f9:66:01:82:96:28:95:23:
                    52:c4:c2:3a:ef:0b:ca:33:c7:9d:ca:50:35:49:80:
                    e5:01:bb:7b:78:19:b9:a6:b0:fd:3c:d2:bb:31:9d:
                    e2:6d:4d:44:67:c8:b0:a0:2d:27:67:74:08:2f:89:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:4D:F3:95:22:B5:A0:76:D3:94:F1:14:36:12:F3:74:5B:71:8A
            X509v3 Authority Key Identifier:
                keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:dd:b8:da:81:e0:f6:68:9d:5e:e5:2d:d4:37:cc:bf:81:
         42:2a:31:95:a7:9b:ef:c4:6f:36:58:01:eb:96:20:34:17:ec:
         18:29:13:de:38:b2:52:bf:19:0c:80:43:bc:50:b8:da:6f:4c:
         24:22:b1:d0:61:7b:0d:7b:a2:ce:ad:86:a3:b9:92:8d:4f:54:
         81:ca:44:22:fb:66:b1:f5:1c:78:47:7e:a8:82:95:3a:2b:f2:
         5f:d6:c8:79:1a:f6:ea:ce:16:14:37:aa:49:bc:6b:f8:c4:29:
         c9:fb:12:32:6d:93:94:a9:46:b5:5c:70:24:5c:ff:3f:59:03:
         0a:c1:50:d2:c5:f4:8b:95:c2:75:95:67:b8:79:db:80:ae:4d:
         d2:13:fe:80:ba:e3:c9:18:f5:89:32:ff:d1:b1:73:23:f8:51:
         03:91:39:a5:ea:f4:9d:1c:f1:dd:99:a4:f1:9e:f9:77:e3:d6:
         3f:0f:81:9a:06:86:6d:5d:c8:9f:ff:52:11:23:a2:f5:4b:a7:
         0f:6d:37:a3:f1:6b:de:d6:7a:09:9c:66:b8:52:83:ff:73:1a:
         0f:ac:c6:d9:d7:ac:42:69:28:77:cb:62:60:fc:67:8c:b0:8a:
         35:c2:11:ef:d1:fb:25:3d:7e:d9:85:20:64:92:ef:18:61:c1:
         cf:c4:23:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumULO1cPtP+aYTHjPr0BzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTE0NzI0ODA2ODNjNjE5NzBmNjA1ZmIxOTllZWI2ZWFl
MTIxOGIwHhcNMjUwNDEzMTAwMTU3WhcNMjUwNDE0MTAwMTU3WjAzMTEwLwYDVQQD
EyhhN2E4NGRmMzk1MjJiNWEwNzZkMzk0ZjExNDM2MTJmMzc0NWI3MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQIjGshzvVWKvwWzAA3h8rplSNb8
gDegJlr6gMF0rTksewF2yL/HRYylNih3p1NfCM3dAGcZ7M74VfwVb6dMqAJuWbFS
eQQ9f9zbqfPwUk2jLOjeqKNCC7/Dgm5HobsBqE0ft4rSsa2H7kQZ7UOkYA58ajla
+UttVgVTToMbyga8CUlx9A/leUQvqjMXzDjqEwOtMXF/PF8WJ2mxY8kUElKF9Z9Y
yb/itfl8OXoR43cE/+ammzdQXz8x7+v9qOxPLyHYgHBaXNif+WYBgpYolSNSxMI6
7wvKM8edylA1SYDlAbt7eBm5prD9PNK7MZ3ibU1EZ8iwoC0nZ3QIL4kjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeoTfOVIrWgdtOU8RQ2EvN0W3GKMB8GA1UdIwQY
MBaAFMVRRySAaDxhlw9gX7GZ7rbq4SGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzIt
NTdlYjVlZjg5NmUxLzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzItNTdlYjVlZjg5NmUx
LzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFzduNqB
4PZonV7lLdQ3zL+BQioxlaeb78RvNlgB65YgNBfsGCkT3jiyUr8ZDIBDvFC42m9M
JCKx0GF7DXuizq2Go7mSjU9UgcpEIvtmsfUceEd+qIKVOivyX9bIeRr26s4WFDeq
Sbxr+MQpyfsSMm2TlKlGtVxwJFz/P1kDCsFQ0sX0i5XCdZVnuHnbgK5N0hP+gLrj
yRj1iTL/0bFzI/hRA5E5per0nRzx3Zmk8Z75d+PWPw+BmgaGbV3In/9SESOi9Uun
D203o/Fr3tZ6CZxmuFKD/3MaD6zG2desQmkod8tiYPxnjLCKNcIR79H7JT1+2YUg
ZJLvGGHBz8QjCQ==
-----END CERTIFICATE-----