Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File:                     cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier:          xPLZWaq48/0YGWxMB4VG5xUpVBG1XB6NAxCwquD4USo=
Subject key identifier:   5A:DD:A4:41:3B:6A:CA:17:54:AA:5E:0D:8A:CE:3A:E5:3C:BB:DD:7C
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer:       /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial:       01962DF427E6EEB2A637891DB3F16F2755BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number:          10F5
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
                          2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: ac/NOUfesNDQSLOiIfA+4/dYYS+xS0bNGULJwv8lMBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:e6:ee:b2:a6:37:89:1d:b3:f1:6f:27:55:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=5adda4413b6aca1754aa5e0d8ace3ae53cbbdd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b9:49:eb:93:60:15:69:aa:ac:0c:71:a2:1a:
                    f4:2a:2e:56:cd:98:03:82:b6:56:29:22:e5:24:cb:
                    e0:01:57:45:9a:9e:18:1e:ea:6a:82:76:0f:de:57:
                    30:51:de:38:19:8c:52:12:28:69:ea:ca:4c:54:9b:
                    ce:88:99:87:28:26:30:40:56:de:75:f5:39:1c:14:
                    7d:79:d6:05:90:b8:1a:c2:d2:e0:58:0b:d4:a9:d9:
                    2a:b4:71:2f:73:b6:9d:c0:81:d2:d5:48:3c:f0:f6:
                    e4:62:cc:b1:8a:fd:71:95:c3:6a:b6:4a:09:28:d8:
                    40:c9:49:3e:d2:29:0f:0b:74:a1:e9:99:77:ed:57:
                    06:50:a3:44:b7:af:2b:c8:69:fb:96:d6:3c:7f:09:
                    64:56:21:bc:6a:25:98:d0:fb:a0:1a:85:37:ef:d2:
                    cf:8e:87:b6:04:05:92:3a:59:e4:93:b7:9d:67:24:
                    57:83:89:fa:78:4e:8b:09:72:4d:62:1d:82:eb:22:
                    42:fa:c0:0a:16:c6:b9:12:14:3b:db:80:fd:91:c0:
                    34:2e:bc:b6:0a:63:fa:c9:fa:15:7f:6c:94:72:27:
                    26:53:33:11:b5:7f:bf:36:61:28:bd:32:e7:96:bd:
                    5b:bc:cf:02:7e:43:23:c6:63:6f:0e:cb:f8:28:d8:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:A4:41:3B:6A:CA:17:54:AA:5E:0D:8A:CE:3A:E5:3C:BB:DD:7C
            X509v3 Authority Key Identifier:
                keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:99:4f:75:30:ba:b5:c8:1a:ef:19:8d:d0:40:30:ff:93:
         25:fa:e9:bd:f8:7b:3f:13:8b:86:de:6d:32:27:46:db:01:a9:
         93:99:00:04:71:64:7c:df:66:4b:08:4d:b2:ff:60:77:1b:e2:
         eb:c6:72:7c:93:81:52:7a:ea:5e:df:d2:e3:b3:a9:90:ba:d6:
         6a:46:31:1b:5c:f4:a8:cb:2c:d0:d3:4c:95:db:3b:71:7b:b1:
         8f:f3:ab:cf:a3:a3:20:a1:de:9c:c3:aa:91:ec:49:ce:d6:9a:
         27:dd:66:0d:fc:9c:bb:54:ee:78:5a:27:56:2c:90:4b:54:62:
         07:f6:06:49:5c:dd:41:d0:5f:e4:97:d1:07:8a:e9:0d:b5:ea:
         95:fa:33:8d:a3:9e:ff:96:93:c5:60:48:f5:e6:ea:64:5f:f0:
         37:a8:8d:0f:bf:ed:03:a9:74:b6:14:8a:b8:bb:84:6d:05:fc:
         73:09:c9:03:9d:6c:e2:90:5c:a9:38:e3:20:91:86:35:45:19:
         0c:af:45:02:c8:d0:8d:6e:41:c9:bb:28:c5:05:3b:75:af:88:
         1b:ad:3e:54:e2:e4:93:70:a1:c8:85:24:a6:d7:48:65:bd:33:
         d7:f6:cd:14:4e:01:75:38:41:f4:1c:57:b8:92:d6:9c:fa:01:
         a4:f2:ac:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Cfm7rKmN4kds/FvJ1W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux
NTQ1ZWQwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
Eyg1YWRkYTQ0MTNiNmFjYTE3NTRhYTVlMGQ4YWNlM2FlNTNjYmJkZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37lJ65NgFWmqrAxxohr0Ki5WzZgD
grZWKSLlJMvgAVdFmp4YHupqgnYP3lcwUd44GYxSEihp6spMVJvOiJmHKCYwQFbe
dfU5HBR9edYFkLgawtLgWAvUqdkqtHEvc7adwIHS1Ug88PbkYsyxiv1xlcNqtkoJ
KNhAyUk+0ikPC3Sh6Zl37VcGUKNEt68ryGn7ltY8fwlkViG8aiWY0PugGoU379LP
joe2BAWSOlnkk7edZyRXg4n6eE6LCXJNYh2C6yJC+sAKFsa5EhQ724D9kcA0Lry2
CmP6yfoVf2yUcicmUzMRtX+/NmEovTLnlr1bvM8CfkMjxmNvDsv4KNgwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrdpEE7asoXVKpeDYrOOuU8u918MB8GA1UdIwQY
MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt
ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx
LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+KZT3Uw
urXIGu8ZjdBAMP+TJfrpvfh7PxOLht5tMidG2wGpk5kABHFkfN9mSwhNsv9gdxvi
68ZyfJOBUnrqXt/S47OpkLrWakYxG1z0qMss0NNMlds7cXuxj/Orz6OjIKHenMOq
kexJztaaJ91mDfycu1TueFonViyQS1RiB/YGSVzdQdBf5JfRB4rpDbXqlfozjaOe
/5aTxWBI9ebqZF/wN6iND7/tA6l0thSKuLuEbQX8cwnJA51s4pBcqTjjIJGGNUUZ
DK9FAsjQjW5BybsoxQU7da+IG60+VOLkk3ChyIUkptdIZb0z1/bNFE4BdThB9BxX
uJLWnPoBpPKsiQ==
-----END CERTIFICATE-----