Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File:                     Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier:          B8PnJf4B/15JmF6TjGIDrCv9jrdzB3eCEIbXljtZUaU=
Subject key identifier:   A6:C7:D4:3D:9B:D5:EC:EB:D6:8B:D5:8D:18:1A:3B:B0:6F:73:B8:12
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer:       /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial:       01962ECF56E45B8F3EC04284FD514F78A92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number:          1110
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
                          2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: AZ9/I9R1Z67Jst0FD+6Y5v9ZbTe4TYs1YGcZcH8Mseg=)
                          3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:e4:5b:8f:3e:c0:42:84:fd:51:4f:78:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=a6c7d43d9bd5ecebd68bd58d181a3bb06f73b812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:d0:9b:47:50:86:81:cb:13:58:d3:70:41:
                    37:63:6f:0b:1f:38:45:aa:3a:d5:c0:98:f1:ba:7f:
                    de:3b:fe:83:e4:c2:73:9c:23:8f:7f:2a:e2:5b:82:
                    55:d5:32:78:0b:3a:07:f7:d3:1b:44:89:9f:cf:5a:
                    8a:76:56:dc:ef:7b:74:41:5e:bf:71:4e:e2:c3:5f:
                    3d:39:58:63:fc:8a:fa:23:9a:2e:56:96:95:15:f7:
                    1a:f5:f6:2e:99:36:73:6e:ee:61:9b:e0:58:8a:4b:
                    bc:b5:0d:bb:c4:e7:f3:bf:9e:01:c8:4b:64:6d:5b:
                    fe:94:0a:ff:01:8d:56:3c:43:8b:31:72:f1:94:cf:
                    35:c4:63:84:4f:7e:e3:e9:c8:bf:ce:13:b4:dd:08:
                    eb:0c:91:9b:b9:2a:61:12:0c:0f:91:b7:bb:37:33:
                    a2:2d:ea:a9:08:0a:74:29:ef:91:b9:ef:b6:77:7f:
                    36:d2:23:5f:61:86:58:fb:47:49:e8:4e:61:89:f9:
                    80:3e:12:58:f2:b7:60:83:39:27:f3:10:9a:d4:01:
                    81:e6:27:81:6f:4c:92:33:d6:aa:14:b8:49:24:1e:
                    84:48:dc:cb:aa:2f:56:d6:e6:37:31:12:33:f4:c3:
                    ad:81:f9:44:01:de:d1:99:ca:26:24:e6:f8:fe:31:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:D4:3D:9B:D5:EC:EB:D6:8B:D5:8D:18:1A:3B:B0:6F:73:B8:12
            X509v3 Authority Key Identifier:
                keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:20:ec:8e:4c:3b:0e:3c:36:06:ad:5c:44:d6:d9:2d:d4:90:
         55:e8:51:cf:fa:f4:c0:5a:56:52:8b:50:7c:49:78:87:61:05:
         2b:89:17:b4:c1:06:a9:a6:c6:19:27:d7:67:22:f7:21:a9:37:
         71:9d:c0:60:7b:7a:b6:c2:d9:12:f2:5c:01:33:9b:62:dc:93:
         ce:e7:19:ee:e7:e7:c0:1a:39:83:27:1f:0f:b5:60:64:40:23:
         d8:2d:a0:45:14:ee:b3:b6:25:cb:8d:20:ab:f4:5c:15:be:b6:
         ea:8e:d7:13:af:2c:af:5f:d7:c9:2b:e2:50:54:ac:b6:cf:f6:
         de:4d:a8:06:c6:e5:cb:51:08:48:24:37:9c:67:89:b8:dc:43:
         27:83:5d:dc:75:65:b9:20:1c:84:40:75:62:6e:f5:5c:4f:3b:
         99:09:30:1e:1a:da:e7:86:bd:ae:f7:4d:a7:c7:c5:73:84:b3:
         f0:f9:aa:69:e3:34:74:c1:71:0e:4b:d4:53:27:c1:3f:37:91:
         e9:a6:85:2c:03:b3:53:95:9f:e8:90:d4:dc:e4:bc:fc:71:74:
         13:e1:02:b2:55:9b:33:16:62:54:94:89:ab:43:5a:02:2d:a6:
         94:58:2d:72:5b:95:ab:70:95:b4:8d:18:53:7a:26:b5:aa:d3:
         b4:e4:8d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1bkW48+wEKE/VFPeKkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNDEzMTEwMTAyWhcNMjUwNDE0MTEwMTAyWjAzMTEwLwYDVQQD
EyhhNmM3ZDQzZDliZDVlY2ViZDY4YmQ1OGQxODFhM2JiMDZmNzNiODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxObQm0dQhoHLE1jTcEE3Y28LHzhF
qjrVwJjxun/eO/6D5MJznCOPfyriW4JV1TJ4CzoH99MbRImfz1qKdlbc73t0QV6/
cU7iw189OVhj/Ir6I5ouVpaVFfca9fYumTZzbu5hm+BYiku8tQ27xOfzv54ByEtk
bVv+lAr/AY1WPEOLMXLxlM81xGOET37j6ci/zhO03QjrDJGbuSphEgwPkbe7NzOi
LeqpCAp0Ke+Rue+2d3820iNfYYZY+0dJ6E5hifmAPhJY8rdggzkn8xCa1AGB5ieB
b0ySM9aqFLhJJB6ESNzLqi9W1uY3MRIz9MOtgflEAd7RmcomJOb4/jH4/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbH1D2b1ezr1ovVjRgaO7Bvc7gSMB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCDsjkw7
Djw2Bq1cRNbZLdSQVehRz/r0wFpWUotQfEl4h2EFK4kXtMEGqabGGSfXZyL3Iak3
cZ3AYHt6tsLZEvJcATObYtyTzucZ7ufnwBo5gycfD7VgZEAj2C2gRRTus7Yly40g
q/RcFb626o7XE68sr1/XySviUFSsts/23k2oBsbly1EISCQ3nGeJuNxDJ4Nd3HVl
uSAchEB1Ym71XE87mQkwHhra54a9rvdNp8fFc4Sz8PmqaeM0dMFxDkvUUyfBPzeR
6aaFLAOzU5Wf6JDU3OS8/HF0E+ECslWbMxZiVJSJq0NaAi2mlFgtcluVq3CVtI0Y
U3omtarTtOSN5Q==
-----END CERTIFICATE-----