Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File:                     B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier:          8K0lZlg2Ua2SpApnoceBn1Fio6BvJurGXfCsdPOfSGs=
Subject key identifier:   C1:66:2A:78:23:57:76:0D:42:C9:49:5A:11:20:BA:C9:DC:27:56:77
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer:       /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial:       01962E61D6D1465D384D325CEF7646ACF601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: UqgjGaOW9609wTMtvKfOjTKmjOyWgqkzRram/0KUDZ8=)
                          2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:d1:46:5d:38:4d:32:5c:ef:76:46:ac:f6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=c1662a782357760d42c9495a1120bac9dc275677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:54:1f:1f:14:94:74:3d:17:d6:66:49:1a:
                    c8:dc:ac:c2:75:41:2f:bd:87:ef:d3:60:74:f9:a6:
                    12:54:4f:ee:22:82:6f:be:56:17:eb:1e:32:4e:6b:
                    52:c8:9e:2f:82:0a:62:d2:c2:8b:8f:cb:19:da:e5:
                    e3:85:3e:02:b1:ae:cf:34:4d:54:7f:4a:74:cc:37:
                    13:85:66:46:0c:c0:e1:75:a6:56:4c:57:2b:df:fd:
                    2d:de:f3:e7:23:51:fd:9b:23:d4:4f:fa:11:29:54:
                    e8:54:fa:30:68:05:ad:f3:7b:d4:ac:bc:fa:08:70:
                    08:4b:d3:d9:3d:c0:c6:8b:ac:8d:87:c6:fc:4a:e1:
                    83:7b:5a:f0:b7:21:48:d5:e2:2b:04:58:74:eb:40:
                    70:98:7e:80:54:ce:88:ad:dc:0a:35:57:7d:df:ce:
                    2b:dd:e3:be:2d:c1:2d:c4:2f:7f:e9:37:b0:cd:de:
                    85:b7:46:af:f1:54:f6:dc:7d:33:88:af:53:1e:1e:
                    ae:1e:cd:0f:ba:3a:bd:73:8a:ab:5d:b4:b8:58:ad:
                    4e:6a:e5:af:b0:e5:de:1b:4f:c9:7d:90:a0:5b:8e:
                    2e:bd:99:c2:ca:15:d3:ad:23:0c:2b:4f:b1:b6:75:
                    d4:e7:93:1c:33:53:7f:08:14:e5:58:4c:6b:c1:9c:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:2A:78:23:57:76:0D:42:C9:49:5A:11:20:BA:C9:DC:27:56:77
            X509v3 Authority Key Identifier:
                keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:ba:3d:fe:f4:db:32:46:ab:f7:43:79:81:38:c7:79:8d:
         c2:ca:58:33:aa:cf:2e:8c:7a:c0:7f:23:0e:5e:7e:5a:76:c7:
         69:d6:6d:d0:29:d2:1e:0c:3e:42:df:70:94:ee:c4:81:8a:9d:
         4a:d9:a2:2c:f2:2b:ec:e1:61:9e:39:e4:dd:2c:4b:b1:9c:63:
         ea:ea:c7:43:1c:be:28:51:4d:4f:a0:bd:51:21:86:a8:73:5c:
         f0:43:1d:54:cc:47:b4:e2:9e:49:ce:0e:f5:61:81:b5:6b:26:
         3a:2b:d6:50:00:06:f4:78:fa:92:4d:1c:91:ac:d9:54:7d:fb:
         67:dc:f8:51:19:e7:dd:a3:3f:55:82:18:5a:a6:b2:36:cb:71:
         63:f6:22:2f:b7:23:81:22:6c:54:9c:bc:64:f4:f8:79:fa:d5:
         3c:ff:e8:12:13:51:8c:be:47:95:33:ab:2d:fb:b4:ec:25:4b:
         9a:d8:83:ec:65:d7:42:b7:86:36:23:62:33:0b:52:05:89:a3:
         54:a7:f0:f0:5c:20:9a:21:08:52:4c:1f:d9:78:5c:67:1b:3b:
         44:86:09:92:8a:bf:e1:ca:7c:85:90:85:3a:aa:15:49:a5:81:
         ed:71:8b:d7:f3:63:66:db:92:d7:56:5f:54:c2:08:43:42:b9:
         a1:ef:7a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdbRRl04TTJc73ZGrPYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3
M2I2NDMwHhcNMjUwNDEzMDkwMTI1WhcNMjUwNDE0MDkwMTI1WjAzMTEwLwYDVQQD
EyhjMTY2MmE3ODIzNTc3NjBkNDJjOTQ5NWExMTIwYmFjOWRjMjc1Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ1UHx8UlHQ9F9ZmSRrI3KzCdUEv
vYfv02B0+aYSVE/uIoJvvlYX6x4yTmtSyJ4vggpi0sKLj8sZ2uXjhT4Csa7PNE1U
f0p0zDcThWZGDMDhdaZWTFcr3/0t3vPnI1H9myPUT/oRKVToVPowaAWt83vUrLz6
CHAIS9PZPcDGi6yNh8b8SuGDe1rwtyFI1eIrBFh060BwmH6AVM6IrdwKNVd9384r
3eO+LcEtxC9/6Tewzd6Ft0av8VT23H0ziK9THh6uHs0Pujq9c4qrXbS4WK1OauWv
sOXeG0/JfZCgW44uvZnCyhXTrSMMK0+xtnXU55McM1N/CBTlWExrwZzz8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFmKngjV3YNQslJWhEgusncJ1Z3MB8GA1UdIwQY
MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt
MzRmN2Q1MTMxMzY3LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3
LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmG6Pf70
2zJGq/dDeYE4x3mNwspYM6rPLox6wH8jDl5+WnbHadZt0CnSHgw+Qt9wlO7EgYqd
StmiLPIr7OFhnjnk3SxLsZxj6urHQxy+KFFNT6C9USGGqHNc8EMdVMxHtOKeSc4O
9WGBtWsmOivWUAAG9Hj6kk0ckazZVH37Z9z4URnn3aM/VYIYWqayNstxY/YiL7cj
gSJsVJy8ZPT4efrVPP/oEhNRjL5HlTOrLfu07CVLmtiD7GXXQreGNiNiMwtSBYmj
VKfw8FwgmiEIUkwf2XhcZxs7RIYJkoq/4cp8hZCFOqoVSaWB7XGL1/NjZtuS11Zf
VMIIQ0K5oe96tw==
-----END CERTIFICATE-----