Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File:                     tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier:          HsMGYphz01gS1vGXeCrDps6BFYphK2sqQhRiUbLg1XI=
Subject key identifier:   08:32:5B:E0:FB:63:C1:9F:35:66:5E:31:0F:3E:BD:38:B3:1C:83:78
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer:       /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial:       01962E61E04C277FBB90E2E5D4FC9C939D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number:          0468
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
                          2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: xOlYAk//Y3oYau7rj8H1tFpAaIoK25hSC21WpKtJ2Cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:4c:27:7f:bb:90:e2:e5:d4:fc:9c:93:9d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=08325be0fb63c19f35665e310f3ebd38b31c8378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:a5:b5:74:75:83:9d:76:0a:f4:62:74:94:
                    a1:49:26:33:20:23:6d:6f:72:af:3b:7f:6b:bf:14:
                    e2:24:ce:66:2a:cc:1c:75:ba:51:39:24:82:89:7b:
                    10:9e:b9:d7:71:92:76:cd:9e:84:07:63:b4:c2:80:
                    36:dd:cf:8b:c9:31:f1:20:41:67:62:ec:27:09:23:
                    e5:af:59:07:22:86:89:a9:0c:8b:62:b0:ff:50:d1:
                    98:20:4f:b0:19:57:41:78:43:bc:7c:7e:47:c5:9d:
                    a6:7b:6f:02:a0:27:c0:23:be:eb:45:7f:8c:a2:4b:
                    b7:7a:32:53:ce:a5:1f:6b:87:76:74:b5:03:b3:17:
                    b8:f3:7c:b3:3e:16:43:ad:a4:c1:93:9e:5d:c0:37:
                    25:14:b2:82:d4:35:ad:b0:1d:e5:cb:54:85:f4:65:
                    bf:ad:ef:74:e5:d2:70:8e:33:b9:20:1e:c0:5b:d7:
                    39:ad:de:8d:00:a6:1f:b4:06:d5:57:3b:52:b5:4e:
                    e2:4c:65:a9:d4:41:95:8a:01:52:34:0c:80:e5:d0:
                    26:b4:d6:b9:44:69:7a:3b:8f:15:5a:54:db:e4:fa:
                    06:a4:39:ba:8a:ca:4a:4c:f0:73:8f:c3:4c:5c:2d:
                    1a:d3:1a:11:f3:d4:70:49:75:9f:c4:36:e3:b8:f2:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:5B:E0:FB:63:C1:9F:35:66:5E:31:0F:3E:BD:38:B3:1C:83:78
            X509v3 Authority Key Identifier:
                keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:57:40:1c:c4:6d:a0:e2:4e:cb:fe:fa:be:bf:ab:cf:18:
         71:1c:7b:e7:6f:e4:34:e4:ec:69:c0:1a:33:d4:13:cc:83:10:
         dd:79:88:a6:bd:8a:7b:ef:37:7c:e2:43:d4:49:45:8a:3b:ec:
         9c:a1:09:7e:32:47:f2:3f:72:2c:d3:3d:41:b8:3b:39:a8:70:
         b5:f5:a1:16:64:78:70:66:c0:54:6c:f8:ea:a8:38:c4:c4:46:
         8f:29:0c:ed:04:af:f5:a9:1c:d6:db:d7:c2:49:76:c7:68:de:
         31:ba:f9:4c:49:67:fd:71:74:f7:2e:23:89:cc:a3:65:87:9f:
         e4:93:65:71:c0:7d:ef:b7:5f:66:73:d5:78:e1:bb:f2:c2:83:
         42:d9:49:16:96:d2:63:95:43:c8:c1:cc:5d:d6:0d:8d:39:e1:
         9f:6b:ed:93:f3:6d:63:61:76:be:bf:82:d5:02:8b:03:3a:69:
         38:45:4c:7b:63:ef:b0:3b:62:e2:3d:70:09:c4:a3:2b:90:6e:
         db:46:ae:38:83:50:d1:a9:70:50:e2:86:d2:6c:74:93:9e:5b:
         99:f4:f5:3a:26:9b:f5:d7:e1:3c:1a:d7:bf:64:d0:ea:17:81:
         9a:6a:24:81:8c:dd:1d:1e:69:a9:71:ee:fa:1e:f9:2f:d7:1b:
         2f:89:8a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeBMJ3+7kOLl1Pyck50HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzM5OGMwNzMyNWM0MGU3ZDc2ZDIzOTZhMWJlODVjNDJm
ZGMyYzgwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
EygwODMyNWJlMGZiNjNjMTlmMzU2NjVlMzEwZjNlYmQzOGIzMWM4Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteWltXR1g512CvRidJShSSYzICNt
b3KvO39rvxTiJM5mKswcdbpROSSCiXsQnrnXcZJ2zZ6EB2O0woA23c+LyTHxIEFn
YuwnCSPlr1kHIoaJqQyLYrD/UNGYIE+wGVdBeEO8fH5HxZ2me28CoCfAI77rRX+M
oku3ejJTzqUfa4d2dLUDsxe483yzPhZDraTBk55dwDclFLKC1DWtsB3ly1SF9GW/
re905dJwjjO5IB7AW9c5rd6NAKYftAbVVztStU7iTGWp1EGVigFSNAyA5dAmtNa5
RGl6O48VWlTb5PoGpDm6ispKTPBzj8NMXC0a0xoR89RwSXWfxDbjuPIQdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgyW+D7Y8GfNWZeMQ8+vTizHIN4MB8GA1UdIwQY
MBaAFLXDmMBzJcQOfXbSOWob6FxC/cLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUt
YWYxMzdjY2IyYjY5LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUtYWYxMzdjY2IyYjY5
LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYBXQBzE
baDiTsv++r6/q88YcRx752/kNOTsacAaM9QTzIMQ3XmIpr2Ke+83fOJD1ElFijvs
nKEJfjJH8j9yLNM9Qbg7OahwtfWhFmR4cGbAVGz46qg4xMRGjykM7QSv9akc1tvX
wkl2x2jeMbr5TEln/XF09y4jicyjZYef5JNlccB977dfZnPVeOG78sKDQtlJFpbS
Y5VDyMHMXdYNjTnhn2vtk/NtY2F2vr+C1QKLAzppOEVMe2PvsDti4j1wCcSjK5Bu
20auOINQ0alwUOKG0mx0k55bmfT1Oiab9dfhPBrXv2TQ6heBmmokgYzdHR5pqXHu
+h75L9cbL4mK2w==
-----END CERTIFICATE-----