Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
File:                     h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json)
Hash identifier:          wkfjFqyCYqCX308TDZwAPlrpUwmJgifu6pLaFe2OJso=
Subject key identifier:   3E:69:FB:42:CD:12:FF:19:BD:09:1F:85:78:02:2B:C7:29:B0:AE:8D
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01962E98C1545A9DFAD9D5C9249702259593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=)
                          2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=)
                          3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=)
                          4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=)
                          5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=)
                          6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: QtpYz0AQr4AvFqaHzGCB43MXQqXlRlzsUMyd5TMBi9c=)
                          7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=)
                          8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=)
                          9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=)
                          10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:54:5a:9d:fa:d9:d5:c9:24:97:02:25:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=3e69fb42cd12ff19bd091f8578022bc729b0ae8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:8f:e0:cb:7a:f7:61:e2:04:a9:b1:78:95:
                    96:1e:d6:bc:6b:29:2a:77:56:45:68:09:51:9d:ce:
                    25:59:41:d5:60:21:cb:52:e6:54:bd:79:14:1c:13:
                    e9:81:c9:de:19:68:fe:8f:ea:82:90:cf:6c:7c:db:
                    26:0b:d1:03:89:25:8e:40:9c:e6:fe:01:55:91:40:
                    26:2d:b2:4b:35:6a:6e:46:f5:3b:4a:95:8a:23:b3:
                    22:d8:32:21:60:cc:b9:32:8a:ce:a4:ce:6c:50:5b:
                    69:ee:c0:19:06:e5:b0:30:80:10:8a:47:ef:58:77:
                    4d:f0:3b:d7:f6:74:54:6b:67:7d:9a:f5:bd:61:44:
                    07:83:e1:d9:7b:f7:46:89:cc:72:4c:f5:74:19:e7:
                    b5:be:05:1f:69:cd:88:bf:ad:a9:4b:c7:bb:0d:ab:
                    ad:ba:60:3b:e7:4b:40:4d:d8:52:19:c9:5f:e2:d6:
                    bd:8a:9c:f0:88:f9:46:b6:8f:ad:c7:00:1d:dd:33:
                    7c:5a:aa:8b:3c:50:a5:1c:da:74:d7:38:26:e4:11:
                    22:46:a0:27:66:24:77:62:a3:f8:ea:86:5c:53:64:
                    7d:4f:04:7c:bc:db:8c:b9:ae:c0:24:d4:1a:16:92:
                    f3:7d:c9:d4:1f:cd:b6:9d:d9:ce:8c:f9:0f:63:ae:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:FB:42:CD:12:FF:19:BD:09:1F:85:78:02:2B:C7:29:B0:AE:8D
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:9d:62:54:1e:56:75:45:6e:11:35:4b:c7:41:04:99:28:
         ec:68:b4:43:63:9f:25:86:9d:ab:1c:ab:f0:5e:3a:3d:99:10:
         a1:ee:09:d0:ca:b8:94:df:f8:1c:6d:d7:42:b6:cb:1d:c0:f1:
         05:0a:36:85:56:bc:27:36:29:8d:7b:de:92:b7:a9:07:aa:7a:
         0f:9e:67:1e:de:b9:56:11:89:06:d5:d8:70:6f:6e:cc:cd:15:
         35:ff:b1:d0:9c:6e:78:15:05:bd:8a:76:61:ce:b0:fd:64:61:
         62:84:df:26:ba:00:9a:8b:4a:81:07:3f:21:5b:9b:9c:19:48:
         96:4b:81:e5:7f:f7:c5:fc:1a:fd:0f:6e:2d:55:b9:00:3f:9a:
         9b:ac:8e:2c:e7:3f:ae:d9:2f:2b:d2:de:2e:4a:26:de:3f:21:
         fb:74:f0:6d:88:89:e3:59:de:0d:82:27:5a:7b:fa:e9:2b:8b:
         a1:89:a1:4d:35:5a:d7:aa:e1:24:f7:45:bb:b2:c4:fe:a1:ee:
         90:65:d8:70:0e:1e:d8:12:d2:89:5c:7c:50:cf:0d:ee:44:7f:
         f8:47:30:0f:ee:18:b8:9e:b2:fc:f7:ff:f6:7d:7e:3e:72:2c:
         60:2d:44:4d:61:55:4f:50:0b:84:75:97:af:b1:da:1c:26:d8:
         2f:77:af:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMFUWp362dXJJJcCJZWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx
NWQwNzMwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
EygzZTY5ZmI0MmNkMTJmZjE5YmQwOTFmODU3ODAyMmJjNzI5YjBhZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFyP4Mt692HiBKmxeJWWHta8aykq
d1ZFaAlRnc4lWUHVYCHLUuZUvXkUHBPpgcneGWj+j+qCkM9sfNsmC9EDiSWOQJzm
/gFVkUAmLbJLNWpuRvU7SpWKI7Mi2DIhYMy5MorOpM5sUFtp7sAZBuWwMIAQikfv
WHdN8DvX9nRUa2d9mvW9YUQHg+HZe/dGicxyTPV0Gee1vgUfac2Iv62pS8e7Daut
umA750tATdhSGclf4ta9ipzwiPlGto+txwAd3TN8WqqLPFClHNp01zgm5BEiRqAn
ZiR3YqP46oZcU2R9TwR8vNuMua7AJNQaFpLzfcnUH822ndnOjPkPY674nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5p+0LNEv8ZvQkfhXgCK8cpsK6NMB8GA1UdIwQY
MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt
ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3
LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+adYlQe
VnVFbhE1S8dBBJko7Gi0Q2OfJYadqxyr8F46PZkQoe4J0Mq4lN/4HG3XQrbLHcDx
BQo2hVa8JzYpjXvekrepB6p6D55nHt65VhGJBtXYcG9uzM0VNf+x0JxueBUFvYp2
Yc6w/WRhYoTfJroAmotKgQc/IVubnBlIlkuB5X/3xfwa/Q9uLVW5AD+am6yOLOc/
rtkvK9LeLkom3j8h+3TwbYiJ41neDYInWnv66SuLoYmhTTVa16rhJPdFu7LE/qHu
kGXYcA4e2BLSiVx8UM8N7kR/+EcwD+4YuJ6y/Pf/9n1+PnIsYC1ETWFVT1ALhHWX
r7HaHCbYL3evtA==
-----END CERTIFICATE-----