Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File:                     4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier:          jXlSEOi8wDIRtL+q0FEUeFsTtxCHNoBz/hC9wyURYtI=
Subject key identifier:   4E:44:B7:07:73:D2:2A:90:83:CA:CA:D4:48:6E:38:34:0E:A9:13:E8
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       01962F74C0F3CE08A3D589271D778FAC51E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: u5BWmDBrl4phHCBZsexm5P/XS4SfeOL5OIYpl0FZUIw=)
                          2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:f3:ce:08:a3:d5:89:27:1d:77:8f:ac:51:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=4e44b70773d22a9083cacad4486e38340ea913e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:81:08:6b:0d:ac:f4:b1:f9:56:5c:f8:c9:
                    e9:e3:0e:3c:4b:e9:e7:e5:7b:e9:19:39:6c:a3:a8:
                    da:6b:43:52:93:86:96:23:c8:0a:58:1a:d6:7e:f3:
                    57:f5:ea:ed:64:b3:e8:e2:05:b9:62:57:42:03:9b:
                    0a:fd:c8:a4:f2:8a:ce:8b:b2:1b:f5:4d:a2:ed:c3:
                    cf:77:77:c0:4e:f4:42:1c:21:9e:87:4f:f1:c9:4b:
                    59:f9:ce:12:1e:23:fa:54:a5:e5:52:bd:d1:eb:8c:
                    9e:7f:2a:0a:58:19:c7:e0:60:ec:94:cb:a8:16:5d:
                    e6:35:42:97:da:51:38:6d:25:3d:32:3c:c5:e7:a2:
                    f7:06:13:9a:7d:33:b8:f8:fe:e6:f9:3f:25:4b:6b:
                    30:ac:67:98:53:de:74:c1:52:f6:cf:df:ea:9f:46:
                    45:99:50:69:45:59:b9:97:b3:53:74:71:56:c1:87:
                    04:d9:f8:78:ae:76:ca:e5:2e:a6:9e:51:a2:51:e7:
                    42:c9:81:33:76:64:da:63:26:51:20:72:4f:d9:b2:
                    9e:69:ee:2c:8b:02:7e:65:01:aa:2d:82:f0:62:2c:
                    94:3d:8e:c2:55:55:ec:d9:88:cd:d0:d3:85:a7:7e:
                    f2:62:60:e5:fb:e7:05:27:51:ff:e5:33:57:ea:58:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:B7:07:73:D2:2A:90:83:CA:CA:D4:48:6E:38:34:0E:A9:13:E8
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:f5:73:54:ab:cd:76:84:ec:b2:2e:f5:43:54:82:9e:f7:
         10:03:f6:bf:14:b6:11:e1:10:31:12:47:c5:bd:ac:56:fa:86:
         3b:e4:99:88:ab:f3:c6:ad:c6:e8:3a:b6:0a:34:dd:ed:4c:c6:
         33:7e:79:07:da:80:f2:65:00:63:1b:d3:29:b4:ba:e9:0e:e6:
         b5:24:69:3c:96:d8:46:5c:87:18:b6:ff:d4:78:84:4b:01:3c:
         65:e1:f4:6f:a1:f1:de:22:bd:0c:32:af:e3:bb:05:53:dd:3f:
         96:ca:82:b8:d2:e0:28:8d:bd:8c:de:ae:af:38:08:5b:16:57:
         38:c4:cf:9c:17:83:1f:2a:3d:f0:bd:c3:2d:be:ed:34:ef:5a:
         11:0a:18:aa:9e:bd:cc:84:7f:94:61:f1:96:53:f1:52:de:af:
         c0:ce:ce:f2:4e:20:fa:b3:a6:c3:5d:09:1f:d6:9a:01:c1:c1:
         1b:a2:f0:68:82:30:06:7d:9f:f3:14:e8:38:46:47:b3:5b:2c:
         c5:e5:79:59:d1:a3:06:be:5f:36:01:c7:32:bb:67:3c:1d:d9:
         5f:aa:30:57:2e:01:b8:e4:1c:34:1f:dc:13:da:e3:58:3d:0a:
         5d:f7:99:e7:71:74:85:f8:ec:00:2f:79:bf:e5:85:16:99:b4:
         56:12:12:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMDzzgij1YknHXePrFHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjUwNDEzMTQwMTQyWhcNMjUwNDE0MTQwMTQyWjAzMTEwLwYDVQQD
Eyg0ZTQ0YjcwNzczZDIyYTkwODNjYWNhZDQ0ODZlMzgzNDBlYTkxM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKBCGsNrPSx+VZc+Mnp4w48S+nn
5XvpGTlso6jaa0NSk4aWI8gKWBrWfvNX9ertZLPo4gW5YldCA5sK/cik8orOi7Ib
9U2i7cPPd3fATvRCHCGeh0/xyUtZ+c4SHiP6VKXlUr3R64yefyoKWBnH4GDslMuo
Fl3mNUKX2lE4bSU9MjzF56L3BhOafTO4+P7m+T8lS2swrGeYU950wVL2z9/qn0ZF
mVBpRVm5l7NTdHFWwYcE2fh4rnbK5S6mnlGiUedCyYEzdmTaYyZRIHJP2bKeae4s
iwJ+ZQGqLYLwYiyUPY7CVVXs2YjN0NOFp37yYmDl++cFJ1H/5TNX6ljBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Etwdz0iqQg8rK1EhuODQOqRPoMB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC31c1Sr
zXaE7LIu9UNUgp73EAP2vxS2EeEQMRJHxb2sVvqGO+SZiKvzxq3G6Dq2CjTd7UzG
M355B9qA8mUAYxvTKbS66Q7mtSRpPJbYRlyHGLb/1HiESwE8ZeH0b6Hx3iK9DDKv
47sFU90/lsqCuNLgKI29jN6urzgIWxZXOMTPnBeDHyo98L3DLb7tNO9aEQoYqp69
zIR/lGHxllPxUt6vwM7O8k4g+rOmw10JH9aaAcHBG6LwaIIwBn2f8xToOEZHs1ss
xeV5WdGjBr5fNgHHMrtnPB3ZX6owVy4BuOQcNB/cE9rjWD0KXfeZ53F0hfjsAC95
v+WFFpm0VhIS/w==
-----END CERTIFICATE-----