Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File:                     4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier:          2Ct7Ch1AeQinmIJPVLeJ0vMv5anldvbhFeW1yftSkgI=
Subject key identifier:   9C:25:40:78:BD:14:62:5E:1B:72:82:E5:D1:27:A2:58:7F:E7:5C:C4
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       01962DF43F32751ABCC53A6ADE263A6E7342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number:          032E
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: JRqn1zaEOt1ISya5V8jmk+Qr767bohTEYCXTiV+yd0Y=)
                          2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:32:75:1a:bc:c5:3a:6a:de:26:3a:6e:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=9c254078bd14625e1b7282e5d127a2587fe75cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:bc:ef:9a:e9:89:18:09:09:47:56:48:28:
                    37:7b:23:60:6a:ee:92:bd:3d:83:6e:c3:4b:0d:f5:
                    2e:07:d3:4e:97:91:e5:ae:14:3b:f1:96:d8:a1:f4:
                    7a:c2:70:b8:e6:77:95:e4:7f:f1:1d:03:29:92:fc:
                    df:f9:d4:44:0c:87:10:1b:8c:82:9f:8b:d8:1d:da:
                    b9:bd:e8:89:b3:78:e1:c5:36:a5:28:2c:29:b9:4f:
                    58:ce:09:cd:77:d6:c6:fc:a9:dc:1e:66:1e:a7:05:
                    e1:70:a4:0e:18:70:aa:34:82:c9:8b:c9:7e:b7:56:
                    d9:be:58:91:ec:7d:33:a3:ef:9a:ab:6d:ec:5e:73:
                    a9:de:d1:69:a2:6a:3d:5b:6e:6b:2c:0a:51:6b:de:
                    2a:75:86:4e:25:4c:00:dc:ac:7d:c0:b0:bf:af:dc:
                    a5:02:99:55:bb:45:7f:65:7f:3b:72:5a:e2:45:13:
                    1b:66:40:d2:f7:75:6b:76:eb:1b:3c:bc:dd:80:7d:
                    de:0f:d7:28:a4:38:99:bb:ac:4d:70:34:78:82:e4:
                    58:3d:a9:c6:50:6a:10:8c:4f:24:51:38:a4:33:b6:
                    7a:32:7e:4c:8e:b2:bf:f7:3a:0c:94:b1:85:e5:94:
                    c9:9c:e4:21:19:15:2e:16:63:03:ab:67:3b:f0:63:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:40:78:BD:14:62:5E:1B:72:82:E5:D1:27:A2:58:7F:E7:5C:C4
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:e8:05:9f:2d:7f:b4:81:93:e0:8e:e9:82:b3:c0:07:27:
         3c:02:e1:03:92:d2:51:70:1d:c5:1c:bf:d5:07:ad:29:94:ff:
         57:dd:87:64:99:74:98:33:c4:ff:5a:64:c2:a8:8b:8b:68:9f:
         49:98:2c:10:8e:36:79:b6:7f:7a:57:9f:fc:1c:da:cd:42:1b:
         c1:31:f3:cb:d8:a1:12:ca:70:95:5d:c3:ef:4e:61:5a:47:4b:
         22:9c:6a:da:a2:24:99:7b:b6:0d:c3:70:b4:7d:5e:9e:22:fb:
         b8:69:15:e3:f7:54:30:bc:b1:f0:41:93:97:1a:57:24:2c:ce:
         1b:52:a0:3e:e9:a6:79:7e:2f:a2:40:1f:d5:78:39:3f:d6:3a:
         c3:b4:0f:39:4c:28:a1:d8:c9:b0:f5:e3:86:1e:f9:0a:e6:42:
         18:f0:b3:21:86:42:f9:c4:c5:ec:c6:53:13:13:99:cc:a6:69:
         b6:2d:2f:c8:c4:7f:0e:8f:63:f8:85:fc:87:88:be:30:37:81:
         ad:69:4e:83:94:6c:f4:fa:f1:11:bd:4b:74:46:54:43:d5:6a:
         9d:62:35:2b:18:5b:d6:c2:2b:63:8a:95:78:4d:0c:38:86:9c:
         eb:8c:fc:31:a4:88:4c:17:5c:79:8a:d4:0f:82:a7:d7:29:28:
         74:ca:6d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D8ydRq8xTpq3iY6bnNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx
NTEyN2UwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg5YzI1NDA3OGJkMTQ2MjVlMWI3MjgyZTVkMTI3YTI1ODdmZTc1Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseO875rpiRgJCUdWSCg3eyNgau6S
vT2DbsNLDfUuB9NOl5HlrhQ78ZbYofR6wnC45neV5H/xHQMpkvzf+dREDIcQG4yC
n4vYHdq5veiJs3jhxTalKCwpuU9YzgnNd9bG/KncHmYepwXhcKQOGHCqNILJi8l+
t1bZvliR7H0zo++aq23sXnOp3tFpomo9W25rLApRa94qdYZOJUwA3Kx9wLC/r9yl
AplVu0V/ZX87clriRRMbZkDS93VrdusbPLzdgH3eD9copDiZu6xNcDR4guRYPanG
UGoQjE8kUTikM7Z6Mn5MjrK/9zoMlLGF5ZTJnOQhGRUuFmMDq2c78GMfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwlQHi9FGJeG3KC5dEnolh/51zEMB8GA1UdIwQY
MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt
NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm
LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE7oBZ8t
f7SBk+CO6YKzwAcnPALhA5LSUXAdxRy/1QetKZT/V92HZJl0mDPE/1pkwqiLi2if
SZgsEI42ebZ/elef/BzazUIbwTHzy9ihEspwlV3D705hWkdLIpxq2qIkmXu2DcNw
tH1eniL7uGkV4/dUMLyx8EGTlxpXJCzOG1KgPummeX4vokAf1Xg5P9Y6w7QPOUwo
odjJsPXjhh75CuZCGPCzIYZC+cTF7MZTExOZzKZpti0vyMR/Do9j+IX8h4i+MDeB
rWlOg5Rs9PrxEb1LdEZUQ9VqnWI1Kxhb1sIrY4qVeE0MOIac64z8MaSITBdceYrU
D4Kn1ykodMpt8w==
-----END CERTIFICATE-----