Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File:                     4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier:          AB76Xwq1+FToDpiAKEPv5G1Ex0fOk2h8ZsA6pSLXML0=
Subject key identifier:   4D:97:C6:FA:8F:B7:16:B2:12:60:E8:B2:F3:15:23:97:B4:B2:4B:4D
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer:       /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial:       01962F3DCD49EA02C56AB9033069DCCB9710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number:          05E6
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: st2LS4L2IwwFJgDN+goVzRZKnjPdQEXxqWxMqKt3nPQ=)
                          2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cd:49:ea:02:c5:6a:b9:03:30:69:dc:cb:97:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=4d97c6fa8fb716b21260e8b2f3152397b4b24b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:9a:d0:c3:55:56:7f:ef:ad:27:b8:46:a7:
                    6d:b9:66:61:bb:a1:ab:f1:82:4c:f2:28:ff:16:04:
                    ef:c9:c6:bd:a7:1a:5d:c7:1e:03:db:5b:ff:a6:58:
                    61:ce:33:99:2b:38:71:17:4b:6f:68:0b:bc:cc:a6:
                    29:8a:fe:11:be:85:fb:8a:e0:59:16:5c:46:a8:e7:
                    1d:41:09:7b:95:7d:49:a3:36:58:6e:b4:08:54:94:
                    64:f2:20:67:a9:9d:7f:97:da:e1:0e:99:f8:d8:28:
                    9b:e2:92:bb:13:c4:8b:7f:3c:05:b7:2c:47:33:79:
                    ef:f9:89:2e:98:8f:b8:f1:4d:83:9d:f2:c5:42:f5:
                    d6:11:b7:53:00:6e:cd:f8:1e:fa:70:da:c9:93:60:
                    42:2f:32:c6:86:45:6c:3d:79:e0:16:11:2f:85:85:
                    af:8b:e7:3d:4c:d3:e0:88:6a:07:24:bb:53:d2:d4:
                    1e:f1:d7:d1:d2:31:dc:46:3b:bd:d0:3b:be:80:bd:
                    ef:f8:85:7f:5f:da:44:77:74:4f:f3:2a:97:d8:bb:
                    97:61:87:1f:3a:70:94:2d:14:73:bc:b0:43:01:b9:
                    dd:51:9e:22:51:95:5d:ea:c3:0d:5c:02:4d:f1:6a:
                    26:46:2a:85:18:cf:f5:fd:e1:fd:c8:75:55:25:3f:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:C6:FA:8F:B7:16:B2:12:60:E8:B2:F3:15:23:97:B4:B2:4B:4D
            X509v3 Authority Key Identifier:
                keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:42:e8:cb:e3:5d:4d:13:ab:44:8c:7d:ee:ff:f9:1a:69:ac:
         5c:64:d0:43:77:b3:b9:7a:38:a3:2d:52:86:35:63:ca:20:1b:
         ee:a5:1e:f0:f0:43:36:6c:7f:5d:0c:f1:bc:7e:65:42:45:b0:
         7c:d8:af:eb:3a:eb:81:4b:80:73:17:6d:d9:2c:88:ea:7a:73:
         5a:9d:ae:bc:70:28:1f:a1:28:fd:7a:fa:8e:f2:70:42:b9:0f:
         cc:7b:19:3e:ad:40:9e:51:3e:51:b1:ad:6e:c8:4b:b5:15:b4:
         ce:37:e5:63:91:dd:36:98:24:21:86:23:c9:94:2c:e5:98:c2:
         42:62:da:12:5d:04:f2:6e:e9:50:de:11:83:b7:63:ac:7a:5d:
         2b:d7:dd:16:77:31:1f:6c:09:51:35:30:97:0c:e0:82:fc:06:
         98:00:b3:69:74:4e:31:fd:0b:24:09:71:01:81:22:be:e4:a1:
         de:5c:e2:45:ac:d7:9b:b1:54:59:bd:13:0d:8c:9b:d8:ab:0a:
         3b:d5:11:dd:0f:ef:49:7a:77:74:75:a3:42:63:5c:90:2e:f5:
         0c:b3:7f:77:1f:8e:c6:0b:9b:aa:bf:ce:7b:e7:34:3e:72:c1:
         38:66:54:32:7d:09:65:c9:e7:4a:3e:25:2f:6a:72:28:77:28:
         ad:6f:1b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPc1J6gLFarkDMGncy5cQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz
ZWFkYWQwHhcNMjUwNDEzMTMwMTQxWhcNMjUwNDE0MTMwMTQxWjAzMTEwLwYDVQQD
Eyg0ZDk3YzZmYThmYjcxNmIyMTI2MGU4YjJmMzE1MjM5N2I0YjI0YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWa0MNVVn/vrSe4RqdtuWZhu6Gr
8YJM8ij/FgTvyca9pxpdxx4D21v/plhhzjOZKzhxF0tvaAu8zKYpiv4RvoX7iuBZ
FlxGqOcdQQl7lX1JozZYbrQIVJRk8iBnqZ1/l9rhDpn42Cib4pK7E8SLfzwFtyxH
M3nv+YkumI+48U2DnfLFQvXWEbdTAG7N+B76cNrJk2BCLzLGhkVsPXngFhEvhYWv
i+c9TNPgiGoHJLtT0tQe8dfR0jHcRju90Du+gL3v+IV/X9pEd3RP8yqX2LuXYYcf
OnCULRRzvLBDAbndUZ4iUZVd6sMNXAJN8WomRiqFGM/1/eH9yHVVJT9KWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2XxvqPtxayEmDosvMVI5e0sktNMB8GA1UdIwQY
MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt
M2U2NjBkMDI1MmRiLzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi
LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkLoy+Nd
TROrRIx97v/5GmmsXGTQQ3ezuXo4oy1ShjVjyiAb7qUe8PBDNmx/XQzxvH5lQkWw
fNiv6zrrgUuAcxdt2SyI6npzWp2uvHAoH6Eo/Xr6jvJwQrkPzHsZPq1AnlE+UbGt
bshLtRW0zjflY5HdNpgkIYYjyZQs5ZjCQmLaEl0E8m7pUN4Rg7djrHpdK9fdFncx
H2wJUTUwlwzggvwGmACzaXROMf0LJAlxAYEivuSh3lziRazXm7FUWb0TDYyb2KsK
O9UR3Q/vSXp3dHWjQmNckC71DLN/dx+Oxgubqr/Oe+c0PnLBOGZUMn0JZcnnSj4l
L2pyKHcorW8bGw==
-----END CERTIFICATE-----