Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          26r6Ta8dUv9x8j1Defpj1WyCoydLMOJaL8FMJ9vt0Dw=
Subject key identifier:   E6:C3:87:AE:A1:B4:6B:3B:9A:7A:B1:DF:CC:DD:98:9C:CE:3D:F8:E7
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       01962E61C0C1F2DF46BA2B9D9EE8924FF511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          0BD3
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: WMGl5Ww6wGasskb7KKx/BIHnAkKPhNPpbTrH7zadzzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:c1:f2:df:46:ba:2b:9d:9e:e8:92:4f:f5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=e6c387aea1b46b3b9a7ab1dfccdd989cce3df8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:e8:8a:f6:93:32:b3:ec:e5:f7:33:1b:7c:
                    b5:d2:ec:38:bd:6c:11:1d:9f:a8:db:c5:c9:3d:2c:
                    2a:8d:aa:31:b7:9a:4d:1d:4d:fb:49:5d:a9:59:cc:
                    5f:34:28:0a:29:10:fe:08:da:91:75:1d:a5:fc:46:
                    6d:d0:9b:6d:5e:eb:a0:48:5c:f4:b0:a4:0f:15:c0:
                    34:6e:45:07:22:b7:10:ec:e1:d5:f1:7d:8c:51:db:
                    83:78:c1:3c:a6:24:c0:c7:fa:0a:96:13:29:e3:49:
                    a4:a2:70:70:23:d6:70:05:4e:13:33:a9:d1:42:28:
                    82:bf:49:f8:99:78:da:b4:65:69:3e:7f:b8:ba:0c:
                    a8:43:a1:43:07:7f:58:82:ae:c9:e6:7e:a6:6b:c2:
                    c4:69:68:e1:09:8d:c5:ae:6b:1b:e4:a5:b1:2b:38:
                    84:fa:cd:23:df:af:dc:9d:b6:37:db:8e:8b:5a:98:
                    c2:36:56:e4:6c:11:eb:0b:8b:2d:17:28:2e:6e:1d:
                    22:51:bf:9c:7e:4f:63:5a:34:f2:fe:25:33:fd:f9:
                    21:72:ab:d0:a0:35:f5:bc:a4:27:84:7d:05:28:8f:
                    8a:b0:f6:70:39:0b:9e:b3:3c:40:63:e3:9c:b2:86:
                    93:b2:b2:83:1f:c4:8a:41:64:e8:14:86:b3:de:fa:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:87:AE:A1:B4:6B:3B:9A:7A:B1:DF:CC:DD:98:9C:CE:3D:F8:E7
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:7f:2d:2c:4e:14:4e:d1:e1:55:ba:13:92:55:02:aa:de:
         18:02:bf:42:3e:44:98:7a:03:7b:95:c5:59:c2:8e:3c:36:4a:
         9b:70:0d:3a:ef:8c:62:d0:57:30:c1:b1:13:15:94:59:3b:17:
         c5:14:00:88:69:33:a7:8b:f7:5c:fb:d0:1c:56:72:29:05:1e:
         c4:d6:ae:74:00:e6:bd:c5:96:9f:54:1e:ff:c5:24:35:4a:d5:
         23:85:6e:c5:b5:5d:b5:2b:78:79:0c:e9:ea:35:2a:92:9c:35:
         b8:4a:bb:2d:c7:4a:c8:9d:24:45:f9:50:cc:89:a7:6d:5a:8d:
         9c:6a:69:47:17:39:46:d1:cb:75:88:b3:6b:03:bd:7f:c3:04:
         1d:21:d2:57:24:48:b9:14:59:36:ff:92:33:4c:56:8f:c7:a3:
         26:23:cf:1f:11:5c:33:c4:c2:9f:b0:40:97:b8:b9:12:fd:cc:
         29:63:f3:96:37:f3:3e:87:ff:88:0f:73:d8:20:32:aa:95:88:
         b2:47:83:53:c4:c5:16:89:99:92:ec:ae:49:a4:24:be:33:94:
         dd:a4:f9:86:e0:67:07:c7:b1:82:3a:1c:17:11:14:e2:73:e1:
         80:3e:2b:0d:53:10:1d:50:85:b6:f5:ce:19:ed:e3:a2:e8:88:
         b6:3f:a6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcDB8t9GuiudnuiST/URMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk
NDUzOTgwHhcNMjUwNDEzMDkwMTIwWhcNMjUwNDE0MDkwMTIwWjAzMTEwLwYDVQQD
EyhlNmMzODdhZWExYjQ2YjNiOWE3YWIxZGZjY2RkOTg5Y2NlM2RmOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+roivaTMrPs5fczG3y10uw4vWwR
HZ+o28XJPSwqjaoxt5pNHU37SV2pWcxfNCgKKRD+CNqRdR2l/EZt0JttXuugSFz0
sKQPFcA0bkUHIrcQ7OHV8X2MUduDeME8piTAx/oKlhMp40mkonBwI9ZwBU4TM6nR
QiiCv0n4mXjatGVpPn+4ugyoQ6FDB39Ygq7J5n6ma8LEaWjhCY3Frmsb5KWxKziE
+s0j36/cnbY3246LWpjCNlbkbBHrC4stFygubh0iUb+cfk9jWjTy/iUz/fkhcqvQ
oDX1vKQnhH0FKI+KsPZwOQueszxAY+OcsoaTsrKDH8SKQWToFIaz3vpI+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObDh66htGs7mnqx38zdmJzOPfjnMB8GA1UdIwQY
MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt
Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0
LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdF/LSxO
FE7R4VW6E5JVAqreGAK/Qj5EmHoDe5XFWcKOPDZKm3ANOu+MYtBXMMGxExWUWTsX
xRQAiGkzp4v3XPvQHFZyKQUexNaudADmvcWWn1Qe/8UkNUrVI4VuxbVdtSt4eQzp
6jUqkpw1uEq7LcdKyJ0kRflQzImnbVqNnGppRxc5RtHLdYizawO9f8MEHSHSVyRI
uRRZNv+SM0xWj8ejJiPPHxFcM8TCn7BAl7i5Ev3MKWPzljfzPof/iA9z2CAyqpWI
skeDU8TFFomZkuyuSaQkvjOU3aT5huBnB8exgjocFxEU4nPhgD4rDVMQHVCFtvXO
Ge3jouiItj+mvw==
-----END CERTIFICATE-----