Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          80eRyeK4sjOJKJu/EtlDF0AbYneXqT0vlgUQ9Ok+Hwk=
Subject key identifier:   EE:3A:EF:35:E8:0F:50:15:9F:E5:50:54:1D:AA:F2:F3:70:C3:61:22
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01962DF41C84B6CCAA6DA9ABB83703D3E8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          141B
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: Uy9svMZyNiUndGoPGsQHXhwMTZQh9De534uPULtGNg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1c:84:b6:cc:aa:6d:a9:ab:b8:37:03:d3:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=ee3aef35e80f50159fe550541daaf2f370c36122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:52:19:9c:70:39:d3:b5:26:fb:45:a0:f2:
                    33:40:5c:91:3e:30:ae:94:0f:5b:95:9d:e3:e5:2f:
                    77:73:ed:0c:6b:ce:d1:f0:98:cc:3b:36:f0:66:fa:
                    c4:0e:32:12:2b:2d:13:0f:38:73:62:0d:c8:e2:bd:
                    72:3f:a7:3e:13:b8:56:25:cc:f1:62:c7:bb:b1:65:
                    c3:b1:77:be:a1:1f:0f:17:6f:f9:f0:54:9a:fd:0a:
                    d6:97:75:0e:8b:9f:8d:18:77:85:8d:68:9e:38:0f:
                    e8:45:83:1a:17:ca:f4:4f:56:5a:66:8f:ba:8a:74:
                    5f:bc:a8:b5:19:c8:70:90:b5:2b:72:ee:d4:1d:ea:
                    12:9e:2c:03:84:ea:8e:58:50:10:da:68:91:37:45:
                    7d:43:6e:3e:62:32:60:e9:28:74:15:b6:6f:4d:4f:
                    ac:28:d5:cc:b4:e1:e0:09:6b:0c:d8:9d:72:47:b9:
                    78:0b:3b:e0:d7:5a:0c:9e:03:cb:e1:0e:36:c0:1a:
                    91:59:9d:86:b7:8d:a7:5b:f5:e2:36:e0:62:82:5e:
                    50:c9:b7:03:a5:ec:5f:0b:62:9f:22:69:37:32:a7:
                    30:59:8d:1d:21:cf:16:71:72:da:22:13:58:be:61:
                    3e:fc:25:14:1d:99:42:29:7e:e9:5a:a6:93:7f:a0:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:EF:35:E8:0F:50:15:9F:E5:50:54:1D:AA:F2:F3:70:C3:61:22
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:9d:a5:be:ae:9f:06:bd:ad:a5:ab:4c:a1:6c:57:3a:8f:
         43:15:1d:17:bb:47:27:fd:50:1f:3b:77:e4:51:ba:b5:dd:01:
         c2:1a:f1:48:6f:02:43:d4:8c:e3:c3:55:d9:f5:31:2c:6c:8b:
         e9:f7:90:18:26:fd:8d:09:38:9b:eb:a5:dd:5a:1e:46:97:21:
         86:34:78:dc:55:2d:0e:ba:12:0a:97:15:85:17:c3:f9:39:c5:
         f7:27:07:c6:b8:33:3d:4d:42:c5:5d:05:52:31:96:c8:d3:2e:
         6b:2a:0f:64:e0:4e:a9:c4:2b:1a:0c:25:c0:ce:b7:b7:22:26:
         b2:78:6d:9f:78:cc:6e:b3:7e:b1:9e:35:ce:26:60:7c:3a:f2:
         a3:ef:03:6a:ed:7d:c8:5c:da:ff:bd:30:af:78:26:fe:0d:eb:
         5e:1c:2c:19:fc:30:79:bf:46:7f:21:d6:1b:39:71:d6:31:65:
         06:a9:cc:15:87:8d:6e:a6:0f:88:7e:56:42:ac:98:2f:cd:bc:
         df:24:43:1e:8b:43:12:b5:69:f5:ad:73:d2:4d:ac:d4:5d:56:
         0b:9c:10:34:ac:4d:a3:27:ec:95:87:a7:2d:2b:71:6c:5f:e8:
         24:fa:40:cb:55:fb:ac:18:1c:54:6e:27:f2:d5:9e:e7:14:4f:
         b6:d4:64:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ByEtsyqbamruDcD0+i/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3
YTZlOWYwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EyhlZTNhZWYzNWU4MGY1MDE1OWZlNTUwNTQxZGFhZjJmMzcwYzM2MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS5SGZxwOdO1JvtFoPIzQFyRPjCu
lA9blZ3j5S93c+0Ma87R8JjMOzbwZvrEDjISKy0TDzhzYg3I4r1yP6c+E7hWJczx
Yse7sWXDsXe+oR8PF2/58FSa/QrWl3UOi5+NGHeFjWieOA/oRYMaF8r0T1ZaZo+6
inRfvKi1GchwkLUrcu7UHeoSniwDhOqOWFAQ2miRN0V9Q24+YjJg6Sh0FbZvTU+s
KNXMtOHgCWsM2J1yR7l4Czvg11oMngPL4Q42wBqRWZ2Gt42nW/XiNuBigl5QybcD
pexfC2KfImk3MqcwWY0dIc8WcXLaIhNYvmE+/CUUHZlCKX7pWqaTf6DA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO467zXoD1AVn+VQVB2q8vNww2EiMB8GA1UdIwQY
MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It
MDY1YWE0MTU1ZWQ0LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0
LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNCdpb6u
nwa9raWrTKFsVzqPQxUdF7tHJ/1QHzt35FG6td0BwhrxSG8CQ9SM48NV2fUxLGyL
6feQGCb9jQk4m+ul3VoeRpchhjR43FUtDroSCpcVhRfD+TnF9ycHxrgzPU1CxV0F
UjGWyNMuayoPZOBOqcQrGgwlwM63tyImsnhtn3jMbrN+sZ41ziZgfDryo+8Dau19
yFza/70wr3gm/g3rXhwsGfwweb9GfyHWGzlx1jFlBqnMFYeNbqYPiH5WQqyYL828
3yRDHotDErVp9a1z0k2s1F1WC5wQNKxNoyfslYenLStxbF/oJPpAy1X7rBgcVG4n
8tWe5xRPttRkUQ==
-----END CERTIFICATE-----