Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File:                     dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier:          xB1H1CZLFXFU3kptiK5uA31j1YFtd81qNzHuAukbL+I=
Subject key identifier:   3A:A0:14:E6:AF:8D:CF:67:25:B6:61:E5:EB:93:58:F9:20:58:26:F4
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       01962F3D6903598E635353508B68EFF220BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
                          2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: IRrY0eFqsCqLpvb2tjKT5q7m3qCuCKxRQZLqD/iY8fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:69:03:59:8e:63:53:53:50:8b:68:ef:f2:20:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=3aa014e6af8dcf6725b661e5eb9358f9205826f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:00:5a:94:f1:d2:a5:07:6e:b5:72:a8:87:
                    fe:6e:e7:bd:4b:5a:12:d3:d9:8b:09:b1:60:5f:d7:
                    4a:be:a3:9c:d8:b9:84:97:8e:9b:b5:2c:db:25:8c:
                    ee:78:8e:f1:19:cd:41:87:95:2c:e0:38:f5:9a:f9:
                    04:3f:ff:d1:03:fc:c5:26:49:53:41:5c:3c:ec:1a:
                    07:a7:49:99:3f:0b:5a:d1:0e:f5:ad:8c:8c:f5:57:
                    bc:c7:8b:cf:43:9b:92:82:cc:e1:bb:0f:44:66:98:
                    e9:d3:2d:10:69:df:51:8c:69:14:53:ff:85:a7:84:
                    ad:0a:66:bc:a6:88:b5:26:99:ab:32:29:d9:a1:a8:
                    96:36:e6:02:d8:ea:76:9c:c2:01:cf:8b:c1:47:c6:
                    55:f7:be:0e:5c:91:a6:36:5a:18:d0:96:a8:40:37:
                    46:d5:31:63:1f:4d:ed:a3:ce:10:1b:26:41:c4:48:
                    28:2b:14:a4:a9:98:3a:b1:dd:ee:0c:41:14:19:19:
                    c5:23:99:92:13:cb:a3:a4:da:f8:80:ff:7b:6d:5e:
                    bb:f1:3a:62:12:b7:0b:8e:8a:46:94:b1:3d:b8:d0:
                    79:ad:71:24:9b:86:0b:d1:d6:bf:c1:7f:4b:64:3e:
                    0f:a1:9c:6e:31:47:08:a0:34:87:e2:8f:b5:33:d0:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A0:14:E6:AF:8D:CF:67:25:B6:61:E5:EB:93:58:F9:20:58:26:F4
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:df:74:36:dc:94:b6:58:94:20:45:72:55:18:7a:dd:e5:
         bf:2d:e8:06:e8:b2:fa:7a:88:a0:df:71:a3:ee:4b:7a:1e:96:
         26:52:1d:04:8e:d4:23:bc:ae:2c:49:6b:eb:5e:60:fc:2b:a8:
         59:23:51:59:95:57:5e:84:6d:6f:64:c9:94:fa:ba:0a:b9:06:
         69:ef:ff:9d:d6:cb:4f:6a:1f:fe:38:48:81:eb:81:47:51:14:
         5f:bc:fe:2e:bf:38:6b:3b:64:bd:a4:d5:07:17:31:a5:f4:9e:
         1f:30:66:66:52:46:99:bb:e1:82:94:6d:99:0f:69:82:3f:a7:
         1b:df:3b:24:47:44:22:93:81:7a:8a:c9:e0:15:7d:76:e2:af:
         a2:c9:7f:28:b4:d1:84:c2:f4:ca:d9:00:fd:3f:c8:09:3f:4b:
         49:6b:a1:27:21:c4:bd:a6:35:69:bd:11:a1:f5:66:53:f5:15:
         5e:5f:c0:84:4a:10:59:94:f3:6c:cc:ed:08:8c:34:aa:95:57:
         86:55:ec:d7:1e:97:7c:6d:df:1d:af:fb:f8:93:8c:f4:12:c3:
         23:82:19:7f:2a:9b:0f:56:1e:c9:6e:4f:5a:9b:5f:ae:8e:61:
         61:14:2d:f7:fa:be:a3:48:9e:95:36:36:50:56:03:2b:7e:e4:
         c2:db:3b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWkDWY5jU1NQi2jv8iC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTc5YjNkZDhiMDkyYmU5MGRhOWY3NDgwZWE3NjFlOWNk
MjY0ODYwHhcNMjUwNDEzMTMwMTE1WhcNMjUwNDE0MTMwMTE1WjAzMTEwLwYDVQQD
EygzYWEwMTRlNmFmOGRjZjY3MjViNjYxZTVlYjkzNThmOTIwNTgyNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD8AWpTx0qUHbrVyqIf+bue9S1oS
09mLCbFgX9dKvqOc2LmEl46btSzbJYzueI7xGc1Bh5Us4Dj1mvkEP//RA/zFJklT
QVw87BoHp0mZPwta0Q71rYyM9Ve8x4vPQ5uSgszhuw9EZpjp0y0Qad9RjGkUU/+F
p4StCma8poi1JpmrMinZoaiWNuYC2Op2nMIBz4vBR8ZV974OXJGmNloY0JaoQDdG
1TFjH03to84QGyZBxEgoKxSkqZg6sd3uDEEUGRnFI5mSE8ujpNr4gP97bV678Tpi
ErcLjopGlLE9uNB5rXEkm4YL0da/wX9LZD4PoZxuMUcIoDSH4o+1M9CkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqgFOavjc9nJbZh5euTWPkgWCb0MB8GA1UdIwQY
MBaAFHVXmz3YsJK+kNqfdIDqdh6c0mSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82Y2MyOTctMTA1Yi00MjVjLWI5ODMt
OTU2MzMwMTcwNjcwLzEvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82Y2MyOTctMTA1Yi00MjVjLWI5ODMtOTU2MzMwMTcwNjcw
LzEvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQLfdDbc
lLZYlCBFclUYet3lvy3oBuiy+nqIoN9xo+5Leh6WJlIdBI7UI7yuLElr615g/Cuo
WSNRWZVXXoRtb2TJlPq6CrkGae//ndbLT2of/jhIgeuBR1EUX7z+Lr84aztkvaTV
BxcxpfSeHzBmZlJGmbvhgpRtmQ9pgj+nG987JEdEIpOBeorJ4BV9duKvosl/KLTR
hML0ytkA/T/ICT9LSWuhJyHEvaY1ab0RofVmU/UVXl/AhEoQWZTzbMztCIw0qpVX
hlXs1x6XfG3fHa/7+JOM9BLDI4IZfyqbD1YeyW5PWptfro5hYRQt9/q+o0ielTY2
UFYDK37kwts7TA==
-----END CERTIFICATE-----