Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          9LqIb/x3Emtv/nm2ZUD6Oj+rSUBg6yqu2b0GhpSvwY0=
Subject key identifier:   C1:44:70:69:D6:C9:79:7B:01:3E:00:97:06:BD:07:1B:65:3F:AF:3C
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       01962F3DF58EB89B418FD6F41AFB308BB9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          10EB
Signing time:             Sun 13 Apr 2025 13:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:51 +0000
Files and hashes:         1: NDP41gN8CNlECLeeTXiB3irVa-U.roa (hash: NHPnUFyVxDx6ULqS5NRDRG6OIw5kEx/T23RBy4+HG3M=)
                          2: js2bBD_I5yJI3Ud9Hr2ey1HFBOk.roa (hash: xsXDDwFas5f9a39GX28p7wV/dlDbG2nAM+0coXG2hrE=)
                          3: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: 4Di0QUOiZQTmum4UWzEVA25O9jGVWbpgU25IJe1rVrs=)
                          4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
                          5: uxTu2Af7G_ZNcFKBsHAS_BIRmZs.roa (hash: OAOgfI+ToS2uVsVUxA6LbD290GEB1RA6ap9BGvXIi7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f5:8e:b8:9b:41:8f:d6:f4:1a:fb:30:8b:b9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Apr 13 13:01:51 2025 GMT
            Not After : Apr 14 13:01:51 2025 GMT
        Subject: CN=c1447069d6c9797b013e009706bd071b653faf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:27:de:07:b4:6e:08:31:1f:1f:e1:a2:86:
                    5d:f3:a2:57:4e:50:26:58:2d:6e:34:95:3a:98:30:
                    da:25:c5:0a:53:39:72:2f:93:72:f9:e5:f5:ca:ed:
                    60:ff:bc:25:55:2f:fe:95:04:2d:a2:be:f2:d4:88:
                    fd:65:fa:b9:63:5d:4b:75:8f:c3:20:cf:18:52:83:
                    13:88:e3:56:ee:d0:ea:ff:51:87:18:92:0c:2b:7d:
                    5c:65:00:b8:30:39:22:82:94:62:fb:4d:eb:48:a6:
                    ea:04:78:4a:db:7e:96:2d:76:cd:f2:83:83:83:de:
                    5d:11:c2:cd:9a:48:0f:8a:f2:e8:fb:29:e8:0e:b0:
                    78:89:f4:52:4f:51:9c:07:f4:9a:46:23:ff:f5:a8:
                    dd:2a:51:71:3c:f8:87:a9:db:c8:9a:23:5f:fd:2b:
                    f4:9a:99:1b:13:4d:69:c0:ba:c4:c1:dd:e8:77:5e:
                    7c:bd:12:0d:7a:4c:b7:02:61:8b:85:9b:c5:30:5c:
                    eb:f8:d9:44:72:a2:28:49:64:d1:97:f5:ea:3c:27:
                    88:a3:c2:f6:d4:0a:be:eb:16:66:b1:47:90:f7:40:
                    fb:6c:6e:cf:62:06:ff:2d:5f:e8:2d:15:21:d7:d7:
                    70:f7:63:47:05:b1:1e:c0:c8:a0:5b:8b:44:b1:a9:
                    5f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:44:70:69:D6:C9:79:7B:01:3E:00:97:06:BD:07:1B:65:3F:AF:3C
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:19:ec:99:74:5f:86:d9:6d:9b:bb:ca:04:56:22:d9:a3:
         64:66:fe:a9:40:a1:3e:c4:57:7c:35:de:9b:6f:f3:dd:99:37:
         32:a1:ad:fa:af:36:1f:1d:f5:79:d0:75:54:c0:b9:a0:2f:3b:
         5a:f5:d8:bb:89:3f:d6:fd:3d:52:ec:62:0b:cc:3e:d0:e0:f9:
         cb:08:db:48:67:bd:e6:36:1d:4c:6a:52:42:37:10:ca:4e:11:
         98:7e:4b:d9:cd:85:56:ff:ce:42:87:6e:3e:a7:8f:1e:53:ec:
         95:4d:c3:c8:d9:1a:7f:39:89:8e:5c:f9:b9:eb:47:ed:54:47:
         cf:fd:94:38:af:c8:87:e5:84:b4:02:3b:a6:b2:b0:a4:b3:a3:
         38:d7:33:bc:68:02:1a:4c:09:04:a1:d8:d0:c2:89:01:c5:74:
         90:e9:85:7d:43:8f:e3:1a:d4:67:0a:78:4f:33:b7:82:e2:6b:
         a1:54:e2:78:1d:9a:3c:67:41:3e:24:cb:de:cb:6c:d9:dc:79:
         82:67:da:99:90:0f:9e:d5:46:43:e7:37:33:93:02:a0:ca:eb:
         54:b4:ce:6f:84:09:22:96:38:6c:c4:b4:c2:b8:9c:cd:a4:89:
         7f:72:c3:71:38:cc:2f:12:5b:c5:d3:f8:8b:00:38:33:41:0b:
         73:12:f1:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPfWOuJtBj9b0Gvswi7nYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjUwNDEzMTMwMTUxWhcNMjUwNDE0MTMwMTUxWjAzMTEwLwYDVQQD
EyhjMTQ0NzA2OWQ2Yzk3OTdiMDEzZTAwOTcwNmJkMDcxYjY1M2ZhZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4n3ge0bggxHx/hooZd86JXTlAm
WC1uNJU6mDDaJcUKUzlyL5Ny+eX1yu1g/7wlVS/+lQQtor7y1Ij9Zfq5Y11LdY/D
IM8YUoMTiONW7tDq/1GHGJIMK31cZQC4MDkigpRi+03rSKbqBHhK236WLXbN8oOD
g95dEcLNmkgPivLo+ynoDrB4ifRST1GcB/SaRiP/9ajdKlFxPPiHqdvImiNf/Sv0
mpkbE01pwLrEwd3od158vRINeky3AmGLhZvFMFzr+NlEcqIoSWTRl/XqPCeIo8L2
1Aq+6xZmsUeQ90D7bG7PYgb/LV/oLRUh19dw92NHBbEewMigW4tEsalfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFEcGnWyXl7AT4Alwa9BxtlP688MB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlUZ7Jl0
X4bZbZu7ygRWItmjZGb+qUChPsRXfDXem2/z3Zk3MqGt+q82Hx31edB1VMC5oC87
WvXYu4k/1v09UuxiC8w+0OD5ywjbSGe95jYdTGpSQjcQyk4RmH5L2c2FVv/OQodu
PqePHlPslU3DyNkafzmJjlz5uetH7VRHz/2UOK/Ih+WEtAI7prKwpLOjONczvGgC
GkwJBKHY0MKJAcV0kOmFfUOP4xrUZwp4TzO3guJroVTieB2aPGdBPiTL3sts2dx5
gmfamZAPntVGQ+c3M5MCoMrrVLTOb4QJIpY4bMS0wriczaSJf3LDcTjMLxJbxdP4
iwA4M0ELcxLxFw==
-----END CERTIFICATE-----