Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          V/H1+MEppwSNeYOZdEeAFAwsFf3Z7YIChwUaL9yFnHA=
Subject key identifier:   C4:5E:93:75:B3:98:4D:90:1B:E1:40:1D:A7:88:D9:66:80:1A:52:1D
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01962F747CFDD17321159869177CFA1ADE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: orsdQwT0Y7cUdvR4sNZ+9yyueJDvSYghABguuhlEfHM=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:fd:d1:73:21:15:98:69:17:7c:fa:1a:de:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=c45e9375b3984d901be1401da788d966801a521d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:ec:1d:8a:22:2d:44:96:2c:a9:76:28:9f:
                    af:73:83:12:30:9e:e0:d4:21:9b:d8:a4:e7:03:25:
                    ea:84:e0:13:9f:1b:85:86:4a:0a:4f:83:47:da:ea:
                    ea:ec:35:ca:76:59:f9:26:41:a9:0a:55:a7:89:19:
                    01:3a:8e:74:ca:f8:5a:64:a4:2c:6b:ee:2d:aa:57:
                    cf:a3:6b:77:b0:fc:8a:7e:8e:c0:f6:ad:3f:29:5a:
                    15:e5:47:27:5b:66:6c:81:fb:4c:be:f9:90:1e:d3:
                    92:4a:6f:73:c2:0b:8c:70:bc:bc:f0:00:2c:0d:46:
                    9b:ff:c1:40:91:28:fd:d5:cf:8e:f7:c7:1f:b1:b3:
                    b2:5e:1b:63:ed:69:e1:f5:f3:4a:f7:45:60:e6:7f:
                    08:56:3b:d1:05:da:55:0b:6a:f5:2a:36:4c:46:f2:
                    97:70:bc:32:aa:78:a6:63:4b:02:ea:a3:4f:e5:72:
                    d1:36:ba:08:a3:44:2d:8c:44:b5:ac:b8:49:38:0f:
                    14:97:62:b6:3e:cf:16:09:83:b0:bd:f5:b8:b4:e3:
                    71:99:a0:1c:90:e3:36:0d:13:a9:79:da:78:49:5f:
                    d6:51:13:7a:dc:30:a7:80:bb:97:7a:38:8e:6f:50:
                    69:58:e4:cf:64:92:ae:67:55:97:96:90:df:19:ae:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:93:75:B3:98:4D:90:1B:E1:40:1D:A7:88:D9:66:80:1A:52:1D
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:f8:43:d5:ba:b6:1d:f7:4b:24:fa:b9:bc:46:36:9e:14:
         1c:f0:5a:9d:fb:80:a5:bb:b3:94:0b:eb:2e:6a:76:f3:8e:52:
         2e:09:7e:29:ab:8c:c3:6e:31:91:f8:6f:9d:20:0d:0e:6a:1f:
         83:57:27:33:6f:39:ef:3b:8a:7f:e4:a2:aa:5b:6d:f5:72:90:
         69:c9:82:f6:61:d8:b7:32:5f:55:96:32:69:07:b3:3f:ff:1e:
         d3:2b:d1:6a:3f:50:6c:3a:48:c7:9f:a9:d4:d9:83:76:32:8c:
         59:63:96:b0:dd:01:19:28:e3:7b:e2:4f:b7:38:ca:f5:b2:89:
         1e:fd:86:bb:33:9c:f7:9f:5a:8a:44:fa:24:a2:ae:94:39:4b:
         53:c3:96:7b:4f:70:9a:be:0e:45:c3:2a:dd:88:80:f0:3c:a3:
         de:04:0e:a9:c1:28:96:70:4f:e0:71:94:96:8d:77:d8:61:6b:
         50:87:fd:22:9c:b1:c9:47:60:b7:33:fb:c2:9e:16:5d:ad:93:
         28:e6:07:ef:ee:88:5a:e0:4b:6d:36:d9:52:bc:35:22:ec:47:
         4b:dd:17:55:11:9b:4e:98:8a:60:1e:bd:c2:58:2b:94:1b:90:
         e6:90:17:14:be:80:54:1e:b3:a3:52:09:f9:b0:ac:b0:f9:e8:
         61:de:e6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHz90XMhFZhpF3z6Gt4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0
ZTE1NDEwHhcNMjUwNDEzMTQwMTI1WhcNMjUwNDE0MTQwMTI1WjAzMTEwLwYDVQQD
EyhjNDVlOTM3NWIzOTg0ZDkwMWJlMTQwMWRhNzg4ZDk2NjgwMWE1MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv7sHYoiLUSWLKl2KJ+vc4MSMJ7g
1CGb2KTnAyXqhOATnxuFhkoKT4NH2urq7DXKdln5JkGpClWniRkBOo50yvhaZKQs
a+4tqlfPo2t3sPyKfo7A9q0/KVoV5UcnW2ZsgftMvvmQHtOSSm9zwguMcLy88AAs
DUab/8FAkSj91c+O98cfsbOyXhtj7Wnh9fNK90Vg5n8IVjvRBdpVC2r1KjZMRvKX
cLwyqnimY0sC6qNP5XLRNroIo0QtjES1rLhJOA8Ul2K2Ps8WCYOwvfW4tONxmaAc
kOM2DROpedp4SV/WURN63DCngLuXejiOb1BpWOTPZJKuZ1WXlpDfGa5AtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRek3WzmE2QG+FAHaeI2WaAGlIdMB8GA1UdIwQY
MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt
YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4
LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrv4Q9W6
th33SyT6ubxGNp4UHPBanfuApbuzlAvrLmp2845SLgl+KauMw24xkfhvnSANDmof
g1cnM2857zuKf+Siqltt9XKQacmC9mHYtzJfVZYyaQezP/8e0yvRaj9QbDpIx5+p
1NmDdjKMWWOWsN0BGSjje+JPtzjK9bKJHv2GuzOc959aikT6JKKulDlLU8OWe09w
mr4ORcMq3YiA8Dyj3gQOqcEolnBP4HGUlo132GFrUIf9IpyxyUdgtzP7wp4WXa2T
KOYH7+6IWuBLbTbZUrw1IuxHS90XVRGbTpiKYB69wlgrlBuQ5pAXFL6AVB6zo1IJ
+bCssPnoYd7mqA==
-----END CERTIFICATE-----