Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File:                     esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier:          H/Lq46y3YkGKRUoxfakbty8SU7CO1lKbv0sazAdtC2o=
Subject key identifier:   01:15:F8:21:98:D9:32:F9:9C:BF:E7:E7:D0:65:4B:86:7F:77:15:66
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer:       /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial:       01962E61B786FB83E2393604A7F1B98E3B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number:          0CE1
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
                          2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: 7LFYYy26/N/dlhXphhkm+5g663nP3LSF277Hb3Xtxms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:86:fb:83:e2:39:36:04:a7:f1:b9:8e:3b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=0115f82198d932f99cbfe7e7d0654b867f771566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:0b:01:2b:86:f5:93:9d:b4:a6:37:43:e9:
                    01:ac:62:a1:dd:22:83:fc:70:a9:e4:ac:9f:e0:ec:
                    87:66:08:67:d9:a3:79:8c:9b:17:54:14:95:8c:f6:
                    4f:58:aa:87:f1:a7:1a:29:86:c1:42:ef:71:f6:cc:
                    6d:1f:35:66:5e:c3:36:19:82:1a:85:6d:c8:8a:0c:
                    fa:0a:7a:05:9c:18:d4:3d:95:bf:36:f5:4a:83:e8:
                    d7:52:41:7a:98:30:0e:24:ec:41:1a:1a:ef:76:8d:
                    96:0a:ed:cd:4e:84:5b:4e:e3:f1:23:86:2d:45:f8:
                    b8:99:20:27:44:36:18:a3:20:7a:f9:0b:ca:9f:02:
                    6a:f1:0e:c5:c5:27:5c:2c:d3:c2:0e:b4:5f:dc:d0:
                    b3:71:cb:43:06:c6:f4:79:e0:39:9a:89:1b:59:28:
                    0a:e3:e4:d8:9c:56:ab:62:cf:c9:1e:bc:07:76:f9:
                    d1:30:c4:88:9c:fd:3e:ad:a4:41:18:25:b6:a3:8a:
                    21:51:ba:30:37:d0:e2:8c:2f:eb:0b:81:5b:2d:11:
                    6f:ae:87:43:ae:84:8c:18:89:77:86:6a:a2:a2:6b:
                    c4:17:13:72:09:27:17:90:66:35:b7:e1:f3:b7:37:
                    f9:82:47:56:e8:bf:4e:fa:b9:ea:7a:1c:1a:d5:57:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:F8:21:98:D9:32:F9:9C:BF:E7:E7:D0:65:4B:86:7F:77:15:66
            X509v3 Authority Key Identifier:
                keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:68:82:a9:2d:bf:0e:e0:d0:09:45:ab:e8:2a:06:d1:b6:6a:
         34:4a:be:87:3b:ef:29:52:68:62:0b:53:96:33:be:5e:01:53:
         f8:88:95:c6:2f:97:72:6d:66:42:ac:b5:49:7d:09:26:4e:7f:
         26:a6:67:83:4e:bd:e5:68:fa:29:f4:97:e6:20:64:0f:3e:fd:
         26:02:62:82:36:8f:24:c4:9d:73:56:b2:93:38:d0:af:e3:32:
         02:41:62:02:b8:3a:58:cd:95:f7:66:43:94:24:dd:ad:e1:8f:
         41:e4:f4:bb:2d:f2:93:a7:70:51:21:2a:e3:75:ca:72:72:d8:
         ef:3a:f5:77:42:e6:9b:77:62:93:e3:02:e3:19:2b:a7:8a:96:
         f0:10:2f:26:59:8c:f3:7f:5d:39:71:8e:61:4a:50:b6:a4:b3:
         be:29:bb:78:56:66:4c:d5:6a:c9:a0:a9:f4:87:0a:8f:21:58:
         25:6e:94:7b:1b:cb:76:a6:2a:94:d1:20:4a:12:c7:ad:3a:8d:
         22:7b:96:99:8d:c7:58:75:f3:1a:59:8e:1e:d5:15:1e:55:0a:
         0d:ec:ab:f8:0e:fe:36:35:59:65:fe:0d:39:0f:0d:e4:bc:63:
         08:c7:a7:fc:c3:ec:14:6f:b7:04:82:21:be:0c:c4:2c:2f:31:
         4c:36:83:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbeG+4PiOTYEp/G5jjuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0
ZGNlYTMwHhcNMjUwNDEzMDkwMTE4WhcNMjUwNDE0MDkwMTE4WjAzMTEwLwYDVQQD
EygwMTE1ZjgyMTk4ZDkzMmY5OWNiZmU3ZTdkMDY1NGI4NjdmNzcxNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmYLASuG9ZOdtKY3Q+kBrGKh3SKD
/HCp5Kyf4OyHZghn2aN5jJsXVBSVjPZPWKqH8acaKYbBQu9x9sxtHzVmXsM2GYIa
hW3Iigz6CnoFnBjUPZW/NvVKg+jXUkF6mDAOJOxBGhrvdo2WCu3NToRbTuPxI4Yt
Rfi4mSAnRDYYoyB6+QvKnwJq8Q7FxSdcLNPCDrRf3NCzcctDBsb0eeA5mokbWSgK
4+TYnFarYs/JHrwHdvnRMMSInP0+raRBGCW2o4ohUbowN9DijC/rC4FbLRFvrodD
roSMGIl3hmqiomvEFxNyCScXkGY1t+Hztzf5gkdW6L9O+rnqehwa1VfUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEV+CGY2TL5nL/n59BlS4Z/dxVmMB8GA1UdIwQY
MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt
NDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4
LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2iCqS2/
DuDQCUWr6CoG0bZqNEq+hzvvKVJoYgtTljO+XgFT+IiVxi+Xcm1mQqy1SX0JJk5/
JqZng0695Wj6KfSX5iBkDz79JgJigjaPJMSdc1aykzjQr+MyAkFiArg6WM2V92ZD
lCTdreGPQeT0uy3yk6dwUSEq43XKcnLY7zr1d0Lmm3dik+MC4xkrp4qW8BAvJlmM
839dOXGOYUpQtqSzvim7eFZmTNVqyaCp9IcKjyFYJW6UexvLdqYqlNEgShLHrTqN
InuWmY3HWHXzGlmOHtUVHlUKDeyr+A7+NjVZZf4NOQ8N5LxjCMen/MPsFG+3BIIh
vgzELC8xTDaD0g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net