Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          aqL4SyNj0xyVlqFBk6I9kTpYUE/LFjzOJonqnK7x/+U=
Subject key identifier:   D1:4E:E6:D9:8D:6C:BB:7B:5E:01:BE:7F:3C:AD:B3:3A:3A:3D:53:65
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       01962ECF65D0A3B1CD6A873140AE9AD35F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          052B
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
                          2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: cz+nFz3JkfmJ3Jd7fHBCQtcaTdgXnhHiZ8NFK2RHKss=)
                          3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:d0:a3:b1:cd:6a:87:31:40:ae:9a:d3:5f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=d14ee6d98d6cbb7b5e01be7f3cadb33a3a3d5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:a9:ae:7c:4d:e1:ef:9b:cd:ee:cf:b4:0b:
                    aa:50:6f:f9:ca:92:b2:08:2e:96:32:fd:f9:0e:bd:
                    43:ea:5e:ea:5f:ee:b6:3b:de:98:c4:26:c3:22:f8:
                    8b:26:ca:57:27:82:ff:ae:0a:98:64:ef:fb:8f:17:
                    e3:9f:f8:da:08:88:79:4d:19:e2:17:c0:98:11:12:
                    ad:40:0e:0f:02:dc:dd:cf:cd:e4:26:af:09:d8:61:
                    67:9d:be:7a:01:bf:ad:d9:91:8d:f8:30:7e:4a:e4:
                    29:1d:a4:a0:0b:d3:90:e9:81:7f:c2:53:25:e5:18:
                    8c:6a:8f:b9:fe:bd:3c:39:33:4e:7b:eb:72:df:20:
                    58:cf:8b:5a:81:cd:2d:32:69:69:da:56:a4:87:cc:
                    3d:d7:81:5c:c5:bf:ff:35:13:84:6e:a8:3f:79:7c:
                    38:2a:c3:67:26:7b:7f:39:cd:71:d6:4f:b8:fa:f5:
                    21:d9:f0:a0:a3:22:dc:78:40:29:16:09:75:c8:e3:
                    92:a3:29:20:04:06:be:d4:12:e1:c7:5f:16:4a:90:
                    ff:a5:df:23:54:5b:f0:cb:ee:8c:65:d9:7c:e8:91:
                    a1:21:6d:9a:13:ee:13:58:2e:7c:8e:71:47:1a:3e:
                    c6:52:85:db:b5:c0:50:53:4e:cf:87:c4:d6:8e:0d:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:E6:D9:8D:6C:BB:7B:5E:01:BE:7F:3C:AD:B3:3A:3A:3D:53:65
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:37:3b:10:16:5a:76:60:14:ce:45:93:ed:15:e7:42:cc:
         c2:db:2d:41:13:4a:09:f3:13:e3:5c:4d:d9:02:fd:2e:8e:c5:
         59:bb:9f:9b:e1:41:ae:86:47:66:69:b5:91:b8:f1:0d:62:bd:
         22:3d:3b:1b:f2:56:64:0a:b7:03:21:e1:f8:72:ed:e1:83:af:
         60:ce:27:bb:a0:60:6a:45:a9:f8:6b:ea:83:78:ce:a7:0c:c1:
         17:9a:3e:ec:ec:8c:76:a8:39:50:41:e1:5a:8e:0a:4e:bd:ee:
         b8:17:cd:fc:28:bd:89:76:ba:f4:8a:ba:04:a5:e9:47:c3:9b:
         ab:b6:e0:df:a8:49:52:dc:2b:1a:58:53:e6:5c:82:f6:bf:2d:
         85:51:a7:dc:76:53:60:7b:74:3a:8a:6c:57:7b:57:43:4d:34:
         46:e8:35:71:f9:ef:50:78:bc:4b:5c:e2:d1:63:24:4f:16:da:
         ca:be:0a:ca:be:d7:d7:d7:72:e3:2d:c9:4e:7d:72:c9:88:87:
         e5:5c:63:32:63:5b:68:67:16:8a:19:62:55:ce:ec:57:69:ef:
         f8:6b:ec:a5:64:80:52:a2:da:62:03:cb:5d:a7:52:99:38:1b:
         6a:53:5f:28:e3:80:18:6a:9d:c4:1d:28:db:7d:71:7c:08:ef:
         4b:c0:2e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2XQo7HNaocxQK6a01+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZGY2YzJhZDdhY2VjYWQwNjZlMWY3N2ZlMDU5MjJmMDE2
OTE1MzYwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhkMTRlZTZkOThkNmNiYjdiNWUwMWJlN2YzY2FkYjMzYTNhM2Q1MzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6prnxN4e+bze7PtAuqUG/5ypKy
CC6WMv35Dr1D6l7qX+62O96YxCbDIviLJspXJ4L/rgqYZO/7jxfjn/jaCIh5TRni
F8CYERKtQA4PAtzdz83kJq8J2GFnnb56Ab+t2ZGN+DB+SuQpHaSgC9OQ6YF/wlMl
5RiMao+5/r08OTNOe+ty3yBYz4tagc0tMmlp2lakh8w914Fcxb//NROEbqg/eXw4
KsNnJnt/Oc1x1k+4+vUh2fCgoyLceEApFgl1yOOSoykgBAa+1BLhx18WSpD/pd8j
VFvwy+6MZdl86JGhIW2aE+4TWC58jnFHGj7GUoXbtcBQU07Ph8TWjg2JPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFO5tmNbLt7XgG+fzytszo6PVNlMB8GA1UdIwQY
MBaAFI7fbCrXrOytBm4fd/4Fki8BaRU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2Mt
YWUyOTBkNTViZGI3LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2MtYWUyOTBkNTViZGI3
LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdM3OxAW
WnZgFM5Fk+0V50LMwtstQRNKCfMT41xN2QL9Lo7FWbufm+FBroZHZmm1kbjxDWK9
Ij07G/JWZAq3AyHh+HLt4YOvYM4nu6BgakWp+Gvqg3jOpwzBF5o+7OyMdqg5UEHh
Wo4KTr3uuBfN/Ci9iXa69Iq6BKXpR8Obq7bg36hJUtwrGlhT5lyC9r8thVGn3HZT
YHt0OopsV3tXQ000Rug1cfnvUHi8S1zi0WMkTxbayr4Kyr7X19dy4y3JTn1yyYiH
5VxjMmNbaGcWihliVc7sV2nv+GvspWSAUqLaYgPLXadSmTgbalNfKOOAGGqdxB0o
231xfAjvS8AuZg==
-----END CERTIFICATE-----