Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File:                     tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier:          apgxpvmZiQEc6VNaF3I5RrCKGZ219At33AudVCPPwbc=
Subject key identifier:   E1:BE:06:75:FE:63:25:00:1D:D6:DD:0D:23:D5:07:A0:7F:75:27:45
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer:       /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial:       01962F066C1F5FFF90EC4E9AA2FE1A3AF2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number:          10F4
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
                          2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: kIzQ4wPyITQ+LeaVAR5UDIdMka5uDNytFX8Eql4XPUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6c:1f:5f:ff:90:ec:4e:9a:a2:fe:1a:3a:f2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=e1be0675fe6325001dd6dd0d23d507a07f752745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:00:6d:68:f1:14:29:08:ad:f9:14:be:4c:
                    03:8c:53:25:98:e5:5f:76:0c:80:cb:03:c0:2b:c4:
                    92:83:d4:a4:11:3b:46:82:6d:19:09:70:b4:6c:f9:
                    cb:19:cb:bc:51:71:9c:da:11:ae:36:76:6e:8e:45:
                    6c:79:7e:98:b5:d8:2e:bc:01:cc:18:10:63:79:e3:
                    3e:15:2b:9e:c8:d6:d6:c7:b3:85:e0:47:c9:42:f4:
                    10:39:52:ef:31:68:9d:a5:b7:fb:68:e6:5c:f6:30:
                    b6:58:25:da:5b:43:f8:ca:7f:9a:3c:6f:17:7b:39:
                    6c:3a:7b:fd:73:ba:32:1c:0e:9a:5e:73:9e:ab:d2:
                    d3:ef:85:71:06:8d:70:f7:f4:e5:95:37:72:36:ed:
                    e5:6e:bc:5f:af:00:9e:4c:7e:58:44:56:76:ed:a2:
                    22:1d:c3:d5:53:d7:d1:c9:36:86:25:ee:ec:52:34:
                    0e:87:b0:aa:a4:fd:aa:a9:26:e1:44:3a:04:0c:f4:
                    c2:f8:ee:af:e5:bd:83:d6:af:2b:a0:aa:77:ef:27:
                    83:da:3d:b0:98:15:31:b1:67:18:20:97:24:9f:57:
                    a9:bd:e8:b3:9a:0a:40:29:76:0f:e1:02:d6:5c:0f:
                    f8:04:09:c1:1b:61:33:aa:7f:65:3c:cf:86:af:fa:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BE:06:75:FE:63:25:00:1D:D6:DD:0D:23:D5:07:A0:7F:75:27:45
            X509v3 Authority Key Identifier:
                keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:5c:30:f0:47:14:14:f5:43:a2:b6:d5:e8:59:9a:e2:71:d6:
         3e:a1:e4:bf:65:cf:51:37:b9:95:d6:34:b0:21:3e:a5:e3:33:
         86:12:59:23:b9:8a:84:08:60:7e:8b:01:e8:66:17:01:9a:87:
         d0:9d:96:e3:a4:67:93:fd:3d:29:85:59:9e:ab:11:01:e5:89:
         8e:0f:a5:34:a2:77:da:35:da:62:bd:e8:1d:cc:49:70:19:ea:
         60:89:21:fb:46:6b:ee:30:8a:11:64:37:d9:95:e6:d6:b3:d7:
         4d:6b:c6:f4:2c:b9:e7:e8:17:e4:38:ee:04:4d:4a:36:9b:dd:
         14:76:e3:92:cc:bc:df:06:0f:bb:f0:f4:d8:8e:bd:44:12:70:
         bb:bf:62:93:5d:f2:85:d8:d5:4b:c2:4c:59:eb:ed:63:26:6b:
         9a:0c:80:73:a3:02:2a:98:e6:08:2f:71:80:b0:c8:88:8b:74:
         e4:39:e5:d8:6e:f4:29:7d:d7:92:a1:99:ae:5f:47:27:4b:6e:
         dd:21:2d:21:8d:67:34:cc:00:d8:74:3a:53:93:08:c1:63:bc:
         c0:31:cd:c7:05:54:9c:ef:ef:9f:62:9a:f4:7a:89:99:f8:b0:
         2b:5e:bc:72:f2:1a:cb:fa:b7:9d:5d:22:fc:31:b0:4f:6f:db:
         ba:40:a5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmwfX/+Q7E6aov4aOvK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj
NjcwNzMwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
EyhlMWJlMDY3NWZlNjMyNTAwMWRkNmRkMGQyM2Q1MDdhMDdmNzUyNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy0AbWjxFCkIrfkUvkwDjFMlmOVf
dgyAywPAK8SSg9SkETtGgm0ZCXC0bPnLGcu8UXGc2hGuNnZujkVseX6YtdguvAHM
GBBjeeM+FSueyNbWx7OF4EfJQvQQOVLvMWidpbf7aOZc9jC2WCXaW0P4yn+aPG8X
ezlsOnv9c7oyHA6aXnOeq9LT74VxBo1w9/TllTdyNu3lbrxfrwCeTH5YRFZ27aIi
HcPVU9fRyTaGJe7sUjQOh7CqpP2qqSbhRDoEDPTC+O6v5b2D1q8roKp37yeD2j2w
mBUxsWcYIJckn1epveizmgpAKXYP4QLWXA/4BAnBG2Ezqn9lPM+Gr/oU3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG+BnX+YyUAHdbdDSPVB6B/dSdFMB8GA1UdIwQY
MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt
Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl
LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Fww8EcU
FPVDorbV6Fma4nHWPqHkv2XPUTe5ldY0sCE+peMzhhJZI7mKhAhgfosB6GYXAZqH
0J2W46Rnk/09KYVZnqsRAeWJjg+lNKJ32jXaYr3oHcxJcBnqYIkh+0Zr7jCKEWQ3
2ZXm1rPXTWvG9Cy55+gX5DjuBE1KNpvdFHbjksy83wYPu/D02I69RBJwu79ik13y
hdjVS8JMWevtYyZrmgyAc6MCKpjmCC9xgLDIiIt05Dnl2G70KX3XkqGZrl9HJ0tu
3SEtIY1nNMwA2HQ6U5MIwWO8wDHNxwVUnO/vn2Ka9HqJmfiwK168cvIay/q3nV0i
/DGwT2/bukClzA==
-----END CERTIFICATE-----