Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File:                     iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier:          JBzr1q4qQIoOP0HshZski5AsQ/+f9hatIYGlw9ZUYGE=
Subject key identifier:   6D:DE:12:A3:C8:5C:33:5A:90:C3:08:32:74:B9:95:7D:8E:30:B8:E5
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer:       /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial:       01962E6175A1C5A9B3B727430E5960844CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number:          061B
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
                          2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: W5K/y9HaHF8T91Ucxi8DitNHomRyO+bsYsygGyhVMv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:75:a1:c5:a9:b3:b7:27:43:0e:59:60:84:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=6dde12a3c85c335a90c3083274b9957d8e30b8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:81:2b:9e:6a:4e:5b:ad:8e:1f:62:cf:f4:
                    6c:cd:c5:a3:56:7b:39:c2:2c:3b:d0:54:9e:ce:d6:
                    d7:f2:ac:10:c6:63:b0:c4:bf:64:df:80:ea:c8:75:
                    02:bb:de:f2:ce:9c:7f:5a:12:90:a3:04:fb:14:5f:
                    22:f2:e3:b4:20:97:9e:26:f5:af:12:eb:fb:3c:9f:
                    28:82:a9:1b:af:da:d3:db:dd:fe:4d:73:d9:f0:ef:
                    8b:68:c4:75:f9:a3:b7:33:56:bb:1a:8d:be:c7:67:
                    04:5b:3d:ce:2d:07:a3:6f:65:60:8d:1e:53:5c:f2:
                    54:75:1e:4f:70:e6:35:de:57:f6:53:71:46:59:98:
                    1a:b1:78:55:d2:01:ec:4f:57:24:27:4e:bb:ff:a0:
                    9d:6a:4e:80:a0:f4:53:2b:79:94:6a:4d:13:e5:c6:
                    7e:5f:89:f9:32:1a:ce:d1:db:c9:85:f2:43:a9:a6:
                    e3:91:ee:bb:02:3e:e4:ad:5f:6a:f6:30:b8:8e:97:
                    ee:29:55:41:f0:96:68:6a:17:ce:57:3b:a1:9e:60:
                    c5:09:14:eb:de:09:0b:ab:fc:d1:cc:ef:df:8a:62:
                    cd:3a:46:10:95:20:0a:9f:5f:2f:e5:db:1e:83:da:
                    b2:12:ac:2e:09:a4:b8:3a:b7:d0:ab:15:0c:f4:4f:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:12:A3:C8:5C:33:5A:90:C3:08:32:74:B9:95:7D:8E:30:B8:E5
            X509v3 Authority Key Identifier:
                keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:44:7e:fc:2e:f8:1e:27:0f:e7:25:1b:ce:03:b9:e2:d6:
         9f:de:b3:24:7a:6b:fc:fe:79:00:3a:a8:32:7c:c9:76:a4:ce:
         b4:e5:8d:c6:27:c4:0d:cb:59:ca:33:f2:d9:08:cd:d5:dd:6f:
         8b:93:d2:78:dc:ab:86:a2:d6:1b:9d:73:19:39:09:24:8b:96:
         57:d5:37:bb:88:fa:87:17:4e:9b:4f:ef:c3:a2:41:0f:c4:38:
         f3:b1:eb:ff:c1:97:ec:8c:69:40:48:07:36:88:72:fd:a2:fe:
         06:cd:72:96:bf:63:b2:f3:08:76:90:f2:41:3f:2a:f9:e3:71:
         1e:ab:37:cb:c0:6a:cc:fe:0f:88:89:0e:12:03:c9:31:e1:ae:
         28:db:56:46:b3:48:ec:58:36:c2:96:92:1c:eb:43:81:3c:58:
         50:1f:d6:bc:68:43:6e:31:e6:12:1e:ce:73:6d:8c:81:80:fe:
         a5:4a:d5:85:fa:f1:89:02:5d:56:f0:14:f0:6a:d6:bb:41:ba:
         12:04:ba:c2:18:24:0f:e2:02:80:f5:ff:78:8e:1f:84:d5:cc:
         56:17:fc:6d:27:4c:4f:a2:07:00:c4:e2:63:c4:de:a5:4a:71:
         24:73:3f:e0:cb:8e:bd:9b:21:ee:17:1c:30:c4:57:1a:7c:1b:
         1f:a3:6a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXWhxamztydDDllghEzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj
MWU3YmUwHhcNMjUwNDEzMDkwMTAxWhcNMjUwNDE0MDkwMTAxWjAzMTEwLwYDVQQD
Eyg2ZGRlMTJhM2M4NWMzMzVhOTBjMzA4MzI3NGI5OTU3ZDhlMzBiOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WBK55qTlutjh9iz/RszcWjVns5
wiw70FSeztbX8qwQxmOwxL9k34DqyHUCu97yzpx/WhKQowT7FF8i8uO0IJeeJvWv
Euv7PJ8ogqkbr9rT293+TXPZ8O+LaMR1+aO3M1a7Go2+x2cEWz3OLQejb2VgjR5T
XPJUdR5PcOY13lf2U3FGWZgasXhV0gHsT1ckJ067/6Cdak6AoPRTK3mUak0T5cZ+
X4n5MhrO0dvJhfJDqabjke67Aj7krV9q9jC4jpfuKVVB8JZoahfOVzuhnmDFCRTr
3gkLq/zRzO/fimLNOkYQlSAKn18v5dseg9qyEqwuCaS4OrfQqxUM9E+RLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3eEqPIXDNakMMIMnS5lX2OMLjlMB8GA1UdIwQY
MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt
ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1
LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq9Efvwu
+B4nD+clG84DueLWn96zJHpr/P55ADqoMnzJdqTOtOWNxifEDctZyjPy2QjN1d1v
i5PSeNyrhqLWG51zGTkJJIuWV9U3u4j6hxdOm0/vw6JBD8Q487Hr/8GX7IxpQEgH
Nohy/aL+Bs1ylr9jsvMIdpDyQT8q+eNxHqs3y8BqzP4PiIkOEgPJMeGuKNtWRrNI
7Fg2wpaSHOtDgTxYUB/WvGhDbjHmEh7Oc22MgYD+pUrVhfrxiQJdVvAU8GrWu0G6
EgS6whgkD+ICgPX/eI4fhNXMVhf8bSdMT6IHAMTiY8TepUpxJHM/4MuOvZsh7hcc
MMRXGnwbH6NqcA==
-----END CERTIFICATE-----