Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File:                     oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier:          ogiZtfuttztLcdmxaTjlM9U4DQmBqPxLhz6jKlQtA0U=
Subject key identifier:   32:E1:8F:8C:3B:3D:5E:F5:5A:D6:14:E6:15:06:74:DB:CD:9A:01:59
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer:       /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial:       01962F3D894C9818B4A8CF89F36C7E5EC013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number:          0234
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (hash: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=)
                          2: 58QzCphRddJsBqi71H5oisOTtGM.roa (hash: K7oZA9oPzuB3kuDmCdohN1gPlNbeKKgYedD/MB4pxbM=)
                          3: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (hash: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=)
                          4: Qt9hOGMkdfDH8ID_bHwfLmJlE60.roa (hash: ARZiY2rT8rE43lKmT9EIHjzaS4HpYkA+YcbbFMZTS4E=)
                          5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: bGwxC48BmPcwk88XfAzLNwwpA+6W/mdIGYckZKAgIAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:4c:98:18:b4:a8:cf:89:f3:6c:7e:5e:c0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=32e18f8c3b3d5ef55ad614e6150674dbcd9a0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:24:8e:a4:60:44:fe:12:18:98:00:c4:df:
                    21:66:ea:d4:a0:be:bf:d2:08:88:bf:12:2a:97:cb:
                    b6:38:66:b1:67:26:cd:7a:04:45:a0:36:0a:5b:0c:
                    1b:81:16:79:5f:78:80:c5:b7:33:a1:2d:ec:94:3c:
                    61:7b:d8:d4:ee:9c:c6:17:db:1a:7e:07:70:7b:50:
                    c7:b9:f0:f8:a4:4c:37:36:47:71:29:5e:16:82:7e:
                    75:b9:6d:2e:61:38:2a:cd:34:e9:bd:a8:ec:86:52:
                    cd:30:dd:02:f2:43:5e:bf:01:ba:58:86:7b:fa:ba:
                    91:24:4f:79:4b:93:96:25:ba:7a:88:c9:e1:0b:56:
                    4e:71:93:33:6c:9d:e0:80:bf:e6:b7:63:8b:de:c2:
                    5e:76:dd:ee:c0:04:15:ed:db:22:9c:4f:ca:ec:46:
                    c8:80:19:13:30:76:7e:73:3b:6a:f2:5f:93:d3:0a:
                    16:2b:6d:22:1a:3c:c4:b0:65:ea:92:38:73:e3:00:
                    0b:ac:7a:69:ab:de:fb:e9:ce:9a:43:74:e6:5a:09:
                    21:c1:24:c0:58:3a:d3:3c:6c:01:0d:54:e6:8f:6f:
                    fd:53:0e:ba:4c:16:2d:ab:6a:89:ca:50:19:a3:1a:
                    ed:bc:9f:40:00:ea:a2:21:71:e7:52:bb:6e:3f:8b:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:8F:8C:3B:3D:5E:F5:5A:D6:14:E6:15:06:74:DB:CD:9A:01:59
            X509v3 Authority Key Identifier:
                keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:6b:bc:58:21:ea:b7:7f:ba:43:d6:74:03:0f:5f:bf:8c:
         1a:92:4b:c0:03:f5:40:4d:bc:42:eb:6c:41:f3:32:c7:15:77:
         18:d5:8f:58:8a:d0:5c:28:0c:19:a5:b9:f4:24:24:f9:3d:80:
         62:76:63:ee:b8:82:40:10:68:d4:d1:e5:1c:80:b1:c4:e1:1d:
         21:8a:06:d3:eb:8c:2d:c0:6d:02:93:b2:46:b7:04:9a:22:45:
         ce:e6:bf:6f:2c:9e:a3:45:6e:11:6b:c8:e3:88:47:ef:97:e8:
         ba:aa:0c:bb:03:36:93:c8:ae:28:76:f8:3a:38:63:36:3b:f7:
         ca:ed:6f:93:ac:8a:6b:36:22:6f:80:ab:21:be:e4:83:44:f9:
         53:70:ee:de:7d:dd:62:7f:27:bc:96:59:8f:23:20:0c:7c:18:
         90:40:a5:09:2c:c4:cc:dd:a3:e4:5b:e4:ca:8a:23:c6:f0:a0:
         03:aa:7e:f2:51:a0:ba:27:d0:94:cc:23:33:d9:ae:fb:9f:5b:
         03:35:c2:27:28:c7:62:8b:39:4c:f3:0a:2e:a4:a8:c4:b8:85:
         49:10:cf:40:25:38:3a:11:8b:d8:d2:18:01:23:f3:07:33:14:
         b8:c4:21:68:d0:17:d6:49:97:c0:38:6a:76:c9:69:d0:2e:3f:
         40:9f:fb:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYlMmBi0qM+J82x+XsATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWJmNTRkMDI4ZWU0NzY0ZjYyZjc4YWQ4NzFkYmYwMjYy
Mjg3ODgwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
EygzMmUxOGY4YzNiM2Q1ZWY1NWFkNjE0ZTYxNTA2NzRkYmNkOWEwMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUgkjqRgRP4SGJgAxN8hZurUoL6/
0giIvxIql8u2OGaxZybNegRFoDYKWwwbgRZ5X3iAxbczoS3slDxhe9jU7pzGF9sa
fgdwe1DHufD4pEw3NkdxKV4Wgn51uW0uYTgqzTTpvajshlLNMN0C8kNevwG6WIZ7
+rqRJE95S5OWJbp6iMnhC1ZOcZMzbJ3ggL/mt2OL3sJedt3uwAQV7dsinE/K7EbI
gBkTMHZ+cztq8l+T0woWK20iGjzEsGXqkjhz4wALrHppq9776c6aQ3TmWgkhwSTA
WDrTPGwBDVTmj2/9Uw66TBYtq2qJylAZoxrtvJ9AAOqiIXHnUrtuP4skHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLhj4w7PV71WtYU5hUGdNvNmgFZMB8GA1UdIwQY
MBaAFKHr9U0CjuR2T2L3ithx2/AmIoeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQt
NDdhNWJmNWIzMTNkLzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQtNDdhNWJmNWIzMTNk
LzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSxrvFgh
6rd/ukPWdAMPX7+MGpJLwAP1QE28QutsQfMyxxV3GNWPWIrQXCgMGaW59CQk+T2A
YnZj7riCQBBo1NHlHICxxOEdIYoG0+uMLcBtApOyRrcEmiJFzua/byyeo0VuEWvI
44hH75fouqoMuwM2k8iuKHb4OjhjNjv3yu1vk6yKazYib4CrIb7kg0T5U3Du3n3d
Yn8nvJZZjyMgDHwYkEClCSzEzN2j5FvkyoojxvCgA6p+8lGguifQlMwjM9mu+59b
AzXCJyjHYos5TPMKLqSoxLiFSRDPQCU4OhGL2NIYASPzBzMUuMQhaNAX1kmXwDhq
dslp0C4/QJ/7Gg==
-----END CERTIFICATE-----