Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          Fd5bci9+vOfTJidf3JDEuPhD3CNLz9hSzxp00xAJ7Vg=
Subject key identifier:   D8:5E:9E:73:BA:90:6D:C1:C4:28:EE:EE:E7:DF:CB:38:55:CE:9D:2E
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01962F7490A19804CC501ECC8E21335A84A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          153D
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: 36QOymunx5ltpfCv7RGqukViFTI.roa (hash: V1hhAEF9YFC1x51fmgBF4Rv4xi3g8RRx1BsDO5r3iOw=)
                          2: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=)
                          3: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=)
                          4: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=)
                          5: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=)
                          6: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=)
                          7: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=)
                          8: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=)
                          9: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=)
                          10: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=)
                          11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=)
                          12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=)
                          13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=)
                          14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=)
                          15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=)
                          16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=)
                          17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 4N6rWn/zSuAcLJrtf17DAYoM/3276/L+6rVuopyg0hQ=)
                          18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=)
                          19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=)
                          20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:a1:98:04:cc:50:1e:cc:8e:21:33:5a:84:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=d85e9e73ba906dc1c428eeeee7dfcb3855ce9d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:a1:31:51:54:67:e1:b4:b2:ad:98:11:f8:
                    8f:43:7c:93:2b:30:8d:cb:06:ed:43:49:89:70:3d:
                    a0:b1:37:f5:28:7a:c7:1b:e8:fc:02:00:ad:8d:37:
                    f4:ab:8d:5c:b0:db:8e:47:d0:5d:fd:f5:0f:86:a9:
                    b8:a6:fb:af:a4:bb:59:3d:02:2b:25:cb:0f:01:95:
                    be:29:b7:02:58:2b:54:87:1c:fd:82:fd:4d:9e:45:
                    b5:d5:e2:15:b6:d0:e8:c2:a9:48:74:1e:a0:fb:a2:
                    b5:d7:c1:70:b9:f0:cc:59:a2:98:3f:2a:27:dc:c2:
                    ef:b0:81:82:93:2e:53:e2:9d:c0:43:81:fc:c4:fb:
                    23:c3:95:91:58:b4:2a:42:3e:d7:0e:28:54:d3:0c:
                    14:67:72:72:90:8f:a6:d3:a9:b4:61:e3:fb:47:d7:
                    f2:e6:4d:ba:8d:7f:fe:49:a3:61:0c:6f:2c:e8:d5:
                    2a:07:d2:e0:ec:2a:e3:be:b7:1c:80:39:20:52:3a:
                    b1:6c:cc:6e:39:bf:37:bf:95:ec:90:ca:3f:c9:96:
                    d4:16:3a:77:8f:79:62:74:99:e7:16:57:cb:ab:71:
                    81:21:c6:a6:c7:c2:06:6a:0f:a7:5b:58:7b:72:1d:
                    e3:70:6e:6f:01:e5:b2:38:85:f6:74:13:08:2e:03:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5E:9E:73:BA:90:6D:C1:C4:28:EE:EE:E7:DF:CB:38:55:CE:9D:2E
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6d:eb:26:62:08:3e:25:9c:6b:37:95:a1:67:cc:eb:01:47:
         51:a5:4c:ce:5e:a7:6d:21:db:04:aa:ab:15:c2:e5:19:6a:de:
         8f:01:2b:3d:84:63:10:e4:81:35:de:ae:25:ef:4d:44:c8:d2:
         5d:fb:71:b8:7c:f1:0b:ca:9c:15:62:cd:9a:aa:97:0c:50:53:
         18:84:42:f3:38:5a:14:c1:7b:3c:cf:e7:bb:96:c5:e2:d5:8b:
         28:4c:37:ad:16:66:36:1d:5e:04:c4:f7:e7:5f:0e:4a:97:77:
         00:1e:70:07:c9:f1:c9:b3:5d:cd:30:e8:79:d9:13:35:58:25:
         e1:0c:ba:1e:00:93:60:05:2f:34:4e:db:87:25:3c:de:d4:e5:
         2e:55:d4:23:46:dd:d0:04:cc:59:7a:8d:18:eb:b1:b4:bc:16:
         df:4b:a4:ac:df:bf:dd:70:4f:ba:e2:1b:f5:0b:6c:7e:52:ed:
         37:fe:5e:bc:52:76:1e:6b:b9:85:4f:c6:02:60:6e:62:d2:33:
         dd:75:f6:44:cf:59:76:d8:e7:37:e3:0e:3b:d9:f9:97:f3:97:
         97:0f:03:d0:3f:e6:9d:87:fc:9a:73:d0:42:47:e8:19:e4:c1:
         1f:0d:d6:f2:f2:88:66:9d:d6:46:d0:d3:96:da:66:e3:63:62:
         39:c7:da:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJChmATMUB7MjiEzWoSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhkODVlOWU3M2JhOTA2ZGMxYzQyOGVlZWVlN2RmY2IzODU1Y2U5ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNqhMVFUZ+G0sq2YEfiPQ3yTKzCN
ywbtQ0mJcD2gsTf1KHrHG+j8AgCtjTf0q41csNuOR9Bd/fUPhqm4pvuvpLtZPQIr
JcsPAZW+KbcCWCtUhxz9gv1NnkW11eIVttDowqlIdB6g+6K118FwufDMWaKYPyon
3MLvsIGCky5T4p3AQ4H8xPsjw5WRWLQqQj7XDihU0wwUZ3JykI+m06m0YeP7R9fy
5k26jX/+SaNhDG8s6NUqB9Lg7CrjvrccgDkgUjqxbMxuOb83v5XskMo/yZbUFjp3
j3lidJnnFlfLq3GBIcamx8IGag+nW1h7ch3jcG5vAeWyOIX2dBMILgMUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhennO6kG3BxCju7uffyzhVzp0uMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj23rJmII
PiWcazeVoWfM6wFHUaVMzl6nbSHbBKqrFcLlGWrejwErPYRjEOSBNd6uJe9NRMjS
XftxuHzxC8qcFWLNmqqXDFBTGIRC8zhaFMF7PM/nu5bF4tWLKEw3rRZmNh1eBMT3
518OSpd3AB5wB8nxybNdzTDoedkTNVgl4Qy6HgCTYAUvNE7bhyU83tTlLlXUI0bd
0ATMWXqNGOuxtLwW30ukrN+/3XBPuuIb9QtsflLtN/5evFJ2Hmu5hU/GAmBuYtIz
3XX2RM9ZdtjnN+MOO9n5l/OXlw8D0D/mnYf8mnPQQkfoGeTBHw3W8vKIZp3WRtDT
ltpm42NiOcfaeQ==
-----END CERTIFICATE-----