Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File:                     1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier:          YAN6eDUQ/wVT54YmrtleWGN+yA9qSojK4SY5aJRTWOA=
Subject key identifier:   01:05:94:36:30:65:0C:52:66:29:F9:59:18:A8:28:CC:35:CD:FC:96
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer:       /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial:       01962ECF63B1732A3D0CF6953960F4D6A79B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=)
                          2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: RVQ0EUpR3mnNBw2VjNilvCxkCYn8EFzHnYywrAndSMM=)
                          3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=)
                          4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=)
                          5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=)
                          6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=)
                          7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=)
                          8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=)
                          9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=)
                          10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:b1:73:2a:3d:0c:f6:95:39:60:f4:d6:a7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=0105943630650c526629f95918a828cc35cdfc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:4e:a1:61:81:7b:2a:f5:03:30:9e:bd:20:
                    37:42:67:39:fe:b9:1c:ff:b7:fe:c3:a4:58:b2:75:
                    02:f8:0d:e4:d3:fc:49:42:87:61:56:ac:51:75:63:
                    f3:07:b9:9d:31:30:63:6f:55:a9:fa:a5:85:35:37:
                    21:4a:aa:a5:cb:21:71:38:78:11:4d:5f:e4:fd:20:
                    36:8b:58:6b:43:62:b1:3c:29:ce:77:b8:75:de:b0:
                    d5:b4:84:e4:b0:af:6d:9f:91:a9:9a:0d:c0:62:a6:
                    dd:93:03:9d:0a:c0:59:db:a9:3b:b8:d4:4e:c2:41:
                    63:7a:ba:3f:3b:57:a2:ac:bc:f5:3d:ed:a7:bb:7e:
                    c0:89:bb:e7:87:d8:1d:18:81:a9:a9:5c:7a:1d:a9:
                    34:4e:0d:3f:9b:d2:21:f4:7d:3d:de:c2:53:05:36:
                    b7:53:bf:5b:c4:88:a3:c0:c1:e5:f5:0c:73:22:19:
                    68:27:38:cb:c9:d5:1d:f1:a7:62:bd:92:37:d6:8a:
                    89:09:94:b7:bb:e9:9a:80:a3:87:3f:8a:80:cc:62:
                    5e:bf:05:90:3c:2c:95:ce:b0:85:ea:c5:d3:c3:f3:
                    30:ab:af:52:9c:d4:c0:8a:93:14:fe:76:86:9e:3c:
                    e4:16:c9:b3:aa:ad:0e:a7:28:f1:60:64:fa:36:f1:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:94:36:30:65:0C:52:66:29:F9:59:18:A8:28:CC:35:CD:FC:96
            X509v3 Authority Key Identifier:
                keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:80:5b:4a:1c:04:de:4d:9e:6b:5b:5d:0f:10:bc:7a:b7:2e:
         15:82:87:76:80:3d:80:74:b3:e2:78:20:49:74:ba:e4:f4:17:
         32:7f:1f:90:6f:3e:ba:d4:ac:14:ad:8a:67:6e:3b:77:1d:35:
         8e:56:2a:5b:75:a3:54:29:e1:e9:1b:2d:c6:77:96:cc:a4:84:
         70:84:b7:f4:28:a9:7f:54:c2:7c:19:26:c7:cc:73:6c:fd:82:
         d9:2c:db:36:62:f9:c8:8f:dc:9f:6e:04:a8:94:25:36:6a:ec:
         33:d4:6a:fc:01:d4:6d:8a:8d:b4:68:d0:59:24:46:b4:9b:78:
         9a:fc:79:85:31:52:98:e7:4a:09:b7:27:2d:b8:e9:8b:c8:ff:
         d8:62:a0:6a:8b:9f:16:5c:c0:d3:75:a7:f7:93:97:93:65:cc:
         82:e0:48:d3:d9:a5:27:ec:ec:9d:39:a0:0c:06:1e:1d:fa:eb:
         e4:eb:75:c2:bf:e1:8a:a1:9b:ef:5d:aa:a5:8e:9d:ac:03:49:
         9b:1c:2a:4c:a2:1d:51:59:6e:ac:49:b7:69:cf:38:f8:ae:eb:
         90:d4:df:b5:08:51:c3:53:cf:7d:c8:15:66:a1:69:20:06:ac:
         5e:a2:e0:33:37:69:6b:38:4b:6d:85:b4:a7:8b:a9:c7:a5:5d:
         e6:51:cb:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2Oxcyo9DPaVOWD01qebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5
ZDBjZjEwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EygwMTA1OTQzNjMwNjUwYzUyNjYyOWY5NTkxOGE4MjhjYzM1Y2RmYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YFOoWGBeyr1AzCevSA3Qmc5/rkc
/7f+w6RYsnUC+A3k0/xJQodhVqxRdWPzB7mdMTBjb1Wp+qWFNTchSqqlyyFxOHgR
TV/k/SA2i1hrQ2KxPCnOd7h13rDVtITksK9tn5Gpmg3AYqbdkwOdCsBZ26k7uNRO
wkFjero/O1eirLz1Pe2nu37Aibvnh9gdGIGpqVx6Hak0Tg0/m9Ih9H093sJTBTa3
U79bxIijwMHl9QxzIhloJzjLydUd8adivZI31oqJCZS3u+magKOHP4qAzGJevwWQ
PCyVzrCF6sXTw/Mwq69SnNTAipMU/naGnjzkFsmzqq0OpyjxYGT6NvENLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEFlDYwZQxSZin5WRioKMw1zfyWMB8GA1UdIwQY
MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt
NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1
LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYBbShwE
3k2ea1tdDxC8ercuFYKHdoA9gHSz4nggSXS65PQXMn8fkG8+utSsFK2KZ247dx01
jlYqW3WjVCnh6RstxneWzKSEcIS39Cipf1TCfBkmx8xzbP2C2SzbNmL5yI/cn24E
qJQlNmrsM9Rq/AHUbYqNtGjQWSRGtJt4mvx5hTFSmOdKCbcnLbjpi8j/2GKgaouf
FlzA03Wn95OXk2XMguBI09mlJ+zsnTmgDAYeHfrr5Ot1wr/hiqGb712qpY6drANJ
mxwqTKIdUVlurEm3ac84+K7rkNTftQhRw1PPfcgVZqFpIAasXqLgMzdpazhLbYW0
p4upx6Vd5lHLng==
-----END CERTIFICATE-----