Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File:                     N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier:          W6g75i10+z4qBnR7X+o+5lkYnvgI552wVSHpK4iKsUs=
Subject key identifier:   9E:34:E9:E0:00:03:DE:95:6F:50:F4:4F:F2:6D:85:D7:C7:43:AD:28
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer:       /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial:       01962F064C6EAA64A8AC0C31FEC7A1D57CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number:          08FF
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: LgZdvDwGCgR0NJ4dQav3lMM6hEAR6QYlrj/D90Y4LYU=)
                          2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:6e:aa:64:a8:ac:0c:31:fe:c7:a1:d5:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=9e34e9e00003de956f50f44ff26d85d7c743ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:38:1b:e0:cb:5d:87:8d:db:e0:40:db:3c:
                    4f:3c:ee:f1:e0:8b:f8:69:dc:2f:47:ef:fc:1d:44:
                    3f:d7:aa:15:ee:0f:70:6a:98:62:d6:8c:82:34:76:
                    e8:dd:d4:8f:18:78:98:19:4b:f0:fe:1e:33:e8:e5:
                    22:51:95:4b:26:04:05:a2:b2:78:a3:d0:86:00:db:
                    48:4d:78:fc:eb:0d:18:0c:83:da:d8:f2:22:a6:e7:
                    39:2a:12:5e:de:04:af:dd:41:e4:69:de:83:b5:20:
                    d2:41:66:dd:78:d0:cd:da:78:b9:a5:90:8d:21:79:
                    55:11:0f:8e:cd:bf:bd:a6:11:dd:90:53:09:54:8d:
                    c4:a4:95:51:da:20:f6:81:a7:d5:83:ba:78:90:c1:
                    67:db:c5:87:b8:81:bb:4a:b3:c0:3d:d3:19:a7:f5:
                    f5:13:45:0c:d7:ae:ef:71:6c:2f:db:4f:42:f7:a8:
                    30:8a:72:4b:ce:da:98:ea:ed:48:83:6c:92:28:f5:
                    c4:01:52:78:62:5d:06:ab:dc:d4:52:98:48:78:2d:
                    b7:68:32:cb:da:23:52:04:02:ea:65:b6:0f:3f:48:
                    d8:82:ef:c4:45:29:0f:52:fa:bb:f5:b7:dc:bf:85:
                    ca:37:17:92:4a:6f:03:53:e0:1f:d1:54:dc:2e:6e:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:E9:E0:00:03:DE:95:6F:50:F4:4F:F2:6D:85:D7:C7:43:AD:28
            X509v3 Authority Key Identifier:
                keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2c:51:59:b3:05:c1:af:03:39:de:56:e9:e4:b9:4a:be:12:
         be:8c:35:5d:84:2a:69:b5:ad:bf:5d:04:d9:6d:4a:2e:fe:02:
         89:bd:b6:a1:d8:06:44:32:3b:97:69:b4:69:9a:df:39:95:51:
         18:6c:20:f0:0c:3b:67:eb:46:74:36:1c:da:91:70:06:9b:19:
         c5:42:83:5d:44:74:40:c3:5d:36:8f:22:f7:02:50:eb:b0:97:
         d0:c4:2d:d4:1b:bb:df:2c:2d:54:62:26:c5:3c:da:58:7c:c8:
         a0:92:54:94:47:7e:1f:44:83:df:41:c4:ba:95:1c:c0:fa:51:
         0c:7a:63:95:53:a1:64:ca:82:23:e3:a8:da:5d:fe:18:14:1b:
         03:22:5e:e2:ce:f3:97:5a:9d:42:ab:39:8a:ac:d6:cd:6b:6f:
         a1:cd:4b:62:37:c0:e9:6e:51:35:41:fd:4a:d4:52:6d:69:47:
         a9:79:f7:9e:ce:e9:2a:d9:a0:db:52:30:83:25:dc:59:34:4c:
         c4:a8:24:5c:9b:43:eb:16:a2:94:a3:bd:1b:72:e4:68:32:ad:
         61:14:80:0a:30:7d:bf:6a:5e:4d:69:e0:03:e4:39:3b:d8:88:
         61:80:27:d5:fd:f7:21:01:e3:77:0f:45:3a:3e:2e:52:d5:47:
         17:80:9e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBkxuqmSorAwx/seh1XytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw
NTQwNGQwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg5ZTM0ZTllMDAwMDNkZTk1NmY1MGY0NGZmMjZkODVkN2M3NDNhZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xM4G+DLXYeN2+BA2zxPPO7x4Iv4
adwvR+/8HUQ/16oV7g9waphi1oyCNHbo3dSPGHiYGUvw/h4z6OUiUZVLJgQForJ4
o9CGANtITXj86w0YDIPa2PIipuc5KhJe3gSv3UHkad6DtSDSQWbdeNDN2ni5pZCN
IXlVEQ+Ozb+9phHdkFMJVI3EpJVR2iD2gafVg7p4kMFn28WHuIG7SrPAPdMZp/X1
E0UM167vcWwv209C96gwinJLztqY6u1Ig2ySKPXEAVJ4Yl0Gq9zUUphIeC23aDLL
2iNSBALqZbYPP0jYgu/ERSkPUvq79bfcv4XKNxeSSm8DU+Af0VTcLm4t2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ406eAAA96Vb1D0T/JthdfHQ60oMB8GA1UdIwQY
MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt
NWM4MzBmZTRiYWQwLzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw
LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACxRWbMF
wa8DOd5W6eS5Sr4Svow1XYQqabWtv10E2W1KLv4Cib22odgGRDI7l2m0aZrfOZVR
GGwg8Aw7Z+tGdDYc2pFwBpsZxUKDXUR0QMNdNo8i9wJQ67CX0MQt1Bu73ywtVGIm
xTzaWHzIoJJUlEd+H0SD30HEupUcwPpRDHpjlVOhZMqCI+Oo2l3+GBQbAyJe4s7z
l1qdQqs5iqzWzWtvoc1LYjfA6W5RNUH9StRSbWlHqXn3ns7pKtmg21IwgyXcWTRM
xKgkXJtD6xailKO9G3LkaDKtYRSACjB9v2peTWngA+Q5O9iIYYAn1f33IQHjdw9F
Oj4uUtVHF4CeHA==
-----END CERTIFICATE-----